3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.

                        [RT #35969]

(cherry picked from commit ae5335dcd9d750312a4fa455495080fcb314b9d8)

diff --git a/CHANGES b/CHANGES
index 22e2ce54a2f4d773f8669599f81ddd7670e0bc64..f41d0e8c0240c0ec4a076658f1f9a1483095ca2d 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3843.  [protocol]      Check EDNS EXPIRE option in dns_rdata_fromwire.
+                       [RT #35969]
+
 3842.  [bug]           Adjust RRL log-only logging category. [RT #35945]
 
 3841.  [cleanup]       Refactor zone.c:add_opt to use dns_message_buildopt.

diff --git a/lib/dns/rdata/generic/opt_41.c b/lib/dns/rdata/generic/opt_41.c
index 207639677256539528a38b851bb8bf5a81c037ec..ae09abf71e91460a8a80b6ff02a01c325f13a4a9 100644 (file)
--- a/lib/dns/rdata/generic/opt_41.c
+++ b/lib/dns/rdata/generic/opt_41.c
@@ -151,13 +151,14 @@ fromwire_opt(ARGS_FROMWIRE) {
                        isc_region_consume(&sregion, addrbytes);
                        break;
                }
-#ifdef notyet
                case DNS_OPT_EXPIRE:
+                       /*
+                        * Request has zero length.  Response is 32 bits.
+                        */
                        if (length != 0 && length != 4)
                                return (DNS_R_FORMERR);
                        isc_region_consume(&sregion, length);
                        break;
-#endif
                default:
                        isc_region_consume(&sregion, length);
                        break;