]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8ff2c13) | patch
Ignore NSEC records without RRSIG and NSEC present
authorMark Andrews <marka@isc.org>
Fri, 5 Nov 2021 22:30:48 +0000 (09:30 +1100)
committerPetr Špaček <pspacek@isc.org>
Thu, 2 Dec 2021 13:18:42 +0000 (14:18 +0100)
commit4bdd5a9953294f13bb964dde137b02b798ea1a54
treee0637b9e94ac727c0c76a07f45cff3cd30977d3btree | snapshot
parent8ff2c133b554332e6b954152783e2e8c11e6384ccommit | diff
Ignore NSEC records without RRSIG and NSEC present

dns_nsec_noexistnodata now checks that RRSIG and NSEC are
present in the type map.  Both types should be present in
a correctly constructed NSEC record.  This check is in
addition to similar checks in resolver.c and validator.c.
lib/dns/nsec.c diff | blob | blame | history
lib/ns/query.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git