]> git.ipfire.org Git - thirdparty/bind9.git/commit
Disallow TYPE0 to be queried or inserted into the database
authorOndřej Surý <ondrej@isc.org>
Thu, 7 Aug 2025 06:08:24 +0000 (08:08 +0200)
committerOndřej Surý <ondrej@isc.org>
Fri, 15 Aug 2025 05:22:52 +0000 (07:22 +0200)
commit76c027e949bdc94ee37f8f6bbe8eea787b9e2355
treef0b899181b9c55cfdd4076f9bf754ad920e55bf6
parentf7143dca3f05c9b53eaa277a72cf6fd3fe50ba4f
Disallow TYPE0 to be queried or inserted into the database

The RR type 0 is a reserved type for SIG[1] resource record.  It should
not be ever inserted into the database nor queried.  Add a special
handling to bail out quickly with DNS_R_DISALLOWED when inserting and
ISC_R_NOTFOUND when looking up TYPE0.  This is also prerequisite for
stricter checks in the follow-up commit.

1. https://www.rfc-editor.org/rfc/rfc2535#section-4.1.8.1
lib/dns/qpcache.c
lib/dns/qpzone.c
lib/dns/rdataslab.c
tests/dns/dbversion_test.c