]> git.ipfire.org Git - thirdparty/bind9.git/commit
Importing invalid SKR file might overflow the stack buffer
authorOndřej Surý <ondrej@isc.org>
Sun, 22 Feb 2026 05:37:33 +0000 (06:37 +0100)
committerOndřej Surý (GitLab job 6920948) <ondrej@isc.org>
Tue, 24 Feb 2026 18:45:41 +0000 (18:45 +0000)
commit25006e2f176c00edab4ac596b5eaa20c9f212cb8
tree707c8943ea14a605c78c75d57da90d9fde8eb110
parente6f234169e2fd35c5a5f4f3cce9f0eaca15915ae
Importing invalid SKR file might overflow the stack buffer

If an invalid SKR file is imported, reading the time from the token
buffer might overflow the buffer on the local stack.  This has been
fixed by removing the intermediate buffer and parsing the lexer token
directly.

(cherry picked from commit 8ab4827a0c35128a88212237395f388c17e9ff26)
bin/dnssec/dnssec-ksr.c
lib/dns/skr.c