Ondřej Surý 51dde6ef43 Fix GSS-API context leak in TKEY negotiation ... Reject multi-round GSS-API negotiation (GSS_S_CONTINUE_NEEDED) in dst_gssapi_acceptctx(). Each call to gss_accept_sec_context() allocates a context inside the GSS library; without this fix, the context handle was passed back to process_gsstkey() which did not store it persistently, leaking it on every incomplete negotiation. An unauthenticated attacker could exhaust server memory by sending repeated TKEY queries with GSSAPI tokens, each leaking one GSS context. The leaked memory is allocated by the GSS library via malloc(), bypassing BIND's memory accounting. In practice, Kerberos/SPNEGO (the only mechanism used with BIND) completes in a single round, so rejecting continuation does not affect real-world deployments. See RFC 3645 Section 4.1.3.		2026-05-07 13:32:15 +02:00
..
dst.h	Change output of rndc dnssec -status	2025-11-28 15:32:17 +01:00
gssapi.h	Fix GSS-API context leak in TKEY negotiation	2026-05-07 13:32:15 +02:00