]> git.ipfire.org Git - thirdparty/unbound.git/commit
Fix auth nsec3 code (#1280)
authorYorgos Thessalonikefs <yorgos@nlnetlabs.nl>
Mon, 12 May 2025 12:26:47 +0000 (14:26 +0200)
committerGitHub <noreply@github.com>
Mon, 12 May 2025 12:26:47 +0000 (14:26 +0200)
commit4e23523d1a56ad3a16b9f2437bc8cb2e3feb7015
treed0f20861a569acc1535944657734e35f33c97a92
parent8190526250c6d8bca271f3f84f74bb9f789b0a37
Fix auth nsec3 code (#1280)

- Fix NSEC3 code to not break on broken auth zones that include unsigned
  out of zone (above apex) data. Could lead to hang while trying to
  prove a wildcard answer.
  Reported by Dmitrii Kuvaiskii from Amazon Web Services.

- Tests for NSEC3 auth zones with out of zone data.
services/authzone.c
testcode/unitdname.c
testdata/auth_nsec3_ent_with_out_of_zone_data.rpl [new file with mode: 0644]
testdata/auth_nsec3_wild_with_out_of_zone_data.rpl [new file with mode: 0644]
util/data/dname.c
util/data/dname.h