mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-31 14:35:26 +00:00
in [84], after allowing access to a zone based on the view
allow-query ACL, subsequent accesses to the same zone were denied because dbversion->queryok was not being set. This caused mandatory glue to be omitted from referral responses, ultimately causing lookups to fail if all authoritative servers for the parent zone were running bind9.
This commit is contained in:
@@ -534,19 +534,17 @@ query_getdb(ns_client_t *client, dns_name_t *name, unsigned int options,
|
||||
* the NS_QUERYATTR_QUERYOK attribute is now valid.
|
||||
*/
|
||||
client->query.attributes |= NS_QUERYATTR_QUERYOKVALID;
|
||||
} else {
|
||||
/*
|
||||
* Remember the result of the ACL check so we
|
||||
* don't have to check again.
|
||||
*/
|
||||
if (result == ISC_R_SUCCESS)
|
||||
dbversion->queryok = ISC_TRUE;
|
||||
else
|
||||
dbversion->queryok = ISC_FALSE;
|
||||
}
|
||||
}
|
||||
} else
|
||||
result = ISC_R_SUCCESS;
|
||||
|
||||
/*
|
||||
* Remember the result of the ACL check so we
|
||||
* don't have to check again.
|
||||
*/
|
||||
if (dbversion != NULL && result == ISC_R_SUCCESS)
|
||||
dbversion->queryok = ISC_TRUE;
|
||||
|
||||
return (result);
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user