Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • BIND BIND
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 570
    • Issues 570
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 100
    • Merge requests 100
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • ISC Open Source ProjectsISC Open Source Projects
  • BINDBIND
  • Issues
  • #2417
Closed
Open
Issue created Jan 25, 2021 by Michal Nowak@mnowakOwner

CID 316513: Insecure data handling (TAINTED_SCALAR)

*** CID 316513:  Insecure data handling  (TAINTED_SCALAR)
/lib/dns/master.c: 2618 in load_raw()
2612     			 * the target available region be the same if
2613     			 * decompression is disabled (see dctx above) and we
2614     			 * are not downcasing names (options == 0).
2615     			 */
2616     			isc_buffer_init(&buf, isc_buffer_current(&target),
2617     					(unsigned int)rdlen);
>>>     CID 316513:  Insecure data handling  (TAINTED_SCALAR)
>>>     Passing tainted expression "target.active" to "dns_rdata_fromwire", which uses it as a loop boundary.
2618     			result = dns_rdata_fromwire(
2619     				&rdata[i], rdatalist.rdclass, rdatalist.type,
2620     				&target, &dctx, 0, &buf);
2621     			if (result != ISC_R_SUCCESS) {
2622     				goto cleanup;
2623     			}
Assignee
Assign to
Time tracking