]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.18] chg: dev: Invalid NSEC3 can cause OOB read of the isdelegation() stack
authorOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 16:29:38 +0000 (17:29 +0100)
committerOndřej Surý <ondrej@isc.org>
Tue, 24 Feb 2026 16:29:38 +0000 (17:29 +0100)
When .next_length is longer than NSEC3_MAX_HASH_LENGTH, it causes a
harmless out-of-bound read of the isdelegation() stack.  This has been
fixed.

Closes #5749

Backport of MR !11553

Merge branch 'backport-5749-fix-OOB-read-in-isdelegation-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!11595


Trivial merge