blob: b4ab575168491aee805c45ad32b0703cc49e8c43 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
From 0beeb4e78730ab11e975d19eaf6bb53679ec6086 Mon Sep 17 00:00:00 2001
From: Michael R Sweet <msweet@msweet.org>
Date: Thu, 29 Oct 2026 15:33:19 -0400
Subject: [PATCH] Validate printer/server responses (GHSA-hp44-ph36-rc52)
---
cups/dest.c | 11 +++++++++++
1 file changed, 11 insertions(+)
--- a/cups/dest.c
+++ b/cups/dest.c
@@ -1449,6 +1449,17 @@ _cupsGetDests(http_t *http, /* I
if ((response = cupsDoRequest(http, request, "/")) != NULL)
{
+ /*
+ * Make sure the server is OK...
+ */
+
+ if (!ippValidateAttributes(response))
+ {
+ // No, don't try to use any of its response...
+ ippDelete(response);
+ return (num_dests);
+ }
+
for (attr = response->attrs; attr != NULL; attr = attr->next)
{
/*
|
