]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
chg: dev: Invalid NSEC3 can cause OOB read of the isdelegation() stack
authorOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 15:00:35 +0000 (16:00 +0100)
committerOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 15:00:35 +0000 (16:00 +0100)
When .next_length is longer than NSEC3_MAX_HASH_LENGTH, it causes a
harmless out-of-bound read of the isdelegation() stack.  This has been
fixed.

Closes #5749

Merge branch '5749-fix-OOB-read-in-isdelegation' into 'main'

See merge request isc-projects/bind9!11553


Trivial merge