]> git.ipfire.org Git - thirdparty/bind9.git/commit
2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
authorMark Andrews <marka@isc.org>
Thu, 7 Dec 2006 06:50:34 +0000 (06:50 +0000)
committerMark Andrews <marka@isc.org>
Thu, 7 Dec 2006 06:50:34 +0000 (06:50 +0000)
commitb486456a3dab8a07523088a049f4782ca1b44f0e
tree96621f61c04bfdb817b565de41d4b7f093d00c15
parent6b39ac73d303e5b5eee2f845c60d9d21842d6a07
2117.   [bug]           DNSSEC fixes: named could fail to cache NSEC records
                        which could lead to validation failures.  named didn't
                        handle negative DS responses that were in the process
                        of being validated.  Check CNAME bit before accepting
                        NODATA proof. To be able to ignore a child NSEC there
                        must be SOA (and NS) set in the bitmap. [RT #16399]
CHANGES
lib/dns/resolver.c
lib/dns/validator.c