From 34a8189a00c1eb3d76d62d4ba188d9785538222d Mon Sep 17 00:00:00 2001
From: Dirk Engling <erdgeist@erdgeist.org>
Date: Sun, 8 Nov 2026 22:09:57 +0100
Subject: Fix one potential OOB read when parsing the config file

---
 src/ot_config.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/ot_config.c b/src/ot_config.c
index 626ddea..a4c2a47 100644
--- a/src/ot_config.c
+++ b/src/ot_config.c
@@ -79,10 +79,12 @@ static listen_option_kind parse_listen_option(char **p) {
 
   for (i = 0; i < listen_option_count; ++i) {
     const listen_option_key *key = &listen_option_keys[i];
-    char                     delimiter = (*p)[key->len];
+    char                     delimiter;
 
     if (strncmp(*p, key->name, key->len))
       continue;
+    /* The match guarantees *p is at least key->len bytes, so this is in bounds */
+    delimiter = (*p)[key->len];
     if (key->takes_value ? delimiter != '=' : (delimiter && !isspace((unsigned char)delimiter)))
       continue;
 
-- 
cgit v1.3