]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
lib/cache: no aggressive caching on minimal NSEC* ranges
authorVladimír Čunát <vladimir.cunat@nic.cz>
Wed, 12 Jun 2019 14:26:39 +0000 (16:26 +0200)
committerPetr Špaček <petr.spacek@nic.cz>
Thu, 27 Jun 2019 10:09:13 +0000 (12:09 +0200)
commitf1be61dd217427d5db1502a45d4479fffcf40c9d
tree63cc3e6f0aed4585ac12b96acc5c7cfa04ee45c1
parentb2ad9443e550faf2413dde51a6f100e0e3c2d209
lib/cache: no aggressive caching on minimal NSEC* ranges

We use packet cache instead.  Also do the same on some kinds of weird
RRsets, as even there some caching should be better than none at all.
This "incidentally" works around all known cases of DVE-2018-0003.
NEWS
lib/cache/api.c
lib/cache/entry_pkt.c
lib/cache/impl.h
lib/cache/peek.c