URI parser needs to do printable ascii validation for string result

c-ares · May 27, 2024 · 40fb125 · 40fb125
1 parent 75de16c
commit 40fb125
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/lib/ares_dns_parse.c b/src/lib/ares_dns_parse.c
@@ -632,6 +632,11 @@ static ares_status_t ares_dns_parse_rr_uri(ares__buf_t *buf, ares_dns_rr_t *rr,
     return status;
   }
 
+  if (!ares__str_isprint(name, remaining_len)) {
+    ares_free(name);
+    return ARES_EBADRESP;
+  }
+
   status = ares_dns_rr_set_str_own(rr, ARES_RR_URI_TARGET, name);
   if (status != ARES_SUCCESS) {
     ares_free(name);