]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Reject non-apex NSEC(3)s that have both the NS and SOA bits set
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 21 Jan 2022 12:15:54 +0000 (13:15 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 21 Jan 2022 12:15:54 +0000 (13:15 +0100)
commitbe5d851dbedeecdeef39a583f0e2ac50d786b806
treeccd7c7e6585836affba8ee10459df911a0d6b295
parentc4808619cfdfd8f6bd8ac0cdd9390dc32a653135
rec: Reject non-apex NSEC(3)s that have both the NS and SOA bits set

Ancestor NSEC(3)s have the SOA bit clear (delegation), and the remaining
non-apex ones should not have the NS set.
pdns/recursordist/test-syncres_cc8.cc
pdns/validate.cc