source/n/bind/bind-9.16.11.CVE-2020-8625.diff


1
2
3
4
5
6
7
8
9
10
11
12

diff -u -r --new-file bind-9.16.11.orig/lib/dns/spnego.c bind-9.16.11/lib/dns/spnego.c
--- bind-9.16.11.orig/lib/dns/spnego.c	2021-01-11 07:23:31.000000000 -0600
+++ bind-9.16.11/lib/dns/spnego.c	2021-02-24 13:57:17.199873321 -0600
@@ -848,7 +848,7 @@
 		return (ASN1_OVERRUN);
 	}
 
-	data->components = malloc(len * sizeof(*data->components));
+	data->components = malloc((len + 1) * sizeof(*data->components));
 	if (data->components == NULL) {
 		return (ENOMEM);
 	}