From: Thomas Faber <thomas.faber@reactos.org>
Date: Wed, 19 Apr 2017 11:14:18 +0000 (+0000)
Subject: [WS2_32][DNSAPI]
X-Git-Tag: ReactOS-0.4.5~61
X-Git-Url: https://git.reactos.org/?p=reactos.git;a=commitdiff_plain;h=497a20b8a01c547c38fbdd47a7f94a9e77fc0554

[WS2_32][DNSAPI]
- Avoid stack buffer overflow in ParseV4Address
CORE-11474

svn path=/trunk/; revision=74373
---

diff --git a/reactos/dll/win32/dnsapi/dnsapi/query.c b/reactos/dll/win32/dnsapi/dnsapi/query.c
index 38f25d39b4b..4c2599b65aa 100644
--- a/reactos/dll/win32/dnsapi/dnsapi/query.c
+++ b/reactos/dll/win32/dnsapi/dnsapi/query.c
@@ -460,6 +460,7 @@ again:
     */
     if (*cp && *cp > ' ') return FALSE;
 
+    if (pp >= parts + 4) return FALSE;
     *pp++ = val;
     /*
     * Concoct the address according to
diff --git a/reactos/dll/win32/ws2_32/src/addrinfo.c b/reactos/dll/win32/ws2_32/src/addrinfo.c
index 19f492dde2b..285e9458a6d 100644
--- a/reactos/dll/win32/ws2_32/src/addrinfo.c
+++ b/reactos/dll/win32/ws2_32/src/addrinfo.c
@@ -148,6 +148,7 @@ again:
     */
     if (*cp) return FALSE;
 
+    if (pp >= parts + 4) return FALSE;
     *pp++ = val;
     /*
     * Concoct the address according to