CERT: reject records with a empty certificate field

diff --git a/lib/dns/rdata/generic/cert_37.c b/lib/dns/rdata/generic/cert_37.c
index fedba9034f776133c9b56e7bb1afcf5b2e9ea34f..b549ef1ae945bf890a88ecae3c515215bd7795ce 100644 (file)
--- a/lib/dns/rdata/generic/cert_37.c
+++ b/lib/dns/rdata/generic/cert_37.c
@@ -125,7 +125,7 @@ fromwire_cert(ARGS_FROMWIRE) {
        UNUSED(options);
 
        isc_buffer_activeregion(source, &sr);
-       if (sr.length < 5) {
+       if (sr.length < 6) {
                return (ISC_R_UNEXPECTEDEND);
        }