]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a40325c) | patch
Skip "deny-answer-address" for non-IN addresses
authorEvan Hunt <each@isc.org>
Tue, 17 Mar 2026 20:24:43 +0000 (13:24 -0700)
committerMichał Kępień <michal@isc.org>
Thu, 7 May 2026 11:09:18 +0000 (13:09 +0200)
commitec1404cc4c124b456409e1dbe9d16cdbe31c68c9
tree6bbdf738b3c5bf03bbc007ca1ca5e22711197664tree | snapshot
parenta40325c6a27c728c27becc6dc91513b5b953177dcommit | diff
Skip "deny-answer-address" for non-IN addresses

Ensure that we don't attempt an ACL match for answer addresses
when handling a class-CHAOS zone. This is an additional line of
defense for YWH-PGM40640-74.

(cherry picked from commit e62673c765b52307c800e86f0185fe52b573c145)
lib/dns/resolver.c diff | blob | blame | history
Mirror of https://gitlab.isc.org/isc-projects/bind9.git