From: Ondřej Surý <ondrej@isc.org>
Date: Thu, 30 Apr 2026 05:06:31 +0000 (+0200)
Subject: [9.20] fix: usr: Fix rndc-confgen aborting on HMAC-SHA-384/512 keys above 512 bits
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7e1eace6cd64835357c7491b653c0d4475be7c4d;p=thirdparty%2Fbind9.git

[9.20] fix: usr: Fix rndc-confgen aborting on HMAC-SHA-384/512 keys above 512 bits

`rndc-confgen -A hmac-sha384` and `-A hmac-sha512` documented a `-b`
range of 1..1024, but any value above 512 aborted on hardened builds
instead of producing a key. The full advertised range now works.

Closes #5903

Backport of MR !11903

Merge branch 'backport-5903-hmac-generate-stack-overflow-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11910
---

7e1eace6cd64835357c7491b653c0d4475be7c4d