Don't relay anything that would be bigger than the original question

5 years ago · bb39f146ae
parent 999b89a3ab
commit bb39f146ae
1 changed files with 1 additions and 0 deletions
--- a/src/anonymized_dns.rs
+++ b/src/anonymized_dns.rs
@ -96,6 +96,7 @@ pub async fn handle_anonymized_dns(
        let fut = ext_socket.recv_from(&mut response[..]);
        let (response_len, response_addr) = fut.await?;
        if response_addr == upstream_address
+            && response_len <= encrypted_packet_len
            && (is_encrypted_response(&response, response_len)
                || is_certificate_response(&response, response_len))
        {