DNS: more hardening against crafted responses

[exim.git] / src / src / acl.c

diff --git a/src/src/acl.c b/src/src/acl.c
index 118e4b35db422c18326cac1727346464685a7158..302dedaeb21fdde5f982fd5613701b04810a13f2 100644 (file)
--- a/src/src/acl.c
+++ b/src/src/acl.c
@@ -1434,6 +1434,7 @@ for (rr = dns_next_rr(dnsa, &dnss, RESET_ANSWERS);
 
   /* Extract the numerical SRV fields (p is incremented) */
 
+  if (rr_bad_size(rr, 3 * sizeof(uint16_t))) continue;
   GETSHORT(priority, p);
   GETSHORT(weight, p);
   GETSHORT(port, p);