]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.20] chg: dev: Invalid NSEC3 can cause OOB read of the isdelegation() stack
authorOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 16:11:00 +0000 (17:11 +0100)
committerOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 16:11:00 +0000 (17:11 +0100)
When .next_length is longer than NSEC3_MAX_HASH_LENGTH, it causes a
harmless out-of-bound read of the isdelegation() stack.  This has been
fixed.

Closes #5749

Backport of MR !11553

Merge branch 'backport-5749-fix-OOB-read-in-isdelegation-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11594


Trivial merge