]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
validator: avoid assertion in an edge-case obs-knot-resolver-8xyvhu/deployments/1579
authorVladimír Čunát <vladimir.cunat@nic.cz>
Mon, 12 Apr 2021 13:23:02 +0000 (15:23 +0200)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Mon, 12 Apr 2021 14:35:29 +0000 (16:35 +0200)
commit6f99ef4baec73fc42aafbd35f0032f2ce0d5b918
treee6cd7e30ae4760071f03310467b2b43c4b48e524
parentf9757a27b53f5855aec7a93c7cd4c6343c3e431d
validator: avoid assertion in an edge-case

Case: NSEC3 with too many iterations used for a positive wildcard proof.
It certainly isn't a perfect fix yet; the whole validator would benefit
from a general overhaul.
lib/dnssec/nsec3.c
lib/dnssec/nsec3.h