mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00
Code Issues Releases Wiki Activity

3737. [bug] 'rndc retransfer' could trigger a assertion failure

Browse Source 
with inline zones. [RT #35353]

(cherry picked from commit 8e30a7e9fdef51b53448aff26b9f4f339b023a38)
This commit is contained in:
Mark Andrews 2014-02-13 08:54:51 +11:00
parent 5deedd7057
commit a1271e2404
2 changed files with 42 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@ -1,3 +1,6 @@
3737. [bug] 'rndc retransfer' could trigger a assertion failure
with inline zones. [RT #35353]
3736. [bug] nsupdate: When specifying a server by name, 3736. [bug] nsupdate: When specifying a server by name,
fall back to alternate addresses if the first fall back to alternate addresses if the first
address for that name is not reachable. [RT #25784] address for that name is not reachable. [RT #25784]

57
lib/dns/zone.c
View File

@ -13484,7 +13484,6 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
isc_result_t result; isc_result_t result;
dns_dbnode_t *node = NULL; dns_dbnode_t *node = NULL;
dns_rdataset_t rdataset, prdataset; dns_rdataset_t rdataset, prdataset;
dns_rdata_t rdata_in, prdata_in, prdata_out;
dns_dbversion_t *version = NULL; dns_dbversion_t *version = NULL;
nsec3param_t *nsec3param = NULL; nsec3param_t *nsec3param = NULL;
nsec3param_t *nsec3p = NULL; nsec3param_t *nsec3p = NULL;
@ -13518,8 +13517,10 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
result == ISC_R_SUCCESS; result == ISC_R_SUCCESS;
result = dns_rdataset_next(&rdataset)) result = dns_rdataset_next(&rdataset))
{ {
dns_rdata_init(&rdata_in); dns_rdata_t rdata = DNS_RDATA_INIT;
dns_rdataset_current(&rdataset, &rdata_in); dns_rdata_t private = DNS_RDATA_INIT;
dns_rdataset_current(&rdataset, &rdata);
isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3), DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3),
"looping through nsec3param data"); "looping through nsec3param data");
@ -13532,11 +13533,10 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
* now transfer the data from the rdata to * now transfer the data from the rdata to
* the nsec3param * the nsec3param
*/ */
dns_rdata_init(&prdata_out); dns_nsec3param_toprivate(&rdata, &private,
dns_nsec3param_toprivate(&rdata_in, &prdata_out,
zone->privatetype, nsec3param->data, zone->privatetype, nsec3param->data,
sizeof(nsec3param->data)); sizeof(nsec3param->data));
nsec3param->length = prdata_out.length; nsec3param->length = private.length;
ISC_LIST_APPEND(*nsec3list, nsec3param, link); ISC_LIST_APPEND(*nsec3list, nsec3param, link);
} }
@ -13556,26 +13556,39 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
result == ISC_R_SUCCESS; result == ISC_R_SUCCESS;
result = dns_rdataset_next(&prdataset)) result = dns_rdataset_next(&prdataset))
{ {
dns_rdata_init(&prdata_in); dns_rdata_t rdata = DNS_RDATA_INIT;
dns_rdataset_current(&prdataset, &prdata_in); dns_rdata_t private = DNS_RDATA_INIT;
dns_rdataset_current(&prdataset, &private);
isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3), DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3),
"looping through nsec3param private data"); "looping through nsec3param private data");
if (!dns_nsec3param_fromprivate(&prdata_in, &prdata_out, /*
* Do we have a valid private record?
*/
if (!dns_nsec3param_fromprivate(&private, &rdata,
buf, sizeof(buf))) buf, sizeof(buf)))
continue; continue;
if ((prdata_out.data[1] & DNS_NSEC3FLAG_REMOVE) !=0) { /*
prdata_out.data[1] = 0; * Remove any NSEC3PARAM records scheduled to be removed.
*/
if (NSEC3REMOVE(rdata.data[1])) {
/*
* Zero out the flags.
*/
rdata.data[1] = 0;
for (nsec3p = ISC_LIST_HEAD(*nsec3list); for (nsec3p = ISC_LIST_HEAD(*nsec3list);
nsec3p != NULL; nsec3p != NULL;
nsec3p = next) nsec3p = next)
{ {
next = ISC_LIST_NEXT(nsec3p, link); next = ISC_LIST_NEXT(nsec3p, link);
if (memcmp(prdata_out.data, nsec3p->data,
sizeof(nsec3p->data)) == 0) { if (nsec3p->length == rdata.length + 1 &&
memcmp(rdata.data, nsec3p->data + 1,
nsec3p->length - 1) == 0) {
ISC_LIST_UNLINK(*nsec3list, ISC_LIST_UNLINK(*nsec3list,
nsec3p, link); nsec3p, link);
isc_mem_put(zone->mctx, nsec3p, isc_mem_put(zone->mctx, nsec3p,
@ -13590,11 +13603,13 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
CHECK(ISC_R_NOMEMORY); CHECK(ISC_R_NOMEMORY);
ISC_LINK_INIT(nsec3param, link); ISC_LINK_INIT(nsec3param, link);
dns_rdata_init(&prdata_out); /*
dns_nsec3param_toprivate(&prdata_in, &prdata_out, * Copy the remaining private records so the nsec/nsec3
zone->privatetype, nsec3param->data, * chain gets created.
sizeof(nsec3param->data)); */
nsec3param->length = prdata_out.length; INSIST(private.length <= sizeof(nsec3param->data));
memmove(nsec3param->data, private.data, private.length);
nsec3param->length = private.length;
ISC_LIST_APPEND(*nsec3list, nsec3param, link); ISC_LIST_APPEND(*nsec3list, nsec3param, link);
} }
@ -13810,6 +13825,12 @@ receive_secure_db(isc_task_t *task, isc_event_t *event) {
dns_zone_log(zone, ISC_LOG_ERROR, "receive_secure_db: %s", dns_zone_log(zone, ISC_LOG_ERROR, "receive_secure_db: %s",
dns_result_totext(result)); dns_result_totext(result));
while (!ISC_LIST_EMPTY(nsec3list)) {
nsec3param_t *nsec3p;
nsec3p = ISC_LIST_HEAD(nsec3list);
ISC_LIST_UNLINK(nsec3list, nsec3p, link);
isc_mem_put(zone->mctx, nsec3p, sizeof(nsec3param_t));
}
if (dns_rdataset_isassociated(&rdataset)) if (dns_rdataset_isassociated(&rdataset))
dns_rdataset_disassociate(&rdataset); dns_rdataset_disassociate(&rdataset);
if (db != NULL) { if (db != NULL) {