Commits on Source (2)
-
The loop compared processed_bytes (uint16) with len (size_t), so if len happens to be larger than UINT16_MAX, this condition would be always true. The value of len is capped by the "packet-size" option, which defaults to RIST_MAX_PACKET_SIZE, so for this case to occur it would require the user changing the option. Found with lgtm.com
e7161e25 -
The name length, which is actually the length of the CNAME field is indicated as a positive integer, there is no way for it to be negative.
984117e4