nwrap: Account for ending NULL pointer when checking the buffer length

The hostent->h_addr_list ends with a NULL pointer, take it into account
when checking the provided buffer length.

Signed-off-by: Samuel Cabrero <scabrero@suse.de>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>

diff --git a/src/nss_wrapper.c b/src/nss_wrapper.c
index 45a94b7b8155b471aa3674eede8ff778418749b2..d90264c6d243705057ebbe6cba0ad10752f6a39b 100644 (file)
--- a/src/nss_wrapper.c
+++ b/src/nss_wrapper.c
@@ -3751,7 +3751,8 @@ static int nwrap_files_gethostbyname2_r(struct nwrap_backend *b,
                return -1;
        }
 
-       if (buflen < (addr_list->count * sizeof(void *))) {
+       /* +1 i for ending NULL pointer */
+       if (buflen < ((addr_list->count + 1) * sizeof(void *))) {
                SAFE_FREE(addr_list->items);
                SAFE_FREE(addr_list);
                return ERANGE;