On Wed, 29 Jul 2009 04:57:29 +0200
frantisek holop <[email protected]> wrote:

> morning,
> 
> https://www.isc.org/node/474
> http://www.kb.cert.org/vuls/id/725188
> 
> -f

Hi,

it's late/early so the following comes without warranty.
Compiles, install and works for me on -current amd64/i386 both on master
and slave servers. (Haven't gotten around to the 4.5 case yet, but
should apply there, too.)

- Robert

# cd /usr/src
# patch -p0 < patch-file-found-below
# cd usr.sbin/bind
# make -f Makefile.bsd-wrapper
# make -f Makefile.bsd-warpper install

Index: usr.sbin/bind/bin/named/update.c
===================================================================
RCS file: /cvs/src/usr.sbin/bind/bin/named/update.c,v
retrieving revision 1.7
diff -u -p -r1.7 update.c
--- usr.sbin/bind/bin/named/update.c    9 Dec 2007 13:39:42 -0000       1.7
+++ usr.sbin/bind/bin/named/update.c    29 Jul 2009 02:34:11 -0000
@@ -861,7 +861,11 @@ temp_check(isc_mem_t *mctx, dns_diff_t *
                        if (type == dns_rdatatype_rrsig ||
                            type == dns_rdatatype_sig)
                                covers = dns_rdata_covers(&t->rdata);
-                       else
+                       else if (type == dns_rdatatype_any) {
+                               dns_db_detachnode(db, &node);
+                               dns_diff_clear(&trash);
+                               return (DNS_R_NXRRSET);
+                       } else
                                covers = 0;
 
                        /*

Reply via email to