WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-22 17:54:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

- Fix CVE-2026-85501, Retrap: Novel Vulnerabilities to launch

Browse Source 
Algorithmic Complexity Attacks on DNSSEC. Thanks to Zuyao Xu and
  Xiang Li from Nankai University, AOSP Lab for the report. In
  addition, thanks to Qifan Zhang from Palo Alto Networks for a
  complimentary report.
This commit is contained in:
W.C.A. Wijngaards
2026-09-16 09:30:25 +02:00
parent 0d4a6a63dd
commit 13b6717f17
30 changed files with 411 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testcode/unitverify.c
+1 -1
View File
@@ -196,7 +196,7 @@ verifytest_rrset(struct module_env* env, struct val_env* ve,
setup_sigalg(dnskey, sigalg); /* check all algorithms in the dnskey */
/* ok to give null as qstate here, won't be used for answer section. */
sec = dnskeyset_verify_rrset(env, ve, rrset, dnskey, sigalg, &reason,
NULL, LDNS_SECTION_ANSWER, NULL, &verified, reasonbuf,
NULL, LDNS_SECTION_ANSWER, NULL, NULL, &verified, reasonbuf,
sizeof(reasonbuf));
if(vsig) {
printf("verify outcome is: %s %s\n", sec_status_to_string(sec),