CVS commit: [netbsd-6-0] src/external/bsd/bind
Module Name:src Committed By: bouyer Date: Sun Nov 15 19:12:53 UTC 2015 Modified Files: src/external/bsd/bind/dist [netbsd-6-0]: CHANGES COPYRIGHT FAQ.xml README config.h.in config.h.win32 configure configure.in srcid version src/external/bsd/bind/dist/bin/check [netbsd-6-0]: named-checkconf.c src/external/bsd/bind/dist/bin/dig [netbsd-6-0]: dig.1 dig.docbook dig.html dighost.c host.c nslookup.c src/external/bsd/bind/dist/bin/dig/include/dig [netbsd-6-0]: dig.h src/external/bsd/bind/dist/bin/dnssec [netbsd-6-0]: dnssec-dsfromkey.c dnssec-importkey.c dnssec-keyfromlabel.c dnssec-keygen.8 dnssec-keygen.c dnssec-keygen.docbook dnssec-keygen.html dnssec-settime.8 dnssec-settime.c dnssec-settime.docbook dnssec-settime.html dnssec-signzone.c dnssec-verify.c dnssectool.c dnssectool.h src/external/bsd/bind/dist/bin/named [netbsd-6-0]: client.c config.c interfacemgr.c main.c named.html query.c server.c update.c zoneconf.c src/external/bsd/bind/dist/bin/named/include/named [netbsd-6-0]: globals.h src/external/bsd/bind/dist/bin/nsupdate [netbsd-6-0]: nsupdate.c src/external/bsd/bind/dist/bin/rndc [netbsd-6-0]: rndc.c src/external/bsd/bind/dist/bin/tests/system [netbsd-6-0]: conf.sh.in genzone.sh start.pl src/external/bsd/bind/dist/bin/tests/system/checkconf [netbsd-6-0]: good.conf tests.sh src/external/bsd/bind/dist/bin/tests/system/checkzone [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/dnssec [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/dnssec/ns2 [netbsd-6-0]: example.db.in sign.sh src/external/bsd/bind/dist/bin/tests/system/dnssec/ns3 [netbsd-6-0]: named.conf sign.sh src/external/bsd/bind/dist/bin/tests/system/emptyzones [netbsd-6-0]: clean.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/emptyzones/ns1 [netbsd-6-0]: named2.conf src/external/bsd/bind/dist/bin/tests/system/forward [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/forward/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/forward/ns4 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/inline [netbsd-6-0]: clean.sh setup.sh src/external/bsd/bind/dist/bin/tests/system/inline/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/notify [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/notify/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/redirect [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/resolver [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/resolver/ns4 [netbsd-6-0]: root.db tld1.db tld2.db src/external/bsd/bind/dist/bin/tests/system/resolver/ns7 [netbsd-6-0]: named1.conf named2.conf src/external/bsd/bind/dist/bin/tests/system/rpz [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/upforwd [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/upforwd/ns1 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/upforwd/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/upforwd/ns3 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/views [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/views/ns2 [netbsd-6-0]: named2.conf src/external/bsd/bind/dist/bin/tests/system/xfer [netbsd-6-0]: dig1.good dig2.good src/external/bsd/bind/dist/contrib/dlz/example [netbsd-6-0]: README src/external/bsd/bind/dist/contrib/dlz/modules/bdbhpt [netbsd-6-0]: README.md src/external/bsd/bind/dist/contrib/dlz/modules/bdbhpt/testing [netbsd-6-0]: dns-data.txt src/external/bsd/bind/dist/contrib/sdb/ldap [netbsd-6-0]: ldapdb.c src/external/bsd/bind/dist/doc/arm [netbsd-6-0]: Bv9ARM-book.xml Bv9ARM.ch01.html Bv9ARM.ch02.html Bv9ARM.ch03.html Bv9ARM.ch04.html Bv9ARM.ch05.html Bv9ARM.ch06.html Bv9ARM.ch07.html Bv9ARM.ch08.html Bv9ARM.ch09.html Bv9ARM.ch10.html Bv9ARM.html Makefile.in dnssec.xml latex-fixup.pl man.arpaname.html man.ddns-confgen.html man.dig.html man.dnssec-checkds.html man.dnssec-coverage.html man.dnssec-dsfromkey.html man
CVS commit: [netbsd-6-0] src/external/bsd/bind
Module Name:src Committed By: bouyer Date: Tue Nov 17 19:31:17 UTC 2015 Modified Files: src/external/bsd/bind/dist [netbsd-6-0]: CHANGES COPYRIGHT FAQ.xml README config.h.in config.h.win32 configure configure.in srcid version src/external/bsd/bind/dist/bin/check [netbsd-6-0]: named-checkconf.c src/external/bsd/bind/dist/bin/dig [netbsd-6-0]: dig.1 dig.docbook dig.html dighost.c host.c nslookup.c src/external/bsd/bind/dist/bin/dig/include/dig [netbsd-6-0]: dig.h src/external/bsd/bind/dist/bin/dnssec [netbsd-6-0]: dnssec-dsfromkey.c dnssec-importkey.c dnssec-keyfromlabel.c dnssec-keygen.8 dnssec-keygen.c dnssec-keygen.docbook dnssec-keygen.html dnssec-settime.8 dnssec-settime.c dnssec-settime.docbook dnssec-settime.html dnssec-signzone.c dnssec-verify.c dnssectool.c dnssectool.h src/external/bsd/bind/dist/bin/named [netbsd-6-0]: client.c config.c interfacemgr.c main.c named.html query.c server.c update.c zoneconf.c src/external/bsd/bind/dist/bin/named/include/named [netbsd-6-0]: globals.h src/external/bsd/bind/dist/bin/nsupdate [netbsd-6-0]: nsupdate.c src/external/bsd/bind/dist/bin/rndc [netbsd-6-0]: rndc.c src/external/bsd/bind/dist/bin/tests/system [netbsd-6-0]: conf.sh.in genzone.sh start.pl src/external/bsd/bind/dist/bin/tests/system/checkconf [netbsd-6-0]: good.conf tests.sh src/external/bsd/bind/dist/bin/tests/system/checkzone [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/dnssec [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/dnssec/ns2 [netbsd-6-0]: example.db.in sign.sh src/external/bsd/bind/dist/bin/tests/system/dnssec/ns3 [netbsd-6-0]: named.conf sign.sh src/external/bsd/bind/dist/bin/tests/system/emptyzones [netbsd-6-0]: clean.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/emptyzones/ns1 [netbsd-6-0]: named2.conf src/external/bsd/bind/dist/bin/tests/system/forward [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/forward/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/forward/ns4 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/inline [netbsd-6-0]: clean.sh setup.sh src/external/bsd/bind/dist/bin/tests/system/inline/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/notify [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/notify/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/redirect [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/resolver [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/resolver/ns4 [netbsd-6-0]: root.db tld1.db tld2.db src/external/bsd/bind/dist/bin/tests/system/resolver/ns7 [netbsd-6-0]: named1.conf named2.conf src/external/bsd/bind/dist/bin/tests/system/rpz [netbsd-6-0]: tests.sh src/external/bsd/bind/dist/bin/tests/system/upforwd [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/upforwd/ns1 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/upforwd/ns2 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/upforwd/ns3 [netbsd-6-0]: named.conf src/external/bsd/bind/dist/bin/tests/system/views [netbsd-6-0]: clean.sh setup.sh tests.sh src/external/bsd/bind/dist/bin/tests/system/views/ns2 [netbsd-6-0]: named2.conf src/external/bsd/bind/dist/bin/tests/system/xfer [netbsd-6-0]: dig1.good dig2.good src/external/bsd/bind/dist/contrib/dlz/example [netbsd-6-0]: README src/external/bsd/bind/dist/contrib/dlz/modules/bdbhpt [netbsd-6-0]: README.md src/external/bsd/bind/dist/contrib/dlz/modules/bdbhpt/testing [netbsd-6-0]: dns-data.txt src/external/bsd/bind/dist/contrib/sdb/ldap [netbsd-6-0]: ldapdb.c src/external/bsd/bind/dist/doc/arm [netbsd-6-0]: Bv9ARM-book.xml Bv9ARM.ch01.html Bv9ARM.ch02.html Bv9ARM.ch03.html Bv9ARM.ch04.html Bv9ARM.ch05.html Bv9ARM.ch06.html Bv9ARM.ch07.html Bv9ARM.ch08.html Bv9ARM.ch09.html Bv9ARM.ch10.html Bv9ARM.html Makefile.in dnssec.xml latex-fixup.pl man.arpaname.html man.ddns-confgen.html man.dig.html man.dnssec-checkds.html man.dnssec-coverage.html man.dnssec-dsfromkey.html man
CVS commit: [netbsd-6-0] src/external/bsd/bind
Module Name:src
Committed By: martin
Date: Sun Jan 4 14:58:28 UTC 2015
Modified Files:
src/external/bsd/bind [netbsd-6-0]: Makefile.inc
Log Message:
Pullup part of rev 1.16 via patch, requested by he in #1226
To generate a diff of this commit:
cvs rdiff -u -r1.12.4.1.4.1 -r1.12.4.1.4.2 src/external/bsd/bind/Makefile.inc
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/external/bsd/bind/Makefile.inc
diff -u src/external/bsd/bind/Makefile.inc:1.12.4.1.4.1 src/external/bsd/bind/Makefile.inc:1.12.4.1.4.2
--- src/external/bsd/bind/Makefile.inc:1.12.4.1.4.1 Wed Dec 31 11:58:26 2014
+++ src/external/bsd/bind/Makefile.inc Sun Jan 4 14:58:28 2015
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.inc,v 1.12.4.1.4.1 2014/12/31 11:58:26 msaitoh Exp $
+# $NetBSD: Makefile.inc,v 1.12.4.1.4.2 2015/01/04 14:58:28 martin Exp $
.if !defined(BIND9_MAKEFILE_INC)
BIND9_MAKEFILE_INC=yes
@@ -108,8 +108,8 @@ LIBDPLIBS+= $L ${NETBSDSRCDIR}/crypt
.endif
.endif
.if !defined (LIB) || empty(LIB)
-LDADD+= -lcrypto
-DPADD+= ${LIBCRYPTO}
+LDADD+= -lcrypto -lcrypt
+DPADD+= ${LIBCRYPTO} ${LIBCRYPT}
.else
.if exists(${NETBSDSRCDIR}/crypto/external/bsd/openssl/lib/libcrypto)
LIBDPLIBS+= crypto ${NETBSDSRCDIR}/crypto/external/bsd/openssl/lib/libcrypto
CVS commit: [netbsd-6-0] src/external/bsd/bind/dist
Module Name:src
Committed By: riz
Date: Thu Dec 13 17:42:04 UTC 2012
Modified Files:
src/external/bsd/bind/dist [netbsd-6-0]: CHANGES version
src/external/bsd/bind/dist/bin/named [netbsd-6-0]: query.c
Log Message:
external/bsd/bind/dist/CHANGES patch
external/bsd/bind/dist/version patch
external/bsd/bind/dist/bin/named/query.cpatch
Address CVE-2012-5688: Named could die on specific queries with dns64
enabled.
[spz, ticket #740]
To generate a diff of this commit:
cvs rdiff -u -r1.2.2.4 -r1.2.2.4.2.1 src/external/bsd/bind/dist/CHANGES
cvs rdiff -u -r1.1.1.10.4.4 -r1.1.1.10.4.4.2.1 \
src/external/bsd/bind/dist/version
cvs rdiff -u -r1.7.2.2 -r1.7.2.2.2.1 \
src/external/bsd/bind/dist/bin/named/query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/external/bsd/bind/dist/CHANGES
diff -u src/external/bsd/bind/dist/CHANGES:1.2.2.4 src/external/bsd/bind/dist/CHANGES:1.2.2.4.2.1
--- src/external/bsd/bind/dist/CHANGES:1.2.2.4 Tue Oct 9 23:58:08 2012
+++ src/external/bsd/bind/dist/CHANGES Thu Dec 13 17:42:04 2012
@@ -1,3 +1,8 @@
+ --- diff from 9.9.2 to 9.9.2-P1 --
+
+3407. [security] Named could die on specific queries with dns64 enabled.
+ [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+
--- 9.9.1-P4 released ---
3383. [security] A certain combination of records in the RBT could
Index: src/external/bsd/bind/dist/version
diff -u src/external/bsd/bind/dist/version:1.1.1.10.4.4 src/external/bsd/bind/dist/version:1.1.1.10.4.4.2.1
--- src/external/bsd/bind/dist/version:1.1.1.10.4.4 Tue Oct 9 23:58:08 2012
+++ src/external/bsd/bind/dist/version Thu Dec 13 17:42:04 2012
@@ -7,4 +7,4 @@ MAJORVER=9
MINORVER=9
PATCHVER=1
RELEASETYPE=-P
-RELEASEVER=4
+RELEASEVER=4nb1
Index: src/external/bsd/bind/dist/bin/named/query.c
diff -u src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2 src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2.2.1
--- src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2 Tue Oct 9 23:58:09 2012
+++ src/external/bsd/bind/dist/bin/named/query.c Thu Dec 13 17:42:04 2012
@@ -1,4 +1,4 @@
-/* $NetBSD: query.c,v 1.7.2.2 2012/10/09 23:58:09 riz Exp $ */
+/* $NetBSD: query.c,v 1.7.2.2.2.1 2012/12/13 17:42:04 riz Exp $ */
/*
* Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
@@ -5178,10 +5178,12 @@ dns64_ttl(dns_db_t *db, dns_dbversion_t
isc_result_t result;
isc_uint32_t ttl = ISC_UINT32_MAX;
+ dns_rdataset_init(&rdataset);
+
result = dns_db_getoriginnode(db, &node);
if (result != ISC_R_SUCCESS)
goto cleanup;
- dns_rdataset_init(&rdataset);
+
result = dns_db_findrdataset(db, node, version, dns_rdatatype_soa,
0, 0, &rdataset, NULL);
if (result != ISC_R_SUCCESS)
CVS commit: [netbsd-6-0] src/external/bsd/bind/include/isc
Module Name:src Committed By: msaitoh Date: Mon Jan 5 23:09:44 UTC 2015 Modified Files: src/external/bsd/bind/include/isc [netbsd-6-0]: platform.h Log Message: Pullup the following revision (requested by he in ticket #1217): src/external/bsd/bind/include/isc/platform.hrev. 1.18 What ISC wraps under ISC_PLATFORM_HAVEXADD appears to be 32-bit atomic adds, and I beleive all our platforms can do that. Therefore, no need to conditionalize that definition under __HAVE_ATOMIC64_OPS. To generate a diff of this commit: cvs rdiff -u -r1.12.4.1.4.1 -r1.12.4.1.4.2 \ src/external/bsd/bind/include/isc/platform.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/external/bsd/bind/include/isc/platform.h diff -u src/external/bsd/bind/include/isc/platform.h:1.12.4.1.4.1 src/external/bsd/bind/include/isc/platform.h:1.12.4.1.4.2 --- src/external/bsd/bind/include/isc/platform.h:1.12.4.1.4.1 Wed Dec 31 11:59:14 2014 +++ src/external/bsd/bind/include/isc/platform.h Mon Jan 5 23:09:44 2015 @@ -270,9 +270,7 @@ * If the "xadd" operation is available on this architecture, * ISC_PLATFORM_HAVEXADD will be defined. */ -#ifdef __HAVE_ATOMIC64_OPS #define ISC_PLATFORM_HAVEXADD 1 -#endif /* * If the "xaddq" operation (64bit xadd) is available on this architecture,
CVS commit: [netbsd-6-0] src/external/bsd/bind/dist/bin/named
Module Name:src
Committed By: bouyer
Date: Wed Jan 15 10:06:57 UTC 2014
Modified Files:
src/external/bsd/bind/dist/bin/named [netbsd-6-0]: query.c
Log Message:
Pull up following revision(s) (requested by spz in ticket #1016):
external/bsd/bind/dist/bin/named/query.c: revision 1.13 via patch
a fix by ISC for CVE-2014-0591:
3693. [security] memcpy was incorrectly called with overlapping
ranges resulting in malformed names being generated
on some platforms. This could cause INSIST failures
when serving NSEC3 signed zones. [RT #35120]
To generate a diff of this commit:
cvs rdiff -u -r1.7.2.2.2.1 -r1.7.2.2.2.2 \
src/external/bsd/bind/dist/bin/named/query.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/external/bsd/bind/dist/bin/named/query.c
diff -u src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2.2.1 src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2.2.2
--- src/external/bsd/bind/dist/bin/named/query.c:1.7.2.2.2.1 Thu Dec 13 17:42:04 2012
+++ src/external/bsd/bind/dist/bin/named/query.c Wed Jan 15 10:06:57 2014
@@ -1,4 +1,4 @@
-/* $NetBSD: query.c,v 1.7.2.2.2.1 2012/12/13 17:42:04 riz Exp $ */
+/* $NetBSD: query.c,v 1.7.2.2.2.2 2014/01/15 10:06:57 bouyer Exp $ */
/*
* Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
@@ -5079,8 +5079,7 @@ query_findclosestnsec3(dns_name_t *qname
dns_fixedname_t fixed;
dns_hash_t hash;
dns_name_t name;
- int order;
- unsigned int count;
+ unsigned int skip = 0, labels;
dns_rdata_nsec3_t nsec3;
dns_rdata_t rdata = DNS_RDATA_INIT;
isc_boolean_t optout;
@@ -5095,6 +5094,7 @@ query_findclosestnsec3(dns_name_t *qname
dns_name_init(&name, NULL);
dns_name_clone(qname, &name);
+ labels = dns_name_countlabels(&name);
dns_clientinfomethods_init(&cm, ns_client_sourceip);
dns_clientinfo_init(&ci, client);
@@ -5128,13 +5128,14 @@ query_findclosestnsec3(dns_name_t *qname
dns_rdata_reset(&rdata);
optout = ISC_TF((nsec3.flags & DNS_NSEC3FLAG_OPTOUT) != 0);
if (found != NULL && optout &&
- dns_name_fullcompare(&name, dns_db_origin(db), &order,
- &count) == dns_namereln_subdomain) {
+ dns_name_issubdomain(&name, dns_db_origin(db)))
+ {
dns_rdataset_disassociate(rdataset);
if (dns_rdataset_isassociated(sigrdataset))
dns_rdataset_disassociate(sigrdataset);
- count = dns_name_countlabels(&name) - 1;
- dns_name_getlabelsequence(&name, 1, count, &name);
+ skip++;
+ dns_name_getlabelsequence(qname, skip, labels - skip,
+ &name);
ns_client_log(client, DNS_LOGCATEGORY_DNSSEC,
NS_LOGMODULE_QUERY, ISC_LOG_DEBUG(3),
"looking for closest provable encloser");
@@ -5152,7 +5153,11 @@ query_findclosestnsec3(dns_name_t *qname
ns_client_log(client, DNS_LOGCATEGORY_DNSSEC,
NS_LOGMODULE_QUERY, ISC_LOG_WARNING,
"expected covering NSEC3, got an exact match");
- if (found != NULL)
+ if (found == qname) {
+ if (skip != 0U)
+ dns_name_getlabelsequence(qname, skip, labels - skip,
+ found);
+ } else if (found != NULL)
dns_name_copy(&name, found, NULL);
return;
}
CVS commit: [netbsd-6-0] src/external/bsd/bind/dist/lib/dns/rdata/generic
Module Name:src
Committed By: msaitoh
Date: Mon Jul 29 02:07:37 UTC 2013
Modified Files:
src/external/bsd/bind/dist/lib/dns/rdata/generic [netbsd-6-0]:
keydata_65533.c
Log Message:
Patch for bind CVE-2013-4854.
To generate a diff of this commit:
cvs rdiff -u -r1.3.4.1 -r1.3.4.1.4.1 \
src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c
diff -u src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c:1.3.4.1 src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c:1.3.4.1.4.1
--- src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c:1.3.4.1 Tue Jun 5 21:15:11 2012
+++ src/external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c Mon Jul 29 02:07:37 2013
@@ -1,4 +1,4 @@
-/* $NetBSD: keydata_65533.c,v 1.3.4.1 2012/06/05 21:15:11 bouyer Exp $ */
+/* $NetBSD: keydata_65533.c,v 1.3.4.1.4.1 2013/07/29 02:07:37 msaitoh Exp $ */
/*
* Copyright (C) 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
@@ -196,7 +196,7 @@ fromwire_keydata(ARGS_FROMWIRE) {
UNUSED(options);
isc_buffer_activeregion(source, &sr);
- if (sr.length < 4)
+ if (sr.length < 16)
return (ISC_R_UNEXPECTEDEND);
isc_buffer_forward(source, sr.length);
