- Fix assertion failure when unbound generates an empty error reply

in response to a query, CVE-2011-1922 VU#531342.
      - release 1.4.10.


git-svn-id: file:///svn/unbound/tags/release-1.4.10@2417 be551aaa-1e26-0410-a405-d3ace91eadb9

daemon/worker.c

@@ -777,6 +777,7 @@ worker_handle_request(struct comm_point* c, void* arg, int error,
 		qinfo.qtype == LDNS_RR_TYPE_IXFR) {
 		verbose(VERB_ALGO, "worker request: refused zone transfer.");
 		log_addr(VERB_CLIENT,"from",&repinfo->addr, repinfo->addrlen);
+		ldns_buffer_rewind(c->buffer);
 		LDNS_QR_SET(ldns_buffer_begin(c->buffer));
 		LDNS_RCODE_SET(ldns_buffer_begin(c->buffer), 
 			LDNS_RCODE_REFUSED);

doc/Changelog

@@ -1,3 +1,12 @@
+25 March 2011: Wouter
+	- Fix assertion failure when unbound generates an empty error reply
+	  in response to a query, CVE-2011-1922 VU#531342.
+	- release 1.4.10.
+
+24 March 2011: Wouter
+	- iana portlist updated.
+	- release 1.4.9.
+
 17 March 2011: Wouter
 	- bug#370: new unbound.spec for CentOS 5.x from Harold Jones.
 	  Applied but did not do the --disable-gost.

util/iana_ports.inc

@@ -4468,6 +4468,8 @@
 6671,
 6672,
 6673,
+6678,
+6679,
 6689,
 6697,
 6701,
@@ -4884,6 +4886,7 @@
 9444,
 9450,
 9500,
+9522,
 9535,
 9536,
 9555,