]> git.ipfire.org Git - thirdparty/bind9.git/commit
Test that fake child delegation cannot overwrite parent's glue RR
authorPetr Špaček <pspacek@isc.org>
Wed, 23 Jul 2025 18:26:43 +0000 (20:26 +0200)
committerMichał Kępień (GitLab job 6660033) <michal@isc.org>
Mon, 22 Dec 2025 11:47:26 +0000 (11:47 +0000)
commit6b315c08eb94be74a178e291a57e35229ec23ef8
treeff8cb8a5e6f7df75c82b9b815efd20f8d1ba3d0e
parentae0afc1d424e56893b24c625b00cb636ff83dd3f
Test that fake child delegation cannot overwrite parent's glue RR

In short, the attacker tries to spoof at least one answer that has the
following form:

    rcode NOERROR
    flags QR
    ;QUESTION
    trigger$RANDOM.victim. IN TXT
    ;ANSWER
    ;AUTHORITY
    trigger$RANDOM.victim. 3600 IN NS ns.victim.
    ;ADDITIONAL
    ns.victim. 3600 IN A 10.53.0.3

This attack was originally reported as "test case 2".

Co-authored-by: Michał Kępień <michal@isc.org>
(cherry picked from commit b5dc46fe6e0e8f05767377ae171c043ed72552d6)
bin/tests/system/bailiwick/ans2/ans.py
bin/tests/system/bailiwick/tests_bailiwick.py