Commit fa7ef316 authored by Francis Dupont's avatar Francis Dupont

integrate -P1 patch

parent d6acbaf5
......@@ -17,7 +17,7 @@
2523. [bug] Random type rdata freed by dns_nsec_typepresent().
[RT #19112]
2522. [placeholder]
2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
2521. [bug] Improve epoll cross compilation support. [RT #19047]
......
LIBINTERFACE = 50
LIBREVISION = 1
LIBREVISION = 3
LIBAGE = 0
......@@ -29,7 +29,7 @@
* IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: openssldsa_link.c,v 1.13 2008/04/01 23:47:10 tbox Exp $ */
/* $Id: openssldsa_link.c,v 1.14 2009/01/14 17:28:47 fdupont Exp $ */
#ifdef OPENSSL
#ifndef USE_EVP
......@@ -277,7 +277,7 @@ openssldsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa);
#endif
DSA_SIG_free(dsasig);
if (status == 0)
if (status != 1)
return (dst__openssl_toresult(DST_R_VERIFYFAILURE));
return (ISC_R_SUCCESS);
......
......@@ -17,7 +17,7 @@
/*
* Principal Author: Brian Wellington
* $Id: opensslrsa_link.c,v 1.20 2008/09/24 02:46:22 marka Exp $
* $Id: opensslrsa_link.c,v 1.21 2009/01/14 17:28:47 fdupont Exp $
*/
#ifdef OPENSSL
#ifndef USE_EVP
......@@ -325,7 +325,7 @@ opensslrsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
status = RSA_verify(type, digest, digestlen, sig->base,
RSA_size(rsa), rsa);
#endif
if (status == 0)
if (status != 1)
return (dst__openssl_toresult(DST_R_VERIFYFAILURE));
return (ISC_R_SUCCESS);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment