mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-30 14:07:59 +00:00
explitictly REQUIRE that reqaddr is non-null in dns_acl_match
This commit is contained in:
@@ -139,6 +139,7 @@ dns_acl_match(isc_netaddr_t *reqaddr,
|
||||
unsigned int i;
|
||||
int indirectmatch;
|
||||
|
||||
REQUIRE(reqaddr != NULL);
|
||||
REQUIRE(matchelt == NULL || *matchelt == NULL);
|
||||
|
||||
for (i = 0; i < acl->length; i++) {
|
||||
@@ -173,6 +174,7 @@ dns_acl_match(isc_netaddr_t *reqaddr,
|
||||
* "no match".
|
||||
* That way, a negated indirect ACL will never become
|
||||
* a surprise positive match through double negation.
|
||||
* XXXDCL this should be documented.
|
||||
*/
|
||||
if (indirectmatch > 0)
|
||||
goto matched;
|
||||
|
Reference in New Issue
Block a user