[PATCH] hostapd: Validate domain name length before assignment

[Kartik Rajput]

Adds a value check before assigning int (domain_len) to u8 (*domain_ptr) datatype.

Signed-off-by: Kartik Rajput <incorrectmail101 at gmail.com>
---
 hostapd/config_file.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hostapd/config_file.c b/hostapd/config_file.c
index 5e05cd55e..29a620da6 100644
--- a/hostapd/config_file.c
+++ b/hostapd/config_file.c
@@ -4102,12 +4102,22 @@ static int hostapd_config_fill(struct hostapd_config *conf,
 			tok_start = os_strchr(tok_prev, ',');
 			if (tok_start) {
 				domain_len = tok_start - tok_prev;
+				if (domain_len > 255) {
+                    wpa_printf(MSG_ERROR, "Line %d: domain_name is too long (max 255)", line);
+                    os_free(domain_list);
+                    return 1;
+                }
 				*domain_ptr = domain_len;
 				os_memcpy(domain_ptr + 1, tok_prev, domain_len);
 				domain_ptr += domain_len + 1;
 				tok_prev = ++tok_start;
 			} else {
 				domain_len = os_strlen(tok_prev);
+				if (domain_len > 255) {
+                    wpa_printf(MSG_ERROR, "Line %d: domain_name is too long (max 255)", line);
+                    os_free(domain_list);
+                    return 1;
+                }
 				*domain_ptr = domain_len;
 				os_memcpy(domain_ptr + 1, tok_prev, domain_len);
 				domain_ptr += domain_len + 1;
-- 
2.47.3