From: Mark Andrews <marka@isc.org>
Date: Thu, 13 Aug 2020 03:38:49 +0000 (+1000)
Subject: CERT: reject records with a empty certificate field
X-Git-Tag: v9.17.5~50^2~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a238f37239fa327a01414400fcccd203d42c0b43;p=thirdparty%2Fbind9.git

CERT: reject records with a empty certificate field
---

diff --git a/lib/dns/rdata/generic/cert_37.c b/lib/dns/rdata/generic/cert_37.c
index fedba9034f7..b549ef1ae94 100644
--- a/lib/dns/rdata/generic/cert_37.c
+++ b/lib/dns/rdata/generic/cert_37.c
@@ -125,7 +125,7 @@ fromwire_cert(ARGS_FROMWIRE) {
 	UNUSED(options);
 
 	isc_buffer_activeregion(source, &sr);
-	if (sr.length < 5) {
+	if (sr.length < 6) {
 		return (ISC_R_UNEXPECTEDEND);
 	}