also in nsec3

diff --git a/Changelog b/Changelog
index 3138429d4b876627f66a8eac90002b6a8e31b782..8f161ab87dbe536b576d3cd307ef3157df967566 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -10,6 +10,7 @@
        * bug274: fix use of c++ keyword 'class' for RR class in the code.
        * bug275: fix memory leak of packet edns rdata.
        * Fix timeout procedure for TCP and AXFR on Solaris.
+       * Fix occansional NSEC bitmap bogus
 
 1.6.1   2009-09-14
        * --enable-gost : use the GOST algorithm (experimental).

diff --git a/dnssec.c b/dnssec.c
index de188e62cb7d3c99bd90aa48ea8a55985c31b311..ca0db52c30faa895acb9fcdfc3b41f082e08a071 100644 (file)
--- a/dnssec.c
+++ b/dnssec.c
@@ -1152,7 +1152,7 @@ ldns_create_nsec3(ldns_rdf *cur_owner,
                        if ((i_type / 8) + 1 > bm_len) {
                                bitmap = LDNS_XREALLOC(bitmap, uint8_t, (i_type / 8) + 1);
                                /* set to 0 */
-                               for (; bm_len <= i_type / 8; bm_len++) {
+                               for (; bm_len < (i_type / 8) + 2; bm_len++) {
                                        bitmap[bm_len] = 0;
                                }
                        }