mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-31 06:25:31 +00:00
enforce DS hash exists
This commit is contained in:
@@ -166,7 +166,7 @@ generic_fromwire_ds(ARGS_FROMWIRE) {
|
|||||||
/*
|
/*
|
||||||
* Check digest lengths if we know them.
|
* Check digest lengths if we know them.
|
||||||
*/
|
*/
|
||||||
if (sr.length < 4 ||
|
if (sr.length < 5 ||
|
||||||
(sr.base[3] == DNS_DSDIGEST_SHA1 &&
|
(sr.base[3] == DNS_DSDIGEST_SHA1 &&
|
||||||
sr.length < 4 + ISC_SHA1_DIGESTLENGTH) ||
|
sr.length < 4 + ISC_SHA1_DIGESTLENGTH) ||
|
||||||
(sr.base[3] == DNS_DSDIGEST_SHA256 &&
|
(sr.base[3] == DNS_DSDIGEST_SHA256 &&
|
||||||
|
Reference in New Issue
Block a user