From: Bob Halley <halley@dnspython.org>
Date: Tue, 28 Aug 2012 20:58:33 +0000 (-0700)
Subject: Do not generate empty NSEC3 bitmap windows
X-Git-Tag: v1.11.0-py3~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=407c201f4cace8662318a7273995278b1423016b;p=thirdparty%2Fdnspython.git

Do not generate empty NSEC3 bitmap windows
---

diff --git a/ChangeLog b/ChangeLog
index 46609f5c..bae1b348 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2012-08-28  Bob Halley  <halley@dnspython.org>
+
+	* dns/rdtypes/ANY/NSEC3.py (NSEC3.from_text): The NSEC3 from_text()
+	  method could erroneously emit empty bitmap windows (i.e. windows
+	  with a count of 0 bytes); such bitmaps are illegal.
+
 2012-04-10  Bob Halley  <halley@dnspython.org>
 
 	* dns/dnssec.py (_validate_rrsig): Fix python3 port issues with
diff --git a/dns/rdtypes/ANY/NSEC3.py b/dns/rdtypes/ANY/NSEC3.py
index df2dbff4..76a28671 100644
--- a/dns/rdtypes/ANY/NSEC3.py
+++ b/dns/rdtypes/ANY/NSEC3.py
@@ -117,7 +117,8 @@ class NSEC3(dns.rdata.Rdata):
             prior_rdtype = nrdtype
             new_window = nrdtype // 256
             if new_window != window:
-                windows.append((window, bytes(bitmap[0:octets])))
+                if octets != 0:
+                    windows.append((window, bytes(bitmap[0:octets])))
                 bitmap = bytearray(32)
                 window = new_window
             offset = nrdtype % 256
@@ -125,7 +126,8 @@ class NSEC3(dns.rdata.Rdata):
             bit = offset % 8
             octets = byte + 1
             bitmap[byte] = bitmap[byte] | (0x80 >> bit)
-        windows.append((window, bytes(bitmap[0:octets])))
+        if octets != 0:
+            windows.append((window, bytes(bitmap[0:octets])))
         return cls(rdclass, rdtype, algorithm, flags, iterations, salt, next, windows)
 
     from_text = classmethod(from_text)
diff --git a/tests/bugs.py b/tests/bugs.py
index fb008448..dd18f317 100644
--- a/tests/bugs.py
+++ b/tests/bugs.py
@@ -40,5 +40,10 @@ class BugsTestCase(unittest.TestCase):
             ttl = dns.ttl.from_text("2147483648")
         self.assertRaises(dns.ttl.BadTTL, bad)
 
+    def test_empty_NSEC3_window(self):
+        rdata = dns.rdata.from_text(dns.rdataclass.IN, dns.rdatatype.NSEC3,
+                                    "1 0 100 ABCD SCBCQHKU35969L2A68P3AD59LHF30715")
+        self.assertTrue(rdata.windows == [])
+
 if __name__ == '__main__':
     unittest.main()