]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.11][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to...
authorNicki Křížek <nicki@isc.org>
Wed, 24 Jul 2024 10:10:27 +0000 (10:10 +0000)
committerNicki Křížek <nicki@isc.org>
Wed, 24 Jul 2024 10:10:27 +0000 (10:10 +0000)
commitf8e5f90aad3f741d2ecc163f50e7dd1a019d24f1
treebfedf5f90eab1f6d2d67289796ca8b3770cba53d
parent5f25fd9462437e5f954627977785678f82dbcedb
parente4d7ce686bb38428eddc7e33b40057d68eca9a6e
[9.11][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to the database

Add HTTPS, SVCB, SRV, PTR, NAPTR, DNSKEY and TXT records to the list of
the priority types that are put at the beginning of the slabheader list
for faster access and to avoid eviction when there are more types than
the max-types-per-name limit.

(cherry picked from commit b27c6bcce894786a8e082eafd59eccbf6f2731cb)

---

Backport of MR https://gitlab.isc.org/isc-private/bind9/-/merge_requests/712

Related https://gitlab.isc.org/isc-projects/bind9/-/issues/3405

Merge branch '3405-limit-the-number-of-resource-records-in-rrset-nxdomain-9.11' into 'bind-9.11'

See merge request isc-projects/bind9!9171