mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-27 20:25:55 -04:00
The cloned signature rdataset was not disassociated on the early return taken when dns_dnssec_keyfromrdata() fails to parse the DNSKEY public-key data. In every current caller val->sigrdataset reaches check_signer() rdatalist-backed, so dns_rdataset_clone() copies the struct without taking any reference and dns_rdataset_disassociate() is a no-op -- no memory is actually leaked today. Hoist the key parse out of the per-RRSIG loop and let the function fall through to a single cleanup path, so the parse and the iteration cannot diverge again. Assisted-by: Claude:claude-opus-4-7 |
||
|---|---|---|
| .. | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| Makefile.am | ||