Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix a few potential crashes #45

Closed
wants to merge 3 commits into from

Conversation

klusark
Copy link

@klusark klusark commented Jul 3, 2019

  1. Fix missing from_domain check for store_dkim
  2. Add checks for longer than buffer while parsing record

Joel Teichroeb added 3 commits July 3, 2019 11:27
opendmarc_policy_store_dkim uses from_domain, but it assumes it has
always been set before the function is called. Instead, check it has
actually been set and error out of it has not.
If a long or malformed DMARC record is parsed, the code ends up checking
for the strlen of NULL pointer. Correct that, and return that the policy
is invalid.
This simulates the case that was fixed in the previous commit
cohomology added a commit to cohomology/OpenDMARC that referenced this pull request Dec 29, 2019
@martinbogo martinbogo added the bug label May 12, 2020
@martinbogo
Copy link
Contributor

Compiling and testing this.

@martinbogo
Copy link
Contributor

Joel, we have to do this one patch at a time. I'm going to break this up into three PR's ( one per )

@klusark
Copy link
Author

klusark commented Jun 1, 2020

@martinbogo Sounds good. I can split it up as well if you like.

@martinbogo
Copy link
Contributor

martinbogo commented Jun 1, 2020 via email

@klusark
Copy link
Author

klusark commented Jun 1, 2020

@martinbogo I've opend #55 and #56. The second one has two of the commits since the last commit just adds a test.

@klusark klusark closed this Jun 1, 2020
@martinbogo
Copy link
Contributor

martinbogo commented Jun 1, 2020 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants