ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Update keyfetch_done compute_tag check

Browse Source 
If in keyfetch_done the compute_tag fails (because for example the
algorithm is not supported), don't crash, but instead ignore the
key.
This commit is contained in:
Matthijs Mekking
2018-12-19 18:47:43 +01:00
committed by Evan Hunt
parent 38c2bdba0a
commit f09352d20a
2 changed files with 23 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/dns/include/dst/dst.h
View File

@@ -70,8 +70,7 @@ typedef struct dst_context dst_context_t;
#define DST_ALG_HMACSHA512 165 /* XXXMPA */
#define DST_ALG_INDIRECT 252
#define DST_ALG_PRIVATE 254
#define DST_ALG_EXPAND 255
#define DST_MAX_ALGS 255
#define DST_MAX_ALGS 256
/*% A buffer of this size is large enough to hold any key */
#define DST_KEY_MAXSIZE 1280