ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
Files
613be8706eca81fee97434e25fda4e9118cfe511
bind9/lib/dns
T
History
Mark Andrews 2f946c831a Attempt to silence untrusted loop bound 
Assign hit_len + key_len to len and test the result
rather than recomputing and letting the compiler simplify.

    213        isc_region_consume(&region, 2); /* hit length + algorithm */
        9. tainted_return_value: Function uint16_fromregion returns tainted data. [show details]
        10. tainted_data_transitive: Call to function uint16_fromregion with tainted argument *region.base returns tainted data.
        11. tainted_return_value: Function uint16_fromregion returns tainted data.
        12. tainted_data_transitive: Call to function uint16_fromregion with tainted argument *region.base returns tainted data.
        13. var_assign: Assigning: key_len = uint16_fromregion(&region), which taints key_len.
    214        key_len = uint16_fromregion(&region);
        14. lower_bounds: Casting narrower unsigned key_len to wider signed type int effectively tests its lower bound.
        15. Condition key_len == 0, taking false branch.
    215        if (key_len == 0) {
    216                RETERR(DNS_R_FORMERR);
    217        }
        16. Condition !!(_r->length >= _l), taking true branch.
        17. Condition !!(_r->length >= _l), taking true branch.
    218        isc_region_consume(&region, 2);
        18. lower_bounds: Casting narrower unsigned key_len to wider signed type int effectively tests its lower bound.
        19. Condition region.length < (unsigned int)(hit_len + key_len), taking false branch.
    219        if (region.length < (unsigned)(hit_len + key_len)) {
    220                RETERR(DNS_R_FORMERR);
    221        }
    222
        20. lower_bounds: Casting narrower unsigned key_len to wider signed type int effectively tests its lower bound.
        21. Condition _r != 0, taking false branch.
    223        RETERR(mem_tobuffer(target, rr.base, 4 + hit_len + key_len));
        22. lower_bounds: Casting narrower unsigned key_len to wider signed type int effectively tests its lower bound.
        23. var_assign_var: Compound assignment involving tainted variable 4 + hit_len + key_len to variable source->current taints source->current.
    224        isc_buffer_forward(source, 4 + hit_len + key_len);
    225
    226        dns_decompress_setmethods(dctx, DNS_COMPRESS_NONE);

    CID 281461 (#1 of 1): Untrusted loop bound (TAINTED_SCALAR)
        24. tainted_data: Using tainted variable source->active - source->current as a loop boundary.
    Ensure that tainted values are properly sanitized, by checking that their values are within a permissible range.
    227        while (isc_buffer_activelength(source) > 0) {
    228                dns_name_init(&name, NULL);
    229                RETERR(dns_name_fromwire(&name, source, dctx, options, target));
    230        }
2021-02-08 02:02:29 +00:00
..
include
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
rdata
Attempt to silence untrusted loop bound
2021-02-08 02:02:29 +00:00
tests
Print warning when falling back to increment soa serial method
2020-12-11 10:48:28 +01:00
win32
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
.gitignore
…
acl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
adb.c
Simplify the EDNS buffer size logic for DNS Flag Day 2020
2020-10-05 16:21:21 +02:00
badcache.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
byaddr.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
cache.c
Remove the option 'cleaning-interval'
2021-01-19 10:12:40 +01:00
callbacks.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
catz.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
client.c
The dns_message_create() cannot fail, change the return to void
2020-09-29 08:22:08 +02:00
clientinfo.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
compress.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
db.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
dbiterator.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
diff.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dispatch.c
Silence cppcheck 2.2 false positive in udp_recv()
2020-11-25 12:45:47 +01:00
dlz.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
dns64.c
add dns_dns64_findprefix
2020-11-25 08:25:29 +11:00
dnsrps.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
dnssec.c
Publish CDS/CDNSKEY Delete Records
2020-12-23 09:02:11 +01:00
dnstap.c
The dns_message_create() cannot fail, change the return to void
2020-09-29 08:22:08 +02:00
dnstap.proto
…
ds.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_api.c
Add function to see if dst key uses kasp
2020-12-23 09:02:11 +01:00
dst_internal.h
Add function to see if dst key uses kasp
2020-12-23 09:02:11 +01:00
dst_openssl.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_parse.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_parse.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_pkcs11.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_result.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dyndb.c
Use libuv's shared library handling capabilities
2020-10-28 15:48:58 +01:00
ecs.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
fixedname.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
forward.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
gen-unix.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gen-win32.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gen.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
geoip2.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gssapi_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gssapictx.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
hmac_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ipkeylist.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
iptable.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
journal.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
kasp.c
Fix signatures-validity config option
2021-01-12 10:54:48 +00:00
key.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
keydata.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
keymgr.c
Use NUM_KEYSTATES constant where appropriate
2021-02-03 15:35:06 +01:00
keytable.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
lib.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
log.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
lookup.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
Makefile.am
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
master.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
masterdump.c
rndc dumpdb -expired: print when RRsets expired
2020-09-23 16:09:26 +02:00
message.c
Check that sig0 name is the root.
2020-09-30 13:24:29 +00:00
name.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ncache.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
nsec3.c
Detect NSEC3 salt collisions
2020-11-26 10:43:59 +01:00
nsec.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
nta.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
openssl_link.c
Refactor TLSDNS module to work with libuv/ssl directly
2021-01-25 09:19:22 +01:00
openssldh_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
opensslecdsa_link.c
Make opensslecdsa_parse use fromlabel
2021-01-26 15:01:26 +01:00
openssleddsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
opensslrsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
order.c
Allow "order none" in "rrset-order" rules
2020-10-02 08:41:43 +02:00
peer.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11ecdsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11eddsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11rsa_link.c
Fix misplaced declaration
2020-12-01 10:46:58 +11:00
private.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rbt.c
Reformat sources using clang-format-11
2020-12-08 18:36:23 +01:00
rbtdb.c
Remove redundant 'version == NULL' check
2021-02-03 13:06:27 +01:00
rbtdb.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rcode.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdata.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatalist_p.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatalist.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdataset.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatasetiter.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdataslab.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
request.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
resolver.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
result.c
Add NSEC3PARAM unit test, refactor zone.c
2020-11-26 10:43:59 +01:00
rootns.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rpz.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
rriterator.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rrl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
sdb.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
sdlz.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
soa.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ssu_external.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ssu.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
stats.c
Update comments to have binary notation
2020-09-29 10:36:07 +10:00
tcpmsg.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
time.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
timer.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tkey.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
transport.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
tsec.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tsig_p.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tsig.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
ttl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
update.c
Treat dnssec-policy "none" as a builtin zone
2020-12-23 09:02:11 +01:00
validator.c
Handle DNS_R_NCACHENXRRSET in fetch_callback_{dnskey,validator}()
2020-10-30 00:17:24 +11:00
view.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
xfrin.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
zone_p.h
Add NSEC3PARAM unit test, refactor zone.c
2020-11-26 10:43:59 +01:00
zone.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
zonekey.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
zoneverify.c
Optimise dnssec-verify
2021-01-28 11:07:03 +11:00
zt.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00