From: Michał Kępień <michal@isc.org>
Date: Wed, 13 Jul 2022 08:31:16 +0000 (+0200)
Subject: Add CHANGES entry and release note for GL #3439
X-Git-Tag: v9.19.4~35^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cfa398ad373ca652402a330542dc9600ba1f29d2;p=thirdparty%2Fbind9.git

Add CHANGES entry and release note for GL #3439
---

diff --git a/CHANGES b/CHANGES
index 96d37cabbd5..49e43f3fa43 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,10 @@
+5925.	[bug]		With a forwarder configured for all queries, resolution
+			failures encountered during DS chasing could trigger
+			assertion failures due to a logic bug in
+			resume_dslookup() that caused it to call
+			dns_resolver_createfetch() with an invalid name.
+			[GL #3439]
+
 5924.	[func]		When it's necessary to use AXFR to respond to an
 			IXFR request, a message explaining the reason
 			is now logged at level info. [GL #2683]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index eecc87eb4c2..b604010fcc0 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,6 +40,12 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- When running as a validating resolver forwarding all queries to
+  another resolver, :iscman:`named` could crash with an assertion
+  failure. These crashes occurred when the configured forwarder sent a
+  broken DS response and :iscman:`named` failed its attempts to find a
+  proper one instead. This has been fixed. :gl:`#3439`
+
 - A DNS compression would be applied on the root zone name if it is repeatedly
   used in the same RRSet. :gl:`#3423`