bind9/lib
Tony Finch 3c333d02a0 More dns_qpkey_t safety checks
My original idea had been that the core qp-trie code would be mostly
independent of the storage for keys, so I did not make it check at run
time that key lengths are sensible. However, the qp-trie search
routines need to get keys out of leaf objects, for which they provide
storage on the stack, which is particularly dangerous for unchecked
buffer overflows. So this change checks that key lengths are in bounds
at the API boundary between the qp-trie code and the rest of BIND, and
there is no more pretence that keys might be longer.
2023-04-03 15:10:47 +00:00
..
dns More dns_qpkey_t safety checks 2023-04-03 15:10:47 +00:00
isc Silence NULL pointer dereferene false positive 2023-04-03 13:32:40 +00:00
isccc Replace DE_CONST(k, v) with v = UNCONST(k) macro 2023-04-03 10:25:56 +00:00
isccfg Add new 'checkds' configuration option 2023-04-03 14:01:22 +00:00
ns Use isc_histo for the message size statistics 2023-04-03 12:08:05 +01:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00