]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] fix: dev: Fix a stack use-after-free in qpzone
authorEvan Hunt <each@isc.org>
Wed, 6 May 2026 00:01:08 +0000 (00:01 +0000)
committerEvan Hunt <each@isc.org>
Wed, 6 May 2026 00:01:08 +0000 (00:01 +0000)
commitddea991c073bbcf15e38c547ad73a3b1491704c0
tree213c638c9a739db25d1bbd9915092e28aecd8615
parent933a8de0568a3892c532a00971787bbbbe4efb70
parent8e31dc535391ddf465323034d9900d02e1b96281
[9.20] fix: dev: Fix a stack use-after-free in qpzone

In previous_closest_nsec(), a new qpreader was opened to search the NSEC
tree. It was possible for that to be used to update a QP iterator object
owned by the caller, and then be destroyed when the function returned.

This has been addressed by having the caller open the NSEC qpreader
instead.

Closes #5942

Merge branch '5942-qpiter-fix-bind-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11956