Array overrun in getZoneData() [ mdnsResponder 107.6 ]

Question

Hello,
References to msg->h.flags.b[2] are beyond the end of this 2 byts array.
mDNSEmbeddedAPI.h
1205 typedef packedunion { mDNSu8 b[ 2]; mDNSu16 NotAnInteger; } mDNSOpaque16;
uDNS.c
3684 if (msg && msg->h.flags.b[2] >> 4 && msg->h.flags.b[2] >> 4 != kDNSFlag1RCNXDomain)
3685 {
3686 // rcode non-zero, non-nxdomain
3687 LogMsg("ERROR: getZoneData - received response w/ rcode %d", msg->h.flags.b[2] >> 4);
3688 goto error;
3689 }
I see there is already a Bug filed [ Bug ID 6753220 , http://bugs.opensolaris.org/bugdatabase/viewbug.do;jsessionid=05a4c0ff141540868654af05202d?bugid=6753220 ]
on this issue.
- Is this bug is fixed ?
- If getZoneData() is only being called from startGetZoneData() then DNSmessage is always NULL. In that case we can remove this check itself.?
Thanks in advance

Answer 1

if (hand.getFace().equals(hand[j].getFace()));you forgot the parens -- getFace is a method, not a member variable