From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Wed, 14 Sep 2022 11:22:09 +0000 (+0200)
Subject: axfr-retriever: abort on chunk with TC set
X-Git-Tag: rec-4.8.0-alpha1~3^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0923e5df06e10e7afb19dc5ce534b07450792ab1;p=thirdparty%2Fpdns.git

axfr-retriever: abort on chunk with TC set
---

diff --git a/pdns/axfr-retriever.cc b/pdns/axfr-retriever.cc
index c206306eeb..ce67f06384 100644
--- a/pdns/axfr-retriever.cc
+++ b/pdns/axfr-retriever.cc
@@ -133,6 +133,10 @@ int AXFRRetriever::getChunk(Resolver::res_t &res, vector<DNSRecord>* records, ui
     throw ResolverException("AXFR chunk error: " + RCode::to_s(err));
   }
 
+  if(mdp.d_header.tc) {
+    throw ResolverException("AXFR chunk had TC bit set");
+  }
+
   try {
     d_tsigVerifier.check(std::string(d_buf.data(), len), mdp);
   }