]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 05c51d3) | patch
Check iterations in isdelegation()
authorMatthijs Mekking <matthijs@isc.org>
Tue, 3 Mar 2026 09:40:36 +0000 (10:40 +0100)
committerMichał Kępień <michal@isc.org>
Fri, 13 Mar 2026 12:06:38 +0000 (13:06 +0100)
commitcd1f2fed56d8e93ddd1e0b7b240cb61f6774dcfd
tree952224d6919110f9bb2ae1735645725299a807cdtree | snapshot
parent05c51d3a5aedf7cb56407c5df02f7ab6deaf5755commit | diff
Check iterations in isdelegation()

When looking up an NSEC3 as part of an insecurity proof, check the
number of iterations. If this is too high, treat the answer as insecure
by marking the answer with trust level "answer", indicating that they
did not validate, but could be cached as insecure.

(cherry picked from commit 988040a5e02f86f4a8cdb0704e8d501f9082a89c)
lib/dns/validator.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git