Commit 68c4c71f authored by Daniel Stenberg's avatar Daniel Stenberg Committed by Johan Bergström
Browse files

ares_create_query: avoid single-byte buffer overwrite

Incorrect string length calculation when passing escaped dot.

- CVE: CVE-2016-5180
- Upstream bug: https://c-ares.haxx.se/adv_20160929.html

PR-URL: https://github.com/nodejs/node/pull/8849


Reviewed-By: default avatarMyles Borins <myles.borins@gmail.com>
Reviewed-By: default avatarJames M Snell <jasnell@gmail.com>
Reviewed-By: default avatarJohan Bergström <bugs@bergstroem.nu>
Reviewed-By: default avatarFedor Indutny <fedor.indutny@gmail.com>
parent 3c5cf127
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment