Package: dnssec-tools
Version: 2.1-1
Severity: important
Dear Maintainer,
rollerd will not start if a NSEC3 record like the following
is in the zone file:
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.m1234.de. 600 IN NSEC3 1 1 100
F2240EF806F366FE (
cccccccccccccccccccccccccccccccc )
in Fast.pm is code to match the closing ), but the match result
in $2 is overwritten by MIME::Base32::decode
the attached patch fixes this:
--- /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm.orig 2014-09-05
19:20:49.000000000 +0200
+++ /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm 2015-06-18 08:59:29.237889232
+0200
@@ -1339,11 +1339,12 @@ sub parse_nsec3
#got more data
if ( /\G\s*([A-Z0-9]{32})\s*(\))?/gc) {
my $nxthash = $1;
+ my $closingbrace = $2;
my $binhash = MIME::Base32::decode(uc($nxthash));
$nsec3->{ 'hnxtname' } = $nxthash;
$nsec3->{ 'hnxtnamebin' } = $binhash;
$nsec3->{ 'hashlength' } = length( $binhash );
- if ( defined($2) && $2 eq ')' ) { # Was RR terminated ?
+ if ( defined($closingbrace) && $closingbrace eq ')' ) { # Was
RR terminated ?
push @zone, $nsec3;
# we're done
$parse = \&parse_line;
-- System Information:
Debian Release: 7.8
APT prefers oldstable-updates
APT policy: (700, 'oldstable-updates'), (700, 'oldstable'), (80, 'stable'),
(50, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages dnssec-tools depends on:
ii bind9utils 1:9.9.5.dfsg-4~bpo70+1
ii libmailtools-perl 2.09-1
ii libnet-dns-perl 0.66-2+b2
ii libnet-dns-sec-perl 0.16-2
ii libtimedate-perl 1.2000-1
ii perl 5.14.2-21+deb7u2
Versions of packages dnssec-tools recommends:
ii bind9 1:9.9.5.dfsg-4~bpo70+1
ii perl-tk 1:804.030-1
dnssec-tools suggests no packages.
-- Configuration Files:
/etc/default/rollerd changed [not included]
/etc/dnssec-tools/dnssec-tools.conf changed [not included]
/etc/dnssec-tools/dnssec-tools.rollrec changed [not included]
/etc/logrotate.d/dnssec-tools changed [not included]
-- no debconf information
-- debsums errors found:
debsums: changed file /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm (from
dnssec-tools package)
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
