]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-packet.c
resolved: do not reject NSEC records with empty bitmaps
authorTom Gundersen <teg@jklm.no>
Wed, 25 Nov 2015 21:22:38 +0000 (22:22 +0100)
committerTom Gundersen <teg@jklm.no>
Thu, 26 Nov 2015 03:03:08 +0000 (04:03 +0100)
commit09eaf68ce4e19a653ff25312e75c6e226b127fd6
treecd34aaafcb7893e4471bd0ccd7d6f66a2f46c5a6
parentaf143e3b692fbba2e68efd2c834711ba518f547a
resolved: do not reject NSEC records with empty bitmaps

The assumption that no NSEC bitmap could be empty due to the presence of the bit representing
the record itself turns out to be flawed. See (the admittedly experimental) RFC4956 for a
counter example.
src/resolve/resolved-dns-packet.c