From: Matthijs Mekking <matje@NLnetLabs.nl>
Date: Mon, 12 Oct 2009 09:52:56 +0000 (+0000)
Subject: also in nsec3
X-Git-Tag: release-1.6.2~56
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d9f12ad51ee918ddcfebd7fef6ddd82cb933f8a8;p=thirdparty%2Fldns.git

also in nsec3
---

diff --git a/Changelog b/Changelog
index 3138429d..8f161ab8 100644
--- a/Changelog
+++ b/Changelog
@@ -10,6 +10,7 @@
 	* bug274: fix use of c++ keyword 'class' for RR class in the code.
 	* bug275: fix memory leak of packet edns rdata.
 	* Fix timeout procedure for TCP and AXFR on Solaris.
+	* Fix occansional NSEC bitmap bogus
 
 1.6.1   2009-09-14
 	* --enable-gost : use the GOST algorithm (experimental).
diff --git a/dnssec.c b/dnssec.c
index de188e62..ca0db52c 100644
--- a/dnssec.c
+++ b/dnssec.c
@@ -1152,7 +1152,7 @@ ldns_create_nsec3(ldns_rdf *cur_owner,
 			if ((i_type / 8) + 1 > bm_len) {
 				bitmap = LDNS_XREALLOC(bitmap, uint8_t, (i_type / 8) + 1);
 				/* set to 0 */
-				for (; bm_len <= i_type / 8; bm_len++) {
+				for (; bm_len < (i_type / 8) + 2; bm_len++) {
 					bitmap[bm_len] = 0;
 				}
 			}