Package: dnssec-tools
Version: 2.1-1
Severity: important

Dear Maintainer,

rollerd will not start if a NSEC3 record like the following
 is in the zone file:

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.m1234.de. 600 IN NSEC3 1 1 100 
F2240EF806F366FE (
                                        cccccccccccccccccccccccccccccccc )

in Fast.pm is code to match the closing ), but the match result 
in $2 is overwritten by MIME::Base32::decode

the attached patch fixes this:

--- /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm.orig      2014-09-05 
19:20:49.000000000 +0200
+++ /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm   2015-06-18 08:59:29.237889232 
+0200
@@ -1339,11 +1339,12 @@ sub parse_nsec3
       #got more data
       if ( /\G\s*([A-Z0-9]{32})\s*(\))?/gc) {
          my $nxthash = $1;
+        my $closingbrace = $2;
         my $binhash = MIME::Base32::decode(uc($nxthash));
          $nsec3->{ 'hnxtname' } = $nxthash;
          $nsec3->{ 'hnxtnamebin' } = $binhash;
          $nsec3->{ 'hashlength' } = length( $binhash );
-         if ( defined($2) && $2 eq ')' ) {     # Was RR terminated ?
+         if ( defined($closingbrace) && $closingbrace eq ')' ) {       # Was 
RR terminated ?
            push @zone, $nsec3; 
            # we're done
            $parse = \&parse_line;

-- System Information:
Debian Release: 7.8
  APT prefers oldstable-updates
  APT policy: (700, 'oldstable-updates'), (700, 'oldstable'), (80, 'stable'), 
(50, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages dnssec-tools depends on:
ii  bind9utils           1:9.9.5.dfsg-4~bpo70+1
ii  libmailtools-perl    2.09-1
ii  libnet-dns-perl      0.66-2+b2
ii  libnet-dns-sec-perl  0.16-2
ii  libtimedate-perl     1.2000-1
ii  perl                 5.14.2-21+deb7u2

Versions of packages dnssec-tools recommends:
ii  bind9    1:9.9.5.dfsg-4~bpo70+1
ii  perl-tk  1:804.030-1

dnssec-tools suggests no packages.

-- Configuration Files:
/etc/default/rollerd changed [not included]
/etc/dnssec-tools/dnssec-tools.conf changed [not included]
/etc/dnssec-tools/dnssec-tools.rollrec changed [not included]
/etc/logrotate.d/dnssec-tools changed [not included]

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm (from 
dnssec-tools package)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to