From: Colin Vidal <colin@isc.org>
Date: Thu, 30 Apr 2026 17:41:47 +0000 (+0200)
Subject: fix: usr: Do not resend query after BADCOOKIE answer on TCP
X-Git-Tag: v9.21.22~10
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=53593e8e13e0098fd822d0f6be4c82d84bc7e34c;p=thirdparty%2Fbind9.git

fix: usr: Do not resend query after BADCOOKIE answer on TCP

When an upstream server answers BADCOOKIE, no matter which transport is used,
the resolver resends the query using TCP. However, if the upstream
server responded with BADCOOKIE again over TCP, the resolver would keep
resending until the maximum query count was reached.

This is now fixed by no longer resending once the query has already been
sent over TCP.

See isc-projects/bind9#5804

Merge branch '5804-resend-loop-badcookie' into 'security-main'

See merge request isc-private/bind9!988
---

53593e8e13e0098fd822d0f6be4c82d84bc7e34c