34 строки
1.0 KiB
Diff
34 строки
1.0 KiB
Diff
From 65f5b2f0162d5d2ab25f463aa14a8bae71ace3d9 Mon Sep 17 00:00:00 2001
|
|
From: Mark Andrews <marka@isc.org>
|
|
Date: Thu, 11 Aug 2022 15:28:13 +1000
|
|
Subject: [PATCH 3/3] Free ctx on invalid siglen
|
|
|
|
(cherry picked from commit 6ddb480a84836641a0711768a94122972c166825)
|
|
|
|
Upstream-Status: Backport
|
|
CVE: CVE-2022-38178
|
|
Reference to upstream patch:
|
|
https://gitlab.isc.org/isc-projects/bind9/-/commit/1af23378ebb11da2eb0f412e4563d6
|
|
|
|
Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com>
|
|
---
|
|
bind_ln/lib/dns/openssleddsa_link.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/bind_ln/lib/dns/openssleddsa_link.c b/bind_ln/lib/dns/openssleddsa_link.c
|
|
index 8b115ec283f0..b4fcd607c131 100644
|
|
--- a/bind_ln/lib/dns/openssleddsa_link.c
|
|
+++ b/bind_ln/lib/dns/openssleddsa_link.c
|
|
@@ -325,7 +325,7 @@ openssleddsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
|
|
siglen = DNS_SIG_ED448SIZE;
|
|
|
|
if (sig->length != siglen)
|
|
- return (DST_R_VERIFYFAILURE);
|
|
+ DST_RET(ISC_R_NOTIMPLEMENTED);
|
|
|
|
isc_buffer_usedregion(buf, &tbsreg);
|
|
|
|
--
|
|
2.34.1
|
|
|