]> git.ipfire.org Git - thirdparty/bind9.git/commit
Do not resend after BADCOOKIE answer on TCP
authorColin Vidal <colin@isc.org>
Fri, 10 Apr 2026 12:54:49 +0000 (14:54 +0200)
committerMichał Kępień <michal@isc.org>
Thu, 7 May 2026 11:32:15 +0000 (13:32 +0200)
commit4aedf7e9dda89bed7b3c6f22ad7078cd3bcbcb8b
tree9eac820409478e1f21e9eb6ce4f59420d2cfaa97
parent5319c21761fe72aad83f66b6ea185e8335447fc2
Do not resend after BADCOOKIE answer on TCP

When an upstream server answers BADCOOKIE, no matter the transport used,
the resolver eventually resends the query using TCP. However, if the
upstream server responds with BADCOOKIE again over TCP, the resolver
would keep resending until the maximum query count is reached.

This is now fixed by stopping resending once the query has already been
sent over TCP.
lib/dns/resolver.c