Blame SOURCES/bind-9.16-CVE-2022-3736.patch

bd9435
From 1b6590eafce064cbf70f5afc2fe4d6f1bfdc3804 Mon Sep 17 00:00:00 2001
bd9435
From: Mark Andrews <marka@isc.org>
bd9435
Date: Thu, 27 Oct 2022 13:22:11 +1100
bd9435
Subject: [PATCH] Move the mapping of SIG and RRSIG to ANY
bd9435
bd9435
dns_db_findext() asserts if RRSIG is passed to it and
bd9435
query_lookup_stale() failed to map RRSIG to ANY to prevent this.  To
bd9435
avoid cases like this in the future, move the mapping of SIG and RRSIG
bd9435
to ANY for qctx->type to qctx_init().
bd9435
bd9435
(cherry picked from commit 56eae064183488bcf7ff08c3edf59f2e1742c1b6)
bd9435
---
bd9435
 lib/ns/query.c | 17 +++++++++--------
bd9435
 1 file changed, 9 insertions(+), 8 deletions(-)
bd9435
bd9435
diff --git a/lib/ns/query.c b/lib/ns/query.c
bd9435
index a450cb7..f66bab4 100644
bd9435
--- a/lib/ns/query.c
bd9435
+++ b/lib/ns/query.c
bd9435
@@ -5103,6 +5103,15 @@ qctx_init(ns_client_t *client, dns_fetchevent_t **eventp, dns_rdatatype_t qtype,
bd9435
 	qctx->result = ISC_R_SUCCESS;
bd9435
 	qctx->findcoveringnsec = qctx->view->synthfromdnssec;
bd9435
 
bd9435
+	/*
bd9435
+	 * If it's an RRSIG or SIG query, we'll iterate the node.
bd9435
+	 */
bd9435
+	if (qctx->qtype == dns_rdatatype_rrsig ||
bd9435
+	    qctx->qtype == dns_rdatatype_sig)
bd9435
+	{
bd9435
+		qctx->type = dns_rdatatype_any;
bd9435
+	}
bd9435
+
bd9435
 	CALL_HOOK_NORETURN(NS_QUERY_QCTX_INITIALIZED, qctx);
bd9435
 }
bd9435
 
bd9435
@@ -5243,14 +5252,6 @@ query_setup(ns_client_t *client, dns_rdatatype_t qtype) {
bd9435
 
bd9435
 	CALL_HOOK(NS_QUERY_SETUP, &qctx);
bd9435
 
bd9435
-	/*
bd9435
-	 * If it's a SIG query, we'll iterate the node.
bd9435
-	 */
bd9435
-	if (qctx.qtype == dns_rdatatype_rrsig ||
bd9435
-	    qctx.qtype == dns_rdatatype_sig) {
bd9435
-		qctx.type = dns_rdatatype_any;
bd9435
-	}
bd9435
-
bd9435
 	/*
bd9435
 	 * Check SERVFAIL cache
bd9435
 	 */
bd9435
-- 
bd9435
2.39.1
bd9435