- Fix CVE-2024-1931, Denial of service when trimming EDE text on

  positive replies.

diff --git a/util/data/msgencode.c b/util/data/msgencode.c
index 80ae33a386617df1cda76e19706b2838c6726112..898ff8412a4ef42bd651574113268f7129df70d8 100644 (file)
--- a/util/data/msgencode.c
+++ b/util/data/msgencode.c
@@ -886,6 +886,9 @@ ede_trim_text(struct edns_option** list)
                                curr->opt_len = 2;
                                prev = curr;
                                curr = curr->next;
+                       } else {
+                               prev = curr;
+                               curr = curr->next;
                        }
                } else {
                        /* continue */