From 65f5b2f0162d5d2ab25f463aa14a8bae71ace3d9 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 11 Aug 2022 15:28:13 +1000 Subject: [PATCH 3/3] Free ctx on invalid siglen (cherry picked from commit 6ddb480a84836641a0711768a94122972c166825) Upstream-Status: Backport CVE: CVE-2022-38178 Reference to upstream patch: https://gitlab.isc.org/isc-projects/bind9/-/commit/1af23378ebb11da2eb0f412e4563d6 Signed-off-by: Mathieu Dubois-Briand --- lib/dns/openssleddsa_link.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/dns/openssleddsa_link.c b/lib/dns/openssleddsa_link.c index 8b115ec283f0..b4fcd607c131 100644 --- a/lib/dns/openssleddsa_link.c +++ b/lib/dns/openssleddsa_link.c @@ -325,7 +325,7 @@ openssleddsa_verify(dst_context_t *dctx, const isc_region_t *sig) { siglen = DNS_SIG_ED448SIZE; if (sig->length != siglen) - return (DST_R_VERIFYFAILURE); + DST_RET(ISC_R_NOTIMPLEMENTED); isc_buffer_usedregion(buf, &tbsreg); -- 2.34.1