From: Ondřej Surý <ondrej@isc.org>
Date: Wed, 29 Apr 2026 15:25:53 +0000 (+0200)
Subject: fix: dev: Validate -l and -L numeric arguments in named-checkzone
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1064d11af24cd9626453273d7ce830b87aa36291;p=thirdparty%2Fbind9.git

fix: dev: Validate -l and -L numeric arguments in named-checkzone

named-checkzone and named-compilezone parsed the -l (max TTL) and -L
(source serial) arguments with strtol(), so a negative value such as
-1 silently became UINT32_MAX and out-of-range values were truncated
to 32 bits without warning; -l in particular appeared to cap TTLs but
no longer enforced anything. Both flags now go through isc_parse_uint32()
and reject any value that is not a valid 32-bit unsigned integer.

Merge branch 'ondrej/named-checkzone-strtol-truncation' into 'main'

See merge request isc-projects/bind9!11900
---

1064d11af24cd9626453273d7ce830b87aa36291