URI parser needs to do printable ascii validation for string result

9 months ago · 0f0674c42e
parent d94961c5fb
commit 0f0674c42e
1 changed files with 5 additions and 0 deletions
--- a/src/lib/ares_dns_parse.c
+++ b/src/lib/ares_dns_parse.c
@ -632,6 +632,11 @@ static ares_status_t ares_dns_parse_rr_uri(ares__buf_t *buf, ares_dns_rr_t *rr,
    return status;
  }

+  if (!ares__str_isprint(name, remaining_len)) {
+    ares_free(name);
+    return ARES_EBADRESP;
+  }
+
  status = ares_dns_rr_set_str_own(rr, ARES_RR_URI_TARGET, name);
  if (status != ARES_SUCCESS) {
    ares_free(name);