upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-15 00:40:01 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

4285. [security] Specific APL data could trigger a INSIST.

Browse source 
(CVE-2015-8704) [RT #41396]
This commit is contained in:
Mark Andrews 2015-12-31 13:43:21 +11:00
parent 7321d8df7b
commit 1b3d211802
3 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGES
View file

@ -1,3 +1,6 @@
4285. [security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]
4284. [bug] Some GeoIP options were incorrectly documented
using abbreviated forms which were not accepted by
named. The code has been updated to allow both

6
doc/arm/notes.xml
View file

@ -153,6 +153,12 @@
<command>named</command> to allow access to unintended clients.
</para>
</listitem>
<listitem>
<para>
Specfic APL data could trigger a INSIST. This flaw was discovered
by Brian Mitchell and is disclosed in CVE-2015-8704. [RT #41396].
</para>
</listitem>
</itemizedlist>
</section>
<section xml:id="relnotes_features"><info><title>New Features</title></info>

4
lib/dns/rdata/in_1/apl_42.c
View file

@ -116,7 +116,7 @@ totext_in_apl(ARGS_TOTEXT) {
isc_uint8_t len;
isc_boolean_t neg;
unsigned char buf[16];
char txt[sizeof(" !64000")];
char txt[sizeof(" !64000:")];
const char *sep = "";
int n;
@ -140,7 +140,7 @@ totext_in_apl(ARGS_TOTEXT) {
isc_region_consume(&sr, 1);
INSIST(len <= sr.length);
n = snprintf(txt, sizeof(txt), "%s%s%u:", sep,
neg ? "!": "", afi);
neg ? "!" : "", afi);
INSIST(n < (int)sizeof(txt));
RETERR(str_totext(txt, target));
switch (afi) {