1.4.10 tag created.

git-svn-id: file:///svn/unbound/trunk@2419 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/configure b/configure
index aa5110c16a9154da445a0ea7b3a5daeab7ac44e1..96bafefa8b043c6738712a8a57f82c78647b0c72 100755 (executable)
--- a/configure
+++ b/configure
@@ -2369,7 +2369,7 @@ ac_compiler_gnu=$ac_cv_c_compiler_gnu
 
 
 LIBUNBOUND_CURRENT=2
-LIBUNBOUND_REVISION=10
+LIBUNBOUND_REVISION=11
 LIBUNBOUND_AGE=0
 # 1.0.0 had 0:12:0
 # 1.0.1 had 0:13:0
@@ -2394,7 +2394,8 @@ LIBUNBOUND_AGE=0
 # 1.4.7 had 2:7:0
 # 1.4.8 had 2:8:0
 # 1.4.9 had 2:9:0
-# 1.5.0 had 2:10:0
+# 1.4.10 had 2:10:0
+# 1.5.0 had 2:11:0
 
 #   Current  -- the number of the binary API that we're implementing
 #   Revision -- which iteration of the implementation of the binary

diff --git a/configure.ac b/configure.ac
index 56597a9be4b03b11fb85cf9f64e2d906cdaf0673..be5457dd99a6623b874a259970ed5e9d9b1a7f84 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -9,7 +9,7 @@ sinclude(ac_pkg_swig.m4)
 AC_INIT(unbound, 1.5.0, unbound-bugs@nlnetlabs.nl, unbound)
 
 LIBUNBOUND_CURRENT=2
-LIBUNBOUND_REVISION=10
+LIBUNBOUND_REVISION=11
 LIBUNBOUND_AGE=0
 # 1.0.0 had 0:12:0
 # 1.0.1 had 0:13:0
@@ -34,7 +34,8 @@ LIBUNBOUND_AGE=0
 # 1.4.7 had 2:7:0
 # 1.4.8 had 2:8:0
 # 1.4.9 had 2:9:0
-# 1.5.0 had 2:10:0
+# 1.4.10 had 2:10:0
+# 1.5.0 had 2:11:0
 
 #   Current  -- the number of the binary API that we're implementing
 #   Revision -- which iteration of the implementation of the binary

diff --git a/daemon/worker.c b/daemon/worker.c
index 0b0ef679b1c0f6e3018910f892c8368bcc8f4ea9..eafdb8f1edd71f0239ca2ea20028f4c3339e0a10 100644 (file)
--- a/daemon/worker.c
+++ b/daemon/worker.c
@@ -779,6 +779,7 @@ worker_handle_request(struct comm_point* c, void* arg, int error,
                qinfo.qtype == LDNS_RR_TYPE_IXFR) {
                verbose(VERB_ALGO, "worker request: refused zone transfer.");
                log_addr(VERB_CLIENT,"from",&repinfo->addr, repinfo->addrlen);
+               ldns_buffer_rewind(c->buffer);
                LDNS_QR_SET(ldns_buffer_begin(c->buffer));
                LDNS_RCODE_SET(ldns_buffer_begin(c->buffer), 
                        LDNS_RCODE_REFUSED);

diff --git a/doc/Changelog b/doc/Changelog
index 547fcbd018c82b937bf337ff8e90e65f6ddc59c1..b569593d631162aa85bce904b8fd2ee0898124f7 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,8 @@
+25 May 2011: Wouter
+       - Fix assertion failure when unbound generates an empty error reply
+         in response to a query, CVE-2011-1922 VU#531342.
+       - This fix is in tag 1.4.10.
+
 10 May 2011: Wouter
        - bug#386: --enable-allsymbols option links all binaries to libunbound
          and reduces install size significantly.