From 3429c35f52be9dfea69b96fda7d5b7fe804614a5 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 13 Aug 2020 12:30:04 +1000 Subject: [PATCH] TLSA: fix fromwire length checks --- lib/dns/rdata/generic/tlsa_52.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/dns/rdata/generic/tlsa_52.c b/lib/dns/rdata/generic/tlsa_52.c index 1140bc01cd..5aa6ccac56 100644 --- a/lib/dns/rdata/generic/tlsa_52.c +++ b/lib/dns/rdata/generic/tlsa_52.c @@ -128,7 +128,8 @@ generic_fromwire_tlsa(ARGS_FROMWIRE) { isc_buffer_activeregion(source, &sr); - if (sr.length < 3) { + /* Usage(1), Selector(1), Type(1), Data(1+) */ + if (sr.length < 4) { return (ISC_R_UNEXPECTEDEND); }