SECURITY: Do not overrun reading buffer if domain ends with backslash

[adns.git] / src / transmit.c

diff --git a/src/transmit.c b/src/transmit.c
index 33c33297c8b248329f212a91ce987be7d84f79dd..498498602f7514885af5642c56b9cb17b38a7a6a 100644 (file)
--- a/src/transmit.c
+++ b/src/transmit.c
@@ -87,6 +87,7 @@ static adns_status qdparselabel(adns_state ads,
   while (p!=pe && (c= *p++)!='.') {
     if (c=='\\') {
       if (!(flags & adns_qf_quoteok_query)) return adns_s_querydomaininvalid;
+      if (p==pe) return adns_s_querydomaininvalid;
       if (ctype_digit(p[0])) {
        if (p+1==pe || p+2==pe) return adns_s_querydomaininvalid;
        if (ctype_digit(p[1]) && ctype_digit(p[2])) {