]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Fix DNSSEC validation of completely empty NXDomain answers
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 24 Apr 2020 09:48:16 +0000 (11:48 +0200)
committerOtto Moerbeek <otto.moerbeek@open-xchange.com>
Wed, 13 May 2020 09:26:01 +0000 (11:26 +0200)
commit0b9169fc395cd76b45f329aeab4624db28debe34
tree6d132f485a3fdc7d6ebe7566cb4330eb9160670e
parent62ba014249cb5f02fc828a1132b1968b59561367
rec: Fix DNSSEC validation of completely empty NXDomain answers

If the answer has no SOA and no NSEC inside a DNSSEC-secure zone,
we should go Bogus.

(cherry picked from commit 1c0ee0d118a886857629aa733c23311057f315f9)
pdns/recursordist/test-syncres_cc7.cc
pdns/syncres.cc