WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-09 19:37:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

- Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

Browse Source
This commit is contained in:
W.C.A. Wijngaards
2024-02-13 13:02:43 +01:00
parent 882903f2fa
commit 92f2a1ca69
9 changed files with 611 additions and 167 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testcode/unitverify.c
+2 -2
View File
@@ -443,9 +443,9 @@ nsec3_hash_test_entry(struct entry* e, rbtree_type* ct,
ret = nsec3_hash_name(ct, region, buf, nsec3, 0, qname,
qinfo.qname_len, &hash);
if(ret != 1) {
if(ret < 1) {
printf("Bad nsec3_hash_name retcode %d\n", ret);
unit_assert(ret == 1);
unit_assert(ret == 1 || ret == 2);
}
unit_assert(hash->dname && hash->hash && hash->hash_len &&
hash->b32 && hash->b32_len);