From 42b8ca83478c8841b820c01ac0e3dcd8909eef5a Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Mon, 2 Jul 2012 10:03:46 -0700 Subject: [PATCH] fix bad-cache assert 3346. [security] Bad-cache data could be used before it was initialized, causing an assert. [RT #30025] --- CHANGES | 3 +++ lib/dns/resolver.c | 5 +++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/CHANGES b/CHANGES index b400809acd..88b86d69ab 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,6 @@ +3346. [security] Bad-cache data could be used before it was + initialized, causing an assert. [RT #30025] + 3342. [bug] Change #3314 broke saving of stub zones to disk resulting in excessive cpu usage in some cases. [RT #29952] diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c index 1ace4ef1f2..503f1d23b9 100644 --- a/lib/dns/resolver.c +++ b/lib/dns/resolver.c @@ -8472,6 +8472,7 @@ dns_resolver_addbadcache(dns_resolver_t *resolver, dns_name_t *name, goto cleanup; bad->type = type; bad->hashval = hashval; + bad->expire = *expire; isc_buffer_init(&buffer, bad + 1, name->length); dns_name_init(&bad->name, NULL); dns_name_copy(name, &bad->name, &buffer); @@ -8483,8 +8484,8 @@ dns_resolver_addbadcache(dns_resolver_t *resolver, dns_name_t *name, if (resolver->badcount < resolver->badhash * 2 && resolver->badhash > DNS_BADCACHE_SIZE) resizehash(resolver, &now, ISC_FALSE); - } - bad->expire = *expire; + } else + bad->expire = *expire; cleanup: UNLOCK(&resolver->lock); }