3693. [security] memcpy was incorrectly called with overlapping

                        ranges resulting a malformed names being generated
                        on some platforms.  This was subsequently detected
                        resulting in INSIST failures when serving NSEC3
                        signed zones.  [RT #35120]

(cherry picked from commit b93ef543ab29be2c2d15049e02e66a31b27284ae)

diff --git a/CHANGES b/CHANGES
index 62637c25aefd0dc7d7857cf8bef57a8e06e37e91..f61286ff23a8e45b7c387e41703fb93fcb23f842 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+3693.  [security]      memcpy was incorrectly called with overlapping
+                       ranges resulting a malformed names being generated
+                       on some platforms.  This was subsequently detected
+                       resulting in INSIST failures when serving NSEC3
+                       signed zones.  [RT #35120]
+
 3692.  [bug]           Two calls to dns_db_getoriginnode were fatal if there
                        was no data at the node. [RT #35080]