From 06da5d45a38c116275f5100a42fd9bf3e9e85fac Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" Date: Mon, 15 Jun 2026 16:28:30 +0200 Subject: [PATCH] - Fix integer overflow for very high values of `sock-queue-timeout`. Thanks to Qifan Zhang, Palo Alto Networks, for the report. --- daemon/worker.c | 2 +- doc/Changelog | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/daemon/worker.c b/daemon/worker.c index 8c695e1dc..84e0319d9 100644 --- a/daemon/worker.c +++ b/daemon/worker.c @@ -1511,7 +1511,7 @@ worker_handle_request(struct comm_point* c, void* arg, int error, if (worker->stats.max_query_time_us < wait_queue_time) worker->stats.max_query_time_us = wait_queue_time; if(wait_queue_time > - (long long)(worker->env.cfg->sock_queue_timeout * 1000000)) { + (long long)worker->env.cfg->sock_queue_timeout * 1000000) { /* count and drop queries that were sitting in the socket queue too long */ worker->stats.num_queries_timed_out++; return 0; diff --git a/doc/Changelog b/doc/Changelog index 0b67da850..d4985dcb3 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -31,6 +31,9 @@ query caused error information that was not cleared by a successful A subquery. Thanks to Qifan Zhang, Palo Alto Networks, for the report. + - Fix integer overflow for very high values of + `sock-queue-timeout`. Thanks to Qifan Zhang, Palo Alto + Networks, for the report. 12 June 2026: Wouter - Fix that for auth-zone and rpz zones the allow-notify