BIND 10 trac951, updated. 54c201f10077610d7e09a7787d89d17264761f5d [trac951] added a clarification comment on "truncation" to prevent accidental remove like this.

[BIND 10 source code commits]

The branch, trac951 has been updated
       via  54c201f10077610d7e09a7787d89d17264761f5d (commit)
      from  5637b1961aafcdc6950d22aa7a3637221a57e99a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 54c201f10077610d7e09a7787d89d17264761f5d
Author: JINMEI Tatuya <jinmei at isc.org>
Date:   Fri May 27 11:04:59 2011 -0700

    [trac951] added a clarification comment on "truncation" to prevent
    accidental remove like this.

-----------------------------------------------------------------------

Summary of changes:
 src/lib/cryptolink/crypto_hmac.cc |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

-----------------------------------------------------------------------
diff --git a/src/lib/cryptolink/crypto_hmac.cc b/src/lib/cryptolink/crypto_hmac.cc
index 14b43b3..a568a17 100644
--- a/src/lib/cryptolink/crypto_hmac.cc
+++ b/src/lib/cryptolink/crypto_hmac.cc
@@ -183,9 +183,9 @@ public:
         try {
             Botan::SecureVector<Botan::byte> our_mac = hmac_->final();
             if (len < getOutputLength()) {
-                // Currently we don't support truncated signature.  To avoid
-                // validating too short signature accidently, we enforce the
-                // standard signature size for the moment.
+                // Currently we don't support truncated signature in TSIG (see
+                // #920).  To avoid validating too short signature accidently,
+                // we enforce the standard signature size for the moment.
                 // Once we support truncation correctly, this if-clause should
                 // (and the capitalized comment above) be removed.
                 return (false);