mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00
Code Issues Releases Wiki Activity

IPSECKEY: require non-zero length public keys

Browse Source
This commit is contained in:
Mark Andrews
2020-08-13 13:08:17 +10:00
parent a238f37239
commit d7f7014803
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/dns/rdata/generic/ipseckey_45.c
View File

@@ -230,18 +230,21 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
switch (region.base[1]) {
case 0:
if (region.length < 4) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length));
case 1:
if (region.length < 7) {
if (region.length < 8) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length));
case 2:
if (region.length < 19) {
if (region.length < 20) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length);
@@ -253,6 +256,9 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
RETERR(dns_name_fromwire(&name, source, dctx, options, target));
isc_buffer_activeregion(source, &region);
isc_buffer_forward(source, region.length);
if (region.length < 1) {
return (ISC_R_UNEXPECTEDEND);
}
return (mem_tobuffer(target, region.base, region.length));
default: