bugfix #548: Double free for answers > 4096

in ldns_resolver_send_pkt.  Thank you sunthought@gmail.com

diff --git a/Changelog b/Changelog
index 65c10ed3e89da29dcdc6eb39b392e0d8fa504b1e..e40b1970250a4f5251399285de20b69cc4345de2 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -1,5 +1,6 @@
 TBD
        * Fix lookup of relative names in ldns_resolver_search.
+       * bugfix #548: Double free for answers > 4096 in ldns_resolver_send_pkt
 
 1.6.17 2014-01-10
        * Fix ldns_dnssec_zone_new_frm_fp_l to allow the last parsed line of a

diff --git a/resolver.c b/resolver.c
index 1dff1a2a4e3c6dfce061ef633eaefaa8aa4b6230..971998468fd370d94cea75076d16a021b2a3e318 100644 (file)
--- a/resolver.c
+++ b/resolver.c
@@ -1126,6 +1126,7 @@ ldns_resolver_send_pkt(ldns_pkt **answer, ldns_resolver *r,
                                        ldns_pkt_set_edns_udp_size(query_pkt
                                                        , 4096);
                                        ldns_pkt_free(answer_pkt);
+                                       answer_pkt = NULL;
                                        /* Nameservers should not become 
                                         * unreachable because fragments are
                                         * dropped (network error). We might