]> git.ipfire.org Git - thirdparty/bind9.git/commit
Fix a bug in catz_process_apl()
authorAram Sargsyan <aram@isc.org>
Mon, 4 May 2026 22:34:01 +0000 (22:34 +0000)
committerArаm Sаrgsyаn (GitLab job 7323974) <aram@isc.org>
Wed, 6 May 2026 19:37:12 +0000 (19:37 +0000)
commitb4cab10461b3ff6fb03303c42964b7959731cd79
tree7e78858fe7fc01996de15ab19cf1b56fa1a7ba0a
parentd2a5ae89aeede0cf1a3b50de05a27412df1252e2
Fix a bug in catz_process_apl()

The allow-transfer/allow-query catalog zone custom properties support
only APL RRtypes. All other types are correctly rejected by the
catz_process_apl() function. However, when an APL RRtype is processed
by that function, and another (non-APL) RRtype is then attempted to be
processed, there is an assertion failure happening in the prologue
of the function because `*aclbp != NULL` (i.e. an APL has been already
processed). Move the code to do type checking before the affected
REQUIRE assertion.

(cherry picked from commit 67e0090371b4bd4c8933b8644f68a3dbc592a214)
lib/dns/catz.c