]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 335c90c) | patch
Check iterations in isdelegation()
authorMatthijs Mekking <matthijs@isc.org>
Tue, 3 Mar 2026 09:40:36 +0000 (10:40 +0100)
committerMichał Kępień <michal@isc.org>
Wed, 25 Mar 2026 08:51:26 +0000 (09:51 +0100)
commit0d8f3d0b22fb23c5a9138cc48e72ef8ab3d603df
treeb1c605abf827edacd97a7d37d65d946498f688a5tree | snapshot
parent335c90c3693c91ea62e42c4fbb2395f2fadcdf13commit | diff
Check iterations in isdelegation()

When looking up an NSEC3 as part of an insecurity proof, check the
number of iterations. If this is too high, treat the answer as insecure
by marking the answer with trust level "answer", indicating that they
did not validate, but could be cached as insecure.

(cherry picked from commit 988040a5e02f86f4a8cdb0704e8d501f9082a89c)
lib/dns/validator.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git