mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-03 08:05:21 +00:00
Code Issues Releases Wiki Activity

4138. [bug] A uninitialized value in validator.c could result

Browse Source 
in a assertion failure. (CVE-2015-4620) [RT #39795]
This commit is contained in:
Mark Andrews
2015-06-17 09:13:03 +10:00
parent b7603c3c03
commit a85c6b35af
2 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@@ -1,3 +1,6 @@
4138. [bug] A uninitialized value in validator.c could result
in a assertion failure. (CVE-2015-4620) [RT #39795]
4137. [bug] rndc reconfig reports configuration errors the same
way rndc reload does [RT #39635]
@@ -20,7 +23,7 @@
4131. [bug] Addressed further problems with reloading RPZ
zones. [RT #39649]
4130. [bug] The compatability shim for *printf() misprinted some
4130. [bug] The compatibility shim for *printf() misprinted some
large numbers. [RT #39586]
4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]

4
lib/dns/validator.c
View File

@@ -1423,7 +1423,6 @@ compute_keytag(dns_rdata_t *rdata, dns_rdata_dnskey_t *key) {
*/
static isc_boolean_t
isselfsigned(dns_validator_t *val) {
dns_fixedname_t fixed;
dns_rdataset_t *rdataset, *sigrdataset;
dns_rdata_t rdata = DNS_RDATA_INIT;
dns_rdata_t sigrdata = DNS_RDATA_INIT;
@@ -1479,8 +1478,7 @@ isselfsigned(dns_validator_t *val) {
result = dns_dnssec_verify3(name, rdataset, dstkey,
ISC_TRUE,
val->view->maxbits,
mctx, &sigrdata,
dns_fixedname_name(&fixed));
mctx, &sigrdata, NULL);
dst_key_free(&dstkey);
if (result != ISC_R_SUCCESS)
continue;