]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1ce7cf2) | patch
Guard parent-NS walk against running off the root
authorOndřej Surý <ondrej@isc.org>
Wed, 29 Apr 2026 18:20:04 +0000 (20:20 +0200)
committerOndřej Surý <ondrej@isc.org>
Fri, 1 May 2026 06:18:36 +0000 (08:18 +0200)
commit141e8110f73e45d2776bbd376c8066086fc25cdc
tree0634948884ad340a0ad8100e073ff5b9a5d87ca9tree | snapshot
parent1ce7cf2dd2436655dc30aa9b294e0990a6e5eea1commit | diff
Guard parent-NS walk against running off the root

Once the walk reaches the root, splitting one more label off would
trip an internal assertion and abort named.  Stop cleanly with
ISC_R_NOTFOUND so the dispatcher cancels the fetch.  Only reachable
through misconfiguration (root configured as a primary with parental
agents, or a parent zone that NODATAs its own NS).

Assisted-by: Claude:claude-opus-4-7
lib/dns/zone.c diff | blob | blame | history
lib/dns/zonefetch.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git