upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

NSEC3: reject records with a zero length hash field

Browse source
This commit is contained in:
Mark Andrews 2020-08-13 12:46:55 +10:00
parent d7f7014803
commit 031ee9e279
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/dns/rdata/generic/nsec3_50.c
View file

@ -212,7 +212,7 @@ fromwire_nsec3(ARGS_FROMWIRE) {
hashlen = sr.base[0];
isc_region_consume(&sr, 1);
if (sr.length < hashlen) {
if (hashlen < 1 || sr.length < hashlen) {
RETERR(DNS_R_FORMERR);
}
isc_region_consume(&sr, hashlen);