SIG: reject records with a zero length signature

diff --git a/lib/dns/rdata/generic/sig_24.c b/lib/dns/rdata/generic/sig_24.c
index f4a237fe1488af56d8d3ba765fb3419e9a0c05a5..ff90631cc0b00956992481751b5bca71e682b723 100644 (file)
--- a/lib/dns/rdata/generic/sig_24.c
+++ b/lib/dns/rdata/generic/sig_24.c
@@ -274,6 +274,9 @@ fromwire_sig(ARGS_FROMWIRE) {
         * Sig.
         */
        isc_buffer_activeregion(source, &sr);
+       if (sr.length == 0) {
+               return (ISC_R_UNEXPECTEDEND);
+       }
        isc_buffer_forward(source, sr.length);
        return (mem_tobuffer(target, sr.base, sr.length));
 }