Guest User

BIND-9.8.1 assertion failure vulnerability patch diff.

a guest
Nov 17th, 2011
418
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. diff -r bind-9.8.1-P1/CHANGES bind-9.8.1/CHANGES
  2. 1,6d0
  3. <   --- 9.8.1-P1 released ---
  4. <
  5. < 3218. [security]  Cache lookup could return RRSIG data associated with
  6. <           nonexistent records, leading to an assertion
  7. <           failure. [RT #26590]
  8. <
  9. diff -r bind-9.8.1-P1/bin/named/query.c bind-9.8.1/bin/named/query.c
  10. 18c18
  11. < /* $Id: query.c,v 1.353.8.11.4.1 2011-11-16 09:32:08 marka Exp $ */
  12. ---
  13. > /* $Id: query.c,v 1.353.8.11 2011-06-09 03:14:03 marka Exp $ */
  14. 1396,1398c1396,1400
  15. <           if (sigrdataset != NULL &&
  16. <               dns_rdataset_isassociated(sigrdataset))
  17. <               dns_rdataset_disassociate(sigrdataset);
  18. ---
  19. >           /*
  20. >            * Negative cache entries don't have sigrdatasets.
  21. >            */
  22. >           INSIST(sigrdataset == NULL ||
  23. >                  ! dns_rdataset_isassociated(sigrdataset));
  24. 1439,1441c1441,1442
  25. <           if (sigrdataset != NULL &&
  26. <               dns_rdataset_isassociated(sigrdataset))
  27. <               dns_rdataset_disassociate(sigrdataset);
  28. ---
  29. >           INSIST(sigrdataset == NULL ||
  30. >                  ! dns_rdataset_isassociated(sigrdataset));
  31. 1891,1892c1892,1895
  32. <       if (dns_rdataset_isassociated(sigrdataset))
  33. <           dns_rdataset_disassociate(sigrdataset);
  34. ---
  35. >       /*
  36. >        * Negative cache entries don't have sigrdatasets.
  37. >        */
  38. >       INSIST(! dns_rdataset_isassociated(sigrdataset));
  39. diff -r bind-9.8.1-P1/lib/dns/rbtdb.c bind-9.8.1/lib/dns/rbtdb.c
  40. 18c18
  41. < /* $Id: rbtdb.c,v 1.310.8.5.4.1 2011-11-16 09:32:08 marka Exp $ */
  42. ---
  43. > /* $Id: rbtdb.c,v 1.310.8.5 2011-06-08 23:02:42 each Exp $ */
  44. 5056c5056
  45. <       if (!NEGATIVE(found) && foundsig != NULL) {
  46. ---
  47. >       if (foundsig != NULL) {
  48. 5688c5688
  49. <       if (!NEGATIVE(found) && foundsig != NULL)
  50. ---
  51. >       if (foundsig != NULL)
  52. diff -r bind-9.8.1-P1/version bind-9.8.1/version
  53. 1c1
  54. < # $Id: version,v 1.53.8.9.6.1 2011-11-16 09:32:07 marka Exp $
  55. ---
  56. > # $Id: version,v 1.53.8.9 2011-08-24 02:08:26 marka Exp $
  57. 9,10c9,10
  58. < RELEASETYPE=-P
  59. < RELEASEVER=1
  60. ---
  61. > RELEASETYPE=
  62. > RELEASEVER=
  63.  
  64.  
RAW Paste Data