From: Mark Andrews <marka@isc.org>
Date: Tue, 19 May 2026 05:14:06 +0000 (+1000)
Subject: Fix dst_algorithm_fromdata to set the active range
X-Git-Tag: v9.21.24~13^2~5
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=5fbbb73c757c82a1158e3f94bd0fbe2b039cc350;p=thirdparty%2Fbind9.git

Fix dst_algorithm_fromdata to set the active range

When the buffer to check extract the PRIVATEDNS name was constructed
isc_buffer_setactive was not called.  This is now needed as
dns_name_fromwire is being corrected to check the active region.
---

diff --git a/lib/dns/dst_api.c b/lib/dns/dst_api.c
index 47ce8585170..22de68e5072 100644
--- a/lib/dns/dst_api.c
+++ b/lib/dns/dst_api.c
@@ -2700,6 +2700,7 @@ dst_algorithm_fromdata(dns_secalg_t algorithm, unsigned char *data,
 	case DNS_KEYALG_PRIVATEDNS:
 		isc_buffer_init(&b, data, length);
 		isc_buffer_add(&b, length);
+		isc_buffer_setactive(&b, length);
 		return dst_algorithm_fromprivatedns(&b);
 	case DNS_KEYALG_PRIVATEOID:
 		isc_buffer_init(&b, data, length);