Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 10:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix broken ECDSA DNSSEC signatures.

Browse Source
This commit is contained in:
Simon Kelley
2015-01-31 22:44:26 +00:00
parent 3d04f46334
commit 6ef15b34ca
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG
View File

@@ -65,6 +65,8 @@ version 2.73
configured to do stateful DHCPv6. Thanks to Win King Wan configured to do stateful DHCPv6. Thanks to Win King Wan
for the patch. for the patch.
Fix broken DNSSEC validation of ECDSA signatures.
version 2.72 version 2.72
Add ra-advrouter mode, for RFC-3775 mobile IPv6 support. Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.

2
src/dnssec.c
View File

@@ -275,7 +275,7 @@ static int dnsmasq_ecdsa_verify(struct blockdata *key_data, unsigned int key_len
} }
if (sig_len != 2*t || key_len != 2*t || if (sig_len != 2*t || key_len != 2*t ||
(p = blockdata_retrieve(key_data, key_len, NULL))) !(p = blockdata_retrieve(key_data, key_len, NULL)))
return 0; return 0;
mpz_import(x, t , 1, 1, 0, 0, p); mpz_import(x, t , 1, 1, 0, 0, p);