upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix similar code in auth_zone synth cname to add the extra checks.

Browse source
This commit is contained in:
W.C.A. Wijngaards 2019-12-03 15:11:22 +01:00
parent f5e06689d1
commit 5a66aecef9
2 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
doc/Changelog
View file

@ -5,6 +5,7 @@
to correct RFC number. to correct RFC number.
- Fix Assert Causing DoS in synth_cname(), - Fix Assert Causing DoS in synth_cname(),
reported by X41 D-Sec. reported by X41 D-Sec.
- Fix similar code in auth_zone synth cname to add the extra checks.
2 December 2019: Wouter 2 December 2019: Wouter
- Merge pull request #122 from he32: In tcp_callback_writer(), - Merge pull request #122 from he32: In tcp_callback_writer(),

4
services/authzone.c
View file

@ -2380,6 +2380,10 @@ create_synth_cname(uint8_t* qname, size_t qname_len, struct regional* region,
return 0; /* rdatalen in DNAME rdata is malformed */ return 0; /* rdatalen in DNAME rdata is malformed */
if(dname_valid(dtarg, dtarglen) != dtarglen) if(dname_valid(dtarg, dtarglen) != dtarglen)
return 0; /* DNAME RR has malformed rdata */ return 0; /* DNAME RR has malformed rdata */
if(qname_len == 0)
return 0; /* too short */
if(qname_len <= node->namelen)
return 0; /* qname too short for dname removal */
/* synthesize a CNAME */ /* synthesize a CNAME */
newlen = synth_cname_buf(qname, qname_len, node->namelen, newlen = synth_cname_buf(qname, qname_len, node->namelen,