]> git.ipfire.org Git - thirdparty/bind9.git/commit
simplification: search on rpz_st.p_name whenever RPZ is in use
authorEvan Hunt <each@isc.org>
Thu, 1 Nov 2018 15:28:38 +0000 (08:28 -0700)
committerEvan Hunt <each@isc.org>
Fri, 30 Aug 2019 22:11:38 +0000 (15:11 -0700)
commit3a7bdc6e111b06f534b2eee27ae1891506e5f0f7
tree5c3c572066ea7cac0266ed78eb22e46c977874b6
parent2367d61016304b19dadfadea70dffcab536ce4dc
simplification: search on rpz_st.p_name whenever RPZ is in use

- this is part of an effort to reduce interdependency between dns64 and
  other features, so that dns64 can more easily be compartmentalized
  into a module.
- this change keeps us from having to know whether dns64 is in use
  when updating the name to be searched for in query_lookup() because
  of RPZ processing. it seems to have no ill effects.
- also incorporated the test case from the CVE-2017-3135, which related
  to simultaneous use of dns64 and rpz.
bin/tests/system/dns64/ns3/example.db [new file with mode: 0644]
bin/tests/system/dns64/ns3/named.conf.in [new file with mode: 0644]
bin/tests/system/dns64/ns3/rpz.db [new file with mode: 0644]
bin/tests/system/dns64/setup.sh
bin/tests/system/dns64/tests.sh
lib/ns/query.c