mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-25 19:02:12 -04:00
The DNS_KEYFLAG_EXTENDED flag was only legitimate for type KEY and was eliminated by RFC 3445. Dropping the extended-flags handling in pub_compare() also fixes a possible crash when signing a zone whose journal contains a crafted DNSKEY: a 6-byte record with the EXTENDED bit set produced a memmove() length that underflowed and ran off a stack buffer. |
||
|---|---|---|
| .. | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| meson.build | ||