2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 14:07:59 +00:00

enforce DS hash exists

This commit is contained in:
Mark Andrews
2019-02-27 10:32:18 +11:00
parent a32a4ed945
commit b274f3fad7

View File

@@ -166,7 +166,7 @@ generic_fromwire_ds(ARGS_FROMWIRE) {
/*
* Check digest lengths if we know them.
*/
if (sr.length < 4 ||
if (sr.length < 5 ||
(sr.base[3] == DNS_DSDIGEST_SHA1 &&
sr.length < 4 + ISC_SHA1_DIGESTLENGTH) ||
(sr.base[3] == DNS_DSDIGEST_SHA256 &&