]> git.ipfire.org Git - thirdparty/pdns.git/commit
rec: Don't validate a NXD with a NSEC proving that the name is an ENT 9237/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 16 Jun 2020 12:42:02 +0000 (14:42 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 16 Jun 2020 12:42:02 +0000 (14:42 +0200)
commit95256c05abb3277426d2b6421316d51038286d4d
tree11e377e324e3422adbac613a05b76fdc7efa7e43
parente5f8feaec65d964f5f7dfebf58d494d7b6094201
rec: Don't validate a NXD with a NSEC proving that the name is an ENT

A NSEC from a.powerdns.com. to a.b.powerdns.com. proves that
b.powerdns.com. exists and is an empty non terminal, so it cannot be
used to prove that b.powerdns.com. does not exist.
pdns/recursordist/test-syncres_cc8.cc
pdns/validate.cc