]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 185c109) | patch
Skip "deny-answer-address" for non-IN addresses
authorEvan Hunt <each@isc.org>
Tue, 17 Mar 2026 20:24:43 +0000 (13:24 -0700)
committerMichał Kępień <michal@isc.org>
Thu, 7 May 2026 11:21:59 +0000 (13:21 +0200)
commit772d1d5f905c819d7155e76a08c33218bfcc973e
tree98e05f56b5c2dbffddd9a56c388c96581b9a16f2tree | snapshot
parent185c10981b941bfa5b753b3624b6e11ccca8737fcommit | diff
Skip "deny-answer-address" for non-IN addresses

Ensure that we don't attempt an ACL match for answer addresses
when handling a class-CHAOS zone. This is an additional line of
defense for YWH-PGM40640-74.

(cherry picked from commit e62673c765b52307c800e86f0185fe52b573c145)
lib/dns/resolver.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git