]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Prevent a race in the aggressive NSEC cache 10375/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 7 May 2021 15:25:01 +0000 (17:25 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 10 May 2021 06:59:26 +0000 (08:59 +0200)
commit779f35b41c758bed9215d51df4fc3a69edbada9d
treee7c282e5c1ca68cf8e6ffc787375ee395e594a5f
parent3f408c7794ff82aa6db736bc8e907f5f6b92d87c
rec: Prevent a race in the aggressive NSEC cache

When a new NSEC3 record has a different salt than the one we know, we
update the zone entry with the new salt. Unfortunately, that salt was
read without holding the lock in `AggressiveNSECCache::getNSEC3Denial`,
leading to a possible data race.
pdns/recursordist/aggressive_nsec.cc
pdns/recursordist/aggressive_nsec.hh