diff options
| author |   John Helmert III <ajak@gentoo.org> | 2022-10-30 20:19:33 -0500 |
|---|---|---|
| committer | John Helmert III <ajak@gentoo.org> | 2022-10-30 20:20:11 -0500 |
| commit | 8bdc575dae63f16d44b926f18271d15d3173fc5f (patch) | |
| tree | 5ea4848079149b68583504b7676f5b452274968c /net-dns/bind/files | |
| parent | dev-util/mingw64-toolchain: filter -mfunction-return=thunk for mingw (diff) | |
| download | gentoo-8bdc575dae63f16d44b926f18271d15d3173fc5f.tar.gz gentoo-8bdc575dae63f16d44b926f18271d15d3173fc5f.tar.bz2 gentoo-8bdc575dae63f16d44b926f18271d15d3173fc5f.zip | |
net-dns/bind: security cleanup
Bug: https://bugs.gentoo.org/820563
Bug: https://bugs.gentoo.org/835439
Bug: https://bugs.gentoo.org/872206
Acked-by: Patrick McLean <chutzpah@gentoo.org>
Signed-off-by: John Helmert III <ajak@gentoo.org>
Diffstat (limited to 'net-dns/bind/files')
| -rw-r--r-- | net-dns/bind/files/bind-9.16.29-fortify-source-3.patch | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/net-dns/bind/files/bind-9.16.29-fortify-source-3.patch b/net-dns/bind/files/bind-9.16.29-fortify-source-3.patch deleted file mode 100644 index d084d6e62ce8..000000000000 --- a/net-dns/bind/files/bind-9.16.29-fortify-source-3.patch +++ /dev/null @@ -1,35 +0,0 @@ -https://gitlab.isc.org/isc-projects/bind9/-/commit/b6670787d25743ddf39dfe8e615828efc928f50d -https://gitlab.isc.org/isc-projects/bind9/-/issues/3351 -https://bugs.gentoo.org/847295 - -From: Evan Hunt <each@isc.org> -Date: Fri, 13 May 2022 19:59:58 -0700 -Subject: [PATCH] prevent a possible buffer overflow in configuration check - -corrected code that could have allowed a buffer overfow while -parsing named.conf. - -(cherry picked from commit 921043b54161c7a3e6dc4036b038ca4dbc5fe472) ---- a/lib/bind9/check.c -+++ b/lib/bind9/check.c -@@ -2500,8 +2500,8 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, - } else if (dns_name_isula(zname)) { - ula = true; - } -- tmp += strlen(tmp); - len -= strlen(tmp); -+ tmp += strlen(tmp); - (void)snprintf(tmp, len, "%u/%s", zclass, - (ztype == CFG_ZONE_INVIEW) ? target - : (viewname != NULL) ? viewname -@@ -3247,8 +3247,8 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, - char *tmp = keydirbuf; - size_t len = sizeof(keydirbuf); - dns_name_format(zname, keydirbuf, sizeof(keydirbuf)); -- tmp += strlen(tmp); - len -= strlen(tmp); -+ tmp += strlen(tmp); - (void)snprintf(tmp, len, "/%s", (dir == NULL) ? "(null)" : dir); - tresult = keydirexist(zconfig, (const char *)keydirbuf, - kaspname, keydirs, logctx, mctx); -GitLab |