upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-09 07:52:15 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

IPSECKEY: require non-zero length public keys

Browse source
This commit is contained in:
Mark Andrews 2020-08-13 13:08:17 +10:00
parent a238f37239
commit d7f7014803
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
lib/dns/rdata/generic/ipseckey_45.c
View file

@ -230,18 +230,21 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
switch (region.base[1]) {
case 0:
if (region.length < 4) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length));
case 1:
if (region.length < 7) {
if (region.length < 8) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length));
case 2:
if (region.length < 19) {
if (region.length < 20) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
@ -253,6 +256,9 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
RETERR(dns_name_fromwire(&name, source, dctx, options, target));
isc_buffer_activeregion(source, &region);
isc_buffer_forward(source, region.length);
if (region.length < 1) {
return (ISC_R_UNEXPECTEDEND);
}
return (mem_tobuffer(target, region.base, region.length));
default: