]> git.ipfire.org Git - thirdparty/bind9.git/commit
fix: usr: Do not resend query after BADCOOKIE answer on TCP
authorColin Vidal <colin@isc.org>
Thu, 30 Apr 2026 17:41:47 +0000 (19:41 +0200)
committerMichał Kępień <michal@isc.org>
Thu, 7 May 2026 11:32:15 +0000 (13:32 +0200)
commit53593e8e13e0098fd822d0f6be4c82d84bc7e34c
treef0655423b8c8de56a1f9a32342e775a433c3465f
parent5319c21761fe72aad83f66b6ea185e8335447fc2
parent47a80bbd8769a013e5caffea3737d30372ab4755
fix: usr: Do not resend query after BADCOOKIE answer on TCP

When an upstream server answers BADCOOKIE, no matter which transport is used,
the resolver resends the query using TCP. However, if the upstream
server responded with BADCOOKIE again over TCP, the resolver would keep
resending until the maximum query count was reached.

This is now fixed by no longer resending once the query has already been
sent over TCP.

See isc-projects/bind9#5804

Merge branch '5804-resend-loop-badcookie' into 'security-main'

See merge request isc-private/bind9!988