Author: delphij
Date: Tue Jul 7 21:43:23 2015
New Revision: 285257
URL: https://svnweb.freebsd.org/changeset/base/285257
Log:
Fix BIND resolver remote denial of service when validating.
Security: CVE-2015-4620
Security: FreeBSD-SA-15:11.bind
Modified:
stable/9/contrib/bind9/lib/dns/validator.c
Changes in other areas also in this revision:
Modified:
stable/8/contrib/bind9/lib/dns/validator.c
Modified: stable/9/contrib/bind9/lib/dns/validator.c
==============================================================================
--- stable/9/contrib/bind9/lib/dns/validator.c Tue Jul 7 21:05:20 2015
(r285256)
+++ stable/9/contrib/bind9/lib/dns/validator.c Tue Jul 7 21:43:23 2015
(r285257)
@@ -1420,7 +1420,6 @@ compute_keytag(dns_rdata_t *rdata, dns_r
*/
static isc_boolean_t
isselfsigned(dns_validator_t *val) {
- dns_fixedname_t fixed;
dns_rdataset_t *rdataset, *sigrdataset;
dns_rdata_t rdata = DNS_RDATA_INIT;
dns_rdata_t sigrdata = DNS_RDATA_INIT;
@@ -1476,8 +1475,7 @@ isselfsigned(dns_validator_t *val) {
result = dns_dnssec_verify3(name, rdataset, dstkey,
ISC_TRUE,
val->view->maxbits,
- mctx, &sigrdata,
- dns_fixedname_name(&fixed));
+ mctx, &sigrdata, NULL);
dst_key_free(&dstkey);
if (result != ISC_R_SUCCESS)
continue;
_______________________________________________
svn-src-stable-9@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-stable-9
To unsubscribe, send any mail to "svn-src-stable-9-unsubscr...@freebsd.org"
