]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f7d5fe6) | patch
Skip "deny-answer-address" for non-IN addresses
authorEvan Hunt <each@isc.org>
Tue, 17 Mar 2026 20:24:43 +0000 (13:24 -0700)
committerOndřej Surý <ondrej@isc.org>
Thu, 7 May 2026 13:14:06 +0000 (15:14 +0200)
commitc01d298f53b0ffbf38bf19867f368f60a9ea4ecf
tree1786c3755ee8ed4e9840f2d97b24783b17993755tree | snapshot
parentf7d5fe628c220245a14397207893424f0b27ff53commit | diff
Skip "deny-answer-address" for non-IN addresses

Ensure that we don't attempt an ACL match for answer addresses
when handling a class-CHAOS zone. This is an additional line of
defense for YWH-PGM40640-74.

(cherry picked from commit 4cd3d8e6d866143ddc62df821a1007bf3ee7f083)
(cherry picked from commit fa60101e910346e64fa2a684b903fbcb84d8243b)
lib/dns/resolver.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git