From: Ondřej Surý <ondrej@isc.org>
Date: Mon, 10 Aug 2026 15:00:43 +0000 (+0200)
Subject: fix: usr: A record from outside a response policy zone could stop named
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8e40f0b39f9d0423a265157f792f501e7d6a8436;p=thirdparty%2Fbind9.git

fix: usr: A record from outside a response policy zone could stop named

A response policy zone transferred from a primary can contain a record
whose name lies outside the zone. Such a record could stop named, both
when it arrived and again at every startup afterwards, because a
secondary keeps it in its own copy of the zone. Records like this are
now rejected and logged; previously one could also silently create a
policy entry for an unrelated name.

Closes #6304

Merge branch '6304-rpz-name2data-label-underflow' into 'main'

See merge request isc-projects/bind9!12522
---

8e40f0b39f9d0423a265157f792f501e7d6a8436