Commit 9113ed84 authored by Witold Krecicki's avatar Witold Krecicki
Browse files

Merge branch 'wpk/fix-mkeys-bug' into 'master'

Fix a bug in trust anchors verification.

See merge request !2609
parents cadbc158 6030cade
Pipeline #26074 passed with stages
in 1 minute and 41 seconds
5323. [bug] Fix a bug in DNSSEC trust anchor verification.
[GL !2609]
5322. [placeholder]
 
5321. [bug] Obtain write lock before updating version->records
......
......@@ -9911,9 +9911,9 @@ keyfetch_done(isc_task_t *task, isc_event_t *event) {
break;
}
}
dns_keytable_detachkeynode(secroots, &keynode);
goto anchors_done;
} else {
dns_keytable_detachkeynode(secroots, &keynode);
}
 
/*
......@@ -9924,6 +9924,10 @@ keyfetch_done(isc_task_t *task, isc_event_t *event) {
result == ISC_R_SUCCESS;
result = dns_rdataset_next(dnskeysigs))
{
result = dns_keytable_find(secroots, keyname, &keynode);
if (result != ISC_R_SUCCESS) {
goto anchors_done;
}
dns_rdata_reset(&sigrr);
dns_rdataset_current(dnskeysigs, &sigrr);
result = dns_rdata_tostruct(&sigrr, &sig, NULL);
......@@ -9971,7 +9975,7 @@ keyfetch_done(isc_task_t *task, isc_event_t *event) {
keynode = nextnode;
}
}
dns_keytable_detachkeynode(secroots, &keynode);
if (secure) {
break;
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment