]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
projects / thirdparty / bind9.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: 245c71d 3fe3751)
fix: usr: Fix wrong NSEC proof for empty non-terminals after IXFR
authorOndřej Surý <ondrej@isc.org>
Fri, 3 Apr 2026 04:33:54 +0000 (06:33 +0200)
committerOndřej Surý <ondrej@isc.org>
Fri, 3 Apr 2026 04:33:54 +0000 (06:33 +0200)
When a secondary received an IXFR that transitioned a zone from unsigned to NSEC-signed, queries for empty non-terminal names returned the zone apex NSEC record instead of the NSEC that actually covers the queried name.  The issue only occurred with incremental transfers; a full AXFR or a server restart resolved it.

Closes #5824

Merge branch 'ondrej/fix-nsec-ixfr' into 'main'

See merge request isc-projects/bind9!11786


Trivial merge
Mirror of https://gitlab.isc.org/isc-projects/bind9.git