]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Check rpz name too long wildcard CNAME expansion handling
authorMark Andrews <marka@isc.org>
Fri, 10 Apr 2026 00:24:40 +0000 (10:24 +1000)
committerMichał Kępień <michal@isc.org>
Fri, 10 Jul 2026 07:26:46 +0000 (09:26 +0200)
bin/tests/system/rpz/ns2/tld2.db
bin/tests/system/rpz/ns4/tld4.db
bin/tests/system/rpz/tests.sh

index a1e246ab2e65b005be3ad14fc2c66b8ccd0bf252..44b1c1db55b1c1b020ff13d5e454143f7a71642d 100644 (file)
@@ -115,3 +115,5 @@ a7-2                A       192.168.7.2
 
 a8-1           A       192.168.8.1
                TXT     "a8-1 tld2 text"
+
+*.wild         A       192.168.9.1
index ab2832f74f5c7faa2c17dd6b02809ed0d3e78aec..a13b7bf16881b991a2766be6cdfb1a2df19d24a2 100644 (file)
@@ -48,6 +48,8 @@ a3-6.tld2     A       56.56.56.56
 
 a3-7.sub1.tld2 A       57.57.57.57
 
+*.wild.sub1.tld2       A       57.57.57.57
+
 a3-8.tld2      A       58.58.58.58
 
 a3-9.sub9.tld2 A       59.59.59.59
index 7c1f2dcd8761ac600ce1130e0994e72fa722ea7c..7ce7b0926a1756f6a3c647203560d3165fc3ed2c 100644 (file)
@@ -458,7 +458,10 @@ nochange TCP a3-9.tld2                # 33 tcp-only
 here x.servfail <<'EOF'               # 34 qname-wait-recurse yes
     ;; status: SERVFAIL, x
 EOF
-addr 35.35.35.35 "x.servfail @$ns5" # 35 qname-wait-recurse no
+addr 35.35.35.35 "x.servfail @$ns5"                                                                                                                                                                                                                                    # 35 qname-wait-recurse no
+here aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.wild.sub1.tld2 <<'EOF' # 36 wildcard CNAME name to long
+    ;; status: YXDOMAIN, x
+EOF
 end_group
 ckstats $ns3 test1 ns3 22
 ckstats $ns5 test1 ns5 1