]> git.ipfire.org Git - thirdparty/bind9.git/commit
Fix algorithm rollover bug wrt keytag conflicts
authorMatthijs Mekking <matthijs@isc.org>
Wed, 21 Aug 2024 15:14:48 +0000 (17:14 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Thu, 22 Aug 2024 10:15:02 +0000 (10:15 +0000)
commitbb3bf561575371fd597b9b43c3d5cff6ec9608bb
tree6ba4fed21286660ecc1910c8f965ec5e21586c09
parent9e1bed5bdb8a642f73566eb22bcbfa2f9c97f453
Fix algorithm rollover bug wrt keytag conflicts

If there is an algorithm rollover and two keys of different algorithm
share the same keytags, then there is a possibility that if we check
that a key matches a specific state, we are checking against the wrong
key.

Fix this by not only checking for matching key id but also key
algorithm.

(cherry picked from commit f37eb33f29ad50cead2673f4f7634839ef7e2a26)
lib/dns/keymgr.c