Commit 5c362e67 authored by Mark Andrews's avatar Mark Andrews
Browse files

9.1.1-P4

parent 249bec72
--- 9.1.1-P4 released ---
2203. [security] Query id generation was cryptographically weak.
[RT # 16915]
--- 9.1.1-P3 released ---
......
......@@ -15,7 +15,7 @@
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: client.c,v 1.136.2.4 2001/02/23 02:27:25 gson Exp $ */
/* $Id: client.c,v 1.136.2.4.4.1 2007/08/12 07:38:18 marka Exp $ */
#include <config.h>
......@@ -1222,6 +1222,10 @@ client_request(isc_task_t *task, isc_event_t *event) {
#endif
}
dns_dispatch_hash(&client->now, sizeof(client->now));
dns_dispatch_hash(isc_buffer_base(buffer),
isc_buffer_usedlength(buffer));
result = dns_message_parse(client->message, buffer, 0);
if (result != ISC_R_SUCCESS) {
ns_client_error(client, result);
......
This diff is collapsed.
......@@ -15,7 +15,7 @@
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: dispatch.h,v 1.37.4.1 2001/01/09 22:45:34 bwelling Exp $ */
/* $Id: dispatch.h,v 1.37.4.1.4.1 2007/08/12 07:38:18 marka Exp $ */
#ifndef DNS_DISPATCH_H
#define DNS_DISPATCH_H 1
......@@ -462,6 +462,13 @@ dns_dispatch_changeattributes(dns_dispatch_t *disp,
* attribute on a TCP socket isn't reasonable.
*/
void
dns_dispatch_hash(void *data, size_t len);
/*%<
* Feed 'data' to the dispatch query id generator where 'len' is the size
* of 'data'.
*/
ISC_LANG_ENDDECLS
#endif /* DNS_DISPATCH_H */
# $Id: version,v 1.18.4.13.4.3 2007/01/23 23:42:23 marka Exp $
# $Id: version,v 1.18.4.13.4.4 2007/08/12 07:38:18 marka Exp $
#
# This file must follow /bin/sh rules. It is imported directly via
# configure.
......@@ -7,4 +7,4 @@ MAJORVER=9
MINORVER=1
PATCHVER=1
RELEASETYPE=-P
RELEASEVER=3
RELEASEVER=4
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment