TLSA: fix fromwire length checks

diff --git a/lib/dns/rdata/generic/tlsa_52.c b/lib/dns/rdata/generic/tlsa_52.c
index 1140bc01cd9bd74278fce0c77e8ca8a8fe7151a8..5aa6ccac56fb2f10c63a0fde29b33edc0205198d 100644 (file)
--- a/lib/dns/rdata/generic/tlsa_52.c
+++ b/lib/dns/rdata/generic/tlsa_52.c
@@ -128,7 +128,8 @@ generic_fromwire_tlsa(ARGS_FROMWIRE) {
 
        isc_buffer_activeregion(source, &sr);
 
-       if (sr.length < 3) {
+       /* Usage(1), Selector(1), Type(1), Data(1+) */
+       if (sr.length < 4) {
                return (ISC_R_UNEXPECTEDEND);
        }