From: Ondřej Surý <ondrej@isc.org>
Date: Mon, 30 Mar 2026 10:31:31 +0000 (+0200)
Subject: [9.20] fix: dev: Backport test for update-policy per-type max quota bypass via crafte... 
X-Git-Tag: v9.20.22~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=545ce3ae224dc6a15c6619329a4d65fa95f9e737;p=thirdparty%2Fbind9.git

[9.20] fix: dev: Backport test for update-policy per-type max quota bypass via crafted UPDATE messages

An authenticated DDNS client could bypass update-policy per-type record limits
(e.g. TXT(3)) by including padding records in the UPDATE message that are
silently skipped during processing in the main branch.

As BIND 9.20 is not affected, only backport the test.

Closes #5799

Backport of MR !11708

Merge branch 'backport-5799-fix-counter-desync-in-SSU-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11760
---

545ce3ae224dc6a15c6619329a4d65fa95f9e737