mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-02 15:45:25 +00:00
Code Issues Releases Wiki Activity

IPSECKEY: require non-zero length public keys

Browse Source
This commit is contained in:
Mark Andrews
2020-08-13 13:08:17 +10:00
parent a238f37239
commit d7f7014803
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/dns/rdata/generic/ipseckey_45.c
View File

@@ -230,18 +230,21 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
switch (region.base[1]) { switch (region.base[1]) {
case 0: case 0:
if (region.length < 4) {
return (ISC_R_UNEXPECTEDEND);
}
isc_buffer_forward(source, region.length); isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length)); return (mem_tobuffer(target, region.base, region.length));
case 1: case 1:
if (region.length < 7) { if (region.length < 8) {
return (ISC_R_UNEXPECTEDEND); return (ISC_R_UNEXPECTEDEND);
} }
isc_buffer_forward(source, region.length); isc_buffer_forward(source, region.length);
return (mem_tobuffer(target, region.base, region.length)); return (mem_tobuffer(target, region.base, region.length));
case 2: case 2:
if (region.length < 19) { if (region.length < 20) {
return (ISC_R_UNEXPECTEDEND); return (ISC_R_UNEXPECTEDEND);
} }
isc_buffer_forward(source, region.length); isc_buffer_forward(source, region.length);
@@ -253,6 +256,9 @@ fromwire_ipseckey(ARGS_FROMWIRE) {
RETERR(dns_name_fromwire(&name, source, dctx, options, target)); RETERR(dns_name_fromwire(&name, source, dctx, options, target));
isc_buffer_activeregion(source, &region); isc_buffer_activeregion(source, &region);
isc_buffer_forward(source, region.length); isc_buffer_forward(source, region.length);
if (region.length < 1) {
return (ISC_R_UNEXPECTEDEND);
}
return (mem_tobuffer(target, region.base, region.length)); return (mem_tobuffer(target, region.base, region.length));
default: default: