CID900783: LOCK_EVASION

Author: lws-team

lib/core-net/close.c

@@ -409,8 +409,6 @@ lws_addrinfo_clean(struct lws *wsi)
 static void
 lws_async_worker_wait_and_reap(struct lws *wsi)
 {
-	if (!wsi->async_worker_job)
-		return;
 
 	while (1) {
 		pthread_mutex_lock(&wsi->a.context->async_worker_mutex);

lib/system/async-dns/async-dns-parse.c

@@ -263,7 +263,7 @@ lws_adns_iterate(lws_adns_q_t *q, const uint8_t *pkt, int len,
 		/* carefully validate the claimed RR payload length */
 
 		rrpaylen = lws_ser_ru16be(&p[8]);
-		if (p + 10 + rrpaylen > e) { /* it may be == e */
+		if (rrpaylen > len || p + 10 + rrpaylen > e) { /* it may be == e */
 			lwsl_notice("%s: invalid RR data length\n", __func__);
 
 			return -1;