Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.2:Update
knot
knot-CVE-2017-11104.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File knot-CVE-2017-11104.patch of Package knot
Index: knot-1.6.8/src/libknot/tsig-op.c =================================================================== --- knot-1.6.8.orig/src/libknot/tsig-op.c +++ knot-1.6.8/src/libknot/tsig-op.c @@ -695,16 +695,8 @@ static int knot_tsig_check_digest(const return KNOT_TSIG_EBADKEY; } - /* Check time signed. */ - int ret = knot_tsig_check_time_signed(tsig_rr, prev_time_signed); - if (ret != KNOT_EOK) { - return ret; - } - - dbg_tsig_verb("TSIG: time checked.\n"); - /* Check that libknot knows the algorithm. */ - ret = knot_tsig_check_algorithm(tsig_rr); + int ret = knot_tsig_check_algorithm(tsig_rr); if (ret != KNOT_EOK) { return ret; } @@ -782,6 +774,14 @@ static int knot_tsig_check_digest(const return KNOT_TSIG_EBADSIG; } + /* Check TSIG validity period, must be after the signature check! */ + ret = knot_tsig_check_time_signed(tsig_rr, prev_time_signed); + if (ret != KNOT_EOK) { + return ret; + } + + dbg_tsig_verb("TSIG: time checked.\n"); + return KNOT_EOK; }
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
