diff --git a/0004-fix-outside-array-bounds.patch b/0004-fix-outside-array-bounds.patch
new file mode 100644
index 0000000000000000000000000000000000000000..bccbdecf100eda203426f6257fd305b74c1ff9a7
--- /dev/null
+++ b/0004-fix-outside-array-bounds.patch
@@ -0,0 +1,26 @@
+From e658252c1883535de8595efe1a1f4a3420e60b6a Mon Sep 17 00:00:00 2001
+From: songbuhuang <544824346@qq.com>
+Date: Fri, 7 Jul 2023 10:14:40 +0800
+Subject: [PATCH] fix outside array bounds
+
+Signed-off-by: songbuhuang <544824346@qq.com>
+---
+ lib/core-net/client/sort-dns.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/core-net/client/sort-dns.c b/lib/core-net/client/sort-dns.c
+index c8d6686..db105c5 100644
+--- a/lib/core-net/client/sort-dns.c
++++ b/lib/core-net/client/sort-dns.c
+@@ -406,7 +406,7 @@ lws_sort_dns_dcomp(const lws_dns_sort_t *da, const lws_dns_sort_t *db)
+ 	 */
+ 
+ 	scopea = lws_ipv6_unicast_scope(to_v6_sa(&da->dest));
+-	scopeb = lws_ipv6_unicast_scope(to_v6_sa(&db));
++	scopeb = lws_ipv6_unicast_scope(to_v6_sa(&db->dest));
+ 	scope_srca = lws_ipv6_unicast_scope(to_v6_sa(&da->source));
+ 	scope_srcb = lws_ipv6_unicast_scope(to_v6_sa(&db->source));
+ 
+-- 
+2.25.1
+
diff --git a/libwebsockets.spec b/libwebsockets.spec
index d3a887702db8bdf44944dcce344b40b23e7d6e64..98e614f8886fe9855612d472d8156e43401894c7 100644
--- a/libwebsockets.spec
+++ b/libwebsockets.spec
@@ -1,6 +1,6 @@
 Name:           libwebsockets
 Version:        4.3.0
-Release:        4
+Release:        5
 Summary:        A lightweight C library for Websockets
 License:        LGPLv2 and Public Domain and BSD and MIT and zlib
 URL:            https://libwebsockets.org
@@ -9,6 +9,7 @@ Source0:        https://github.com/warmcat/libwebsockets/archive/v%{version}.tar
 Patch9001:	0001-add-secure-compile-option-in-Makefile.patch
 Patch9002:	0002-solve-the-BEP-problem.patch
 Patch9003:	0003-route-extend-lws_route_uidx_t-from-1-byte-to-2-bytes.patch
+Patch9004:	0004-fix-outside-array-bounds.patch
 
 BuildRequires:  cmake openssl-devel zlib-devel libev-devel gcc gcc-c++
 
@@ -99,6 +100,12 @@ find %{buildroot} -name '*_static.pc' -exec rm -f {} ';'
 %doc changelog README.md READMEs/
 
 %changelog
+* Fri Jul 07 2023 huangsong <huangsong14@huawei.com> - 4.3.0-5
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:fix outside array bounds of lws_dns_sort_t
+
 * Thu May 05 2022 zhangxiaoyu <zhangxiaoyu58@huawei.com> - 4.3.0-4
 - Type:bugfix
 - ID:NA