From: Ondřej Surý <ondrej@isc.org>
Date: Wed, 1 Jul 2026 10:59:21 +0000 (+0200)
Subject: sec: usr: Reclaim memory promptly when DNSSEC validations are canceled
X-Git-Tag: v9.21.24~7
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=016ae51425771e79646ad203a404122ed291e27a;p=thirdparty%2Fbind9.git

sec: usr: Reclaim memory promptly when DNSSEC validations are canceled

When a resolver is flooded with queries that require DNSSEC
validation — for example during a random-subdomain attack —
many of those validations are canceled before they complete.
Previously a canceled validation still kept its place in the
internal work queue and held the associated response in memory
until that queued work eventually ran, so memory could climb
sharply under sustained load. The canceled work is now dropped
as soon as the validation is canceled, releasing the memory it
was holding.

Merge branch '4760-cancel-dns_validator-jobs-early' into 'security-main'

See merge request isc-private/bind9!1092
---

016ae51425771e79646ad203a404122ed291e27a