]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.16][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to...
authorNicki Křížek <nicki@isc.org>
Wed, 24 Jul 2024 11:14:10 +0000 (11:14 +0000)
committerNicki Křížek <nicki@isc.org>
Wed, 24 Jul 2024 11:14:10 +0000 (11:14 +0000)
commit51f86ded38ab7e72f90f630ea4df091cf1acff13
treec05f77ef53e0d0522bc90f4916cbb7253c5377ec
parent5360c90612abf51deb4a80b30e1da84fd61212a5
parent26c9da5f2857b72077c17e06ac79f068c63782cc
[9.16][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to the database

Add HTTPS, SVCB, SRV, PTR, NAPTR, DNSKEY and TXT records to the list of
the priority types that are put at the beginning of the slabheader list
for faster access and to avoid eviction when there are more types than
the max-types-per-name limit.

(cherry picked from commit b27c6bcce894786a8e082eafd59eccbf6f2731cb)

---

Backport of MR https://gitlab.isc.org/isc-private/bind9/-/merge_requests/712

Related https://gitlab.isc.org/isc-projects/bind9/-/issues/3405

Merge branch '3405-limit-the-number-of-resource-records-in-rrset-nxdomain-9.16' into 'bind-9.16'

See merge request isc-projects/bind9!9172