From 9b93e5d68485469b704052c2997764891df7bff7 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 13 Aug 2020 10:51:40 +1000 Subject: [PATCH] SIG: reject records with a zero length signature --- lib/dns/rdata/generic/sig_24.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/dns/rdata/generic/sig_24.c b/lib/dns/rdata/generic/sig_24.c index f4a237fe14..ff90631cc0 100644 --- a/lib/dns/rdata/generic/sig_24.c +++ b/lib/dns/rdata/generic/sig_24.c @@ -274,6 +274,9 @@ fromwire_sig(ARGS_FROMWIRE) { * Sig. */ isc_buffer_activeregion(source, &sr); + if (sr.length == 0) { + return (ISC_R_UNEXPECTEDEND); + } isc_buffer_forward(source, sr.length); return (mem_tobuffer(target, sr.base, sr.length)); }