From: Nicki Křížek <nicki@isc.org>
Date: Wed, 24 Jul 2024 10:10:27 +0000 (+0000)
Subject: [9.11][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to... 
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f8e5f90aad3f741d2ecc163f50e7dd1a019d24f1;p=thirdparty%2Fbind9.git

[9.11][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to the database

Add HTTPS, SVCB, SRV, PTR, NAPTR, DNSKEY and TXT records to the list of
the priority types that are put at the beginning of the slabheader list
for faster access and to avoid eviction when there are more types than
the max-types-per-name limit.

(cherry picked from commit b27c6bcce894786a8e082eafd59eccbf6f2731cb)

---

Backport of MR https://gitlab.isc.org/isc-private/bind9/-/merge_requests/712

Related https://gitlab.isc.org/isc-projects/bind9/-/issues/3405

Merge branch '3405-limit-the-number-of-resource-records-in-rrset-nxdomain-9.11' into 'bind-9.11'

See merge request isc-projects/bind9!9171
---

f8e5f90aad3f741d2ecc163f50e7dd1a019d24f1