mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-28 04:34:54 -04:00
explitictly REQUIRE that reqaddr is non-null in dns_acl_match
This commit is contained in:
parent
06671f242e
commit
d8d0c5b1bc
1 changed files with 2 additions and 0 deletions
|
|
@ -139,6 +139,7 @@ dns_acl_match(isc_netaddr_t *reqaddr,
|
|||
unsigned int i;
|
||||
int indirectmatch;
|
||||
|
||||
REQUIRE(reqaddr != NULL);
|
||||
REQUIRE(matchelt == NULL || *matchelt == NULL);
|
||||
|
||||
for (i = 0; i < acl->length; i++) {
|
||||
|
|
@ -173,6 +174,7 @@ dns_acl_match(isc_netaddr_t *reqaddr,
|
|||
* "no match".
|
||||
* That way, a negated indirect ACL will never become
|
||||
* a surprise positive match through double negation.
|
||||
* XXXDCL this should be documented.
|
||||
*/
|
||||
if (indirectmatch > 0)
|
||||
goto matched;
|
||||
|
|
|
|||
Loading…
Reference in a new issue