From: Ondřej Surý <ondrej@isc.org>
Date: Thu, 2 Jul 2026 11:27:00 +0000 (+0200)
Subject: fix: usr: Resolver could terminate unexpectedly when processing a malformed RRSIG
X-Git-Tag: v9.21.24~32
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=03c495def670147b26b96b8e3ba1f0b5ed04f279;p=thirdparty%2Fbind9.git

fix: usr: Resolver could terminate unexpectedly when processing a malformed RRSIG

A recursive resolver could terminate unexpectedly when an authoritative
server returned a crafted RRSIG(RRSIG) record for an insecure zone. Such
records are now rejected.

Closes #6184

Merge branch '6184-reject-rrsig-covering-signature' into 'main'

See merge request isc-projects/bind9!12347
---

03c495def670147b26b96b8e3ba1f0b5ed04f279