doc/share/security/patches/SA-13:01/bind.patch
Bjoern A. Zeeb fef748c3be Add latest security advisories:
Fix Denial of Service vulnerability in named(8) with DNS64. [13:01]

  Fix Denial of Service vulnerability in libc's glob(3) functionality.
  [13:02]

Security:	CVE-2012-5688
Security:	FreeBSD-SA-13:01.bind
Security:	CVE-2010-2632
Security:	FreeBSD-SA-13:02.libc
2013-02-19 13:56:49 +00:00

18 lines
559 B
Diff

Index: contrib/bind9/bin/named/query.c
===================================================================
--- contrib/bind9/bin/named/query.c
+++ contrib/bind9/bin/named/query.c
@@ -5183,10 +5183,12 @@
isc_result_t result;
isc_uint32_t ttl = ISC_UINT32_MAX;
+ dns_rdataset_init(&rdataset);
+
result = dns_db_getoriginnode(db, &node);
if (result != ISC_R_SUCCESS)
goto cleanup;
- dns_rdataset_init(&rdataset);
+
result = dns_db_findrdataset(db, node, version, dns_rdatatype_soa,
0, 0, &rdataset, NULL);
if (result != ISC_R_SUCCESS)