2159. [bug] Array bounds overrun in acache processing. [RT #16710]

diff --git a/CHANGES b/CHANGES
index 56b36523cd8b726ba4934e157cf4f0d02af820fe..bf8f1d5cc030af447f83848fee7b5149382a0948 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,4 @@
+2159.  [bug]           Array bounds overrun in acache processing. [RT #16710]
 
        --- 9.5.0a2 released ---
 

diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
index 7367d05628b6b6e3a5871f1ea08c0b35bfa32370..afef0e18ae24c9bddd0fa26d58e289b021471ea4 100644 (file)
--- a/lib/dns/rbtdb.c
+++ b/lib/dns/rbtdb.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: rbtdb.c,v 1.242 2007/03/06 00:38:57 marka Exp $ */
+/* $Id: rbtdb.c,v 1.243 2007/03/12 03:37:21 marka Exp $ */
 
 /*! \file */
 
@@ -6561,7 +6561,7 @@ rdataset_setadditional(dns_rdataset_t *rdataset, dns_rdatasetadditional_t type,
        if (newcbarg == NULL)
                return (ISC_R_NOMEMORY);
        newcbarg->type = type;
-       newcbarg->count = init_count;
+       newcbarg->count = count;
        newcbarg->header = header;
        newcbarg->db = NULL;
        dns_db_attach((dns_db_t *)rbtdb, &newcbarg->db);