mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

Merge branch '1159-bits-65-72-of-the-dns64-prefix-are-supposed-to-be-zero' into 'master'

Browse Source 
Resolve "Bits 64..71 of the dns64 prefix are supposed to be zero"

Closes #1159

See merge request isc-projects/bind9!2193
This commit is contained in:
Mark Andrews
2019-07-31 08:11:45 -04:00
parent 06d8b1071d d95ae93dd3
commit aed7eb0c74
13 changed files with 43 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
5273. [bug] Check that bits [64..71] of a dns64 prefix are zero.
[GL #1159]
5272. [cleanup] Remove isc-config.sh script as the BIND 9 libraries
are now purely internal. [GL #1123]

3
bin/tests/system/dns64/conf/bad10.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:0100:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad11.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:0200:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad12.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:0400:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad13.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:0800:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad14.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:1000:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad15.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:2000:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad16.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:4000:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad17.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 0000:0000:0000:0000:8000:000f::/96 { }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad18.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 ::/32 { suffix ::8000:0000:0000:0000; }; /* bits [64..71] MBZ */
};

3
bin/tests/system/dns64/conf/bad19.conf Normal file
View File

@@ -0,0 +1,3 @@
options {
dns64 ::/32 { suffix ::0100:0000:0000:0000; }; /* bits [64..71] MBZ */
};

4
doc/arm/Bv9ARM-book.xml
View File

@@ -5148,7 +5148,9 @@ options {
</para>
<para>
Compatible IPv6 prefixes have lengths of 32, 40, 48, 56,
64 and 96 as per RFC 6052.
64 and 96 as per RFC 6052. Bits 64..71 inclusive must
be zero with the most significate bit of the prefix in
position 0.
</para>
<para>
Additionally a reverse IP6.ARPA zone will be created for

7
lib/bind9/check.c
View File

@@ -526,6 +526,13 @@ check_dns64(cfg_aclconfctx_t *actx, const cfg_obj_t *voptions,
continue;
}
if (na.type.in6.s6_addr[8] != 0) {
cfg_obj_log(map, logctx, ISC_LOG_ERROR,
"invalid prefix, bits [64..71] must be zero");
result = ISC_R_FAILURE;
continue;
}
if (prefixlen != 32 && prefixlen != 40 && prefixlen != 48 &&
prefixlen != 56 && prefixlen != 64 && prefixlen != 96) {
cfg_obj_log(map, logctx, ISC_LOG_ERROR,