From: Colin Vidal <colin@isc.org>
Date: Wed, 8 Apr 2026 13:20:01 +0000 (+0200)
Subject: enforce dns_adb_createaddrinfofind() invariant
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1bad0805155aef9058fcd1fca9dc08868b22729f;p=thirdparty%2Fbind9.git

enforce dns_adb_createaddrinfofind() invariant

ADB `dns_adb_createaddrinfofind()` expects `maxaddrs` paramaters is
always strictly positive. Add an assertion to enforce it.
---

diff --git a/lib/dns/adb.c b/lib/dns/adb.c
index 8c9b0cbeb8f..8e3a381f55f 100644
--- a/lib/dns/adb.c
+++ b/lib/dns/adb.c
@@ -1743,6 +1743,7 @@ dns_adb_createaddrinfosfind(dns_adb_t *adb, isc_netaddrlist_t *addrs,
 	REQUIRE(DNS_ADB_VALID(adb));
 	REQUIRE(addrs != NULL);
 	REQUIRE(findp != NULL && *findp == NULL);
+	REQUIRE(maxaddrs > 0);
 
 	rcu_read_lock();