mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-02 23:55:27 +00:00
Code Issues Releases Wiki Activity

1806. [bug] The resolver returned the wrong result when a CNAME /

Browse Source 
DNAME was encountered when fetching glue from a
                        secure namespace. [RT #13501]

1805.   [bug]           Pending status was not being cleared when DLV was
                        active. [RT #13501]
This commit is contained in:
Mark Andrews
2005-02-08 23:51:32 +00:00
parent 073dfc245f
commit 0ad024cc42
3 changed files with 26 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
CHANGES
View File

@@ -9,9 +9,12 @@
1807. [placeholder] rt13526 1807. [placeholder] rt13526
1806. [placeholder] rt13501 1806. [bug] The resolver returned the wrong result when a CNAME /
DNAME was encountered when fetching glue from a
secure namespace. [RT #13501]
1805. [placeholder] rt13501 1805. [bug] Pending status was not being cleared when DLV was
active. [RT #13501]
1804. [placeholder] rt10114 1804. [placeholder] rt10114

10
lib/dns/resolver.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE. * PERFORMANCE OF THIS SOFTWARE.
*/ */
/* $Id: resolver.c,v 1.302 2005/02/07 00:53:28 marka Exp $ */ /* $Id: resolver.c,v 1.303 2005/02/08 23:51:31 marka Exp $ */
#include <config.h> #include <config.h>
@@ -3587,6 +3587,14 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, isc_stdtime_t now) {
fctx->validators, fctx->validators,
validator, link); validator, link);
} }
} else if (CHAINING(rdataset)) {
if (rdataset->type == dns_rdatatype_cname)
eresult = DNS_R_CNAME;
else {
INSIST(rdataset->type ==
dns_rdatatype_dname);
eresult = DNS_R_DNAME;
}
} }
} else if (!EXTERNAL(rdataset)) { } else if (!EXTERNAL(rdataset)) {
/* /*

14
lib/dns/validator.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE. * PERFORMANCE OF THIS SOFTWARE.
*/ */
/* $Id: validator.c,v 1.124 2004/11/17 23:52:31 marka Exp $ */ /* $Id: validator.c,v 1.125 2005/02/08 23:51:32 marka Exp $ */
#include <config.h> #include <config.h>
@@ -2356,8 +2356,18 @@ proveunsecure(dns_validator_t *val, isc_boolean_t resume) {
} }
if (result == ISC_R_NOTFOUND) { if (result == ISC_R_NOTFOUND) {
if (!val->havedlvsep) if (!val->havedlvsep) {
validator_log(val, ISC_LOG_DEBUG(3),
"not beneath secure root / DLV");
if (val->mustbesecure) {
validator_log(val, ISC_LOG_WARNING,
"must be secure failure");
result = DNS_R_MUSTBESECURE;
goto out;
}
val->event->rdataset->trust = dns_trust_answer;
return (ISC_R_SUCCESS); return (ISC_R_SUCCESS);
}
dns_name_copy(dns_fixedname_name(&val->dlvsep), dns_name_copy(dns_fixedname_name(&val->dlvsep),
dns_fixedname_name(&secroot), NULL); dns_fixedname_name(&secroot), NULL);
} else if (result != ISC_R_SUCCESS) } else if (result != ISC_R_SUCCESS)