mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-24 10:21:10 -05:00
My original idea had been that the core qp-trie code would be mostly independent of the storage for keys, so I did not make it check at run time that key lengths are sensible. However, the qp-trie search routines need to get keys out of leaf objects, for which they provide storage on the stack, which is particularly dangerous for unchecked buffer overflows. So this change checks that key lengths are in bounds at the API boundary between the qp-trie code and the rest of BIND, and there is no more pretence that keys might be longer. |
||
|---|---|---|
| .. | ||
| dns | ||
| dst | ||
| irs | ||
| .clang-format | ||