Bad isc_mem_put() size when an invalid type was specified in a ssu rule.

diff --git a/CHANGES b/CHANGES
index f1193d09a7f837f74e1320ab3a871f20666f88e4..226534ea38ce500c9275f9b5ce163ec5edb2e955 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5459.  [bug]           Bad isc_mem_put() size when an invalid type was
+                       specified in a update-policy rule. [GL #1990]
+
 5458.  [bug]           Prevent a theoretically possible NULL dereference caused
                        by a data race between zone_maintenance() and
                        dns_zone_setview_helper(). [GL #1627]

diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
index 4bd79ed6cc9f116c6b0dc6a80a7707460ddc0e11..486877df55490f81ad02c94a12c0478063b23548 100644 (file)
--- a/bin/named/zoneconf.c
+++ b/bin/named/zoneconf.c
@@ -334,7 +334,7 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
                                            ISC_LOG_ERROR,
                                            "'%.*s' is not a valid type",
                                            (int)r.length, str);
-                               isc_mem_put(mctx, types, n * sizeof(types));
+                               isc_mem_put(mctx, types, n * sizeof(*types));
                                goto cleanup;
                        }
                }