bind9/lib/dns
Diego Fronza bba353d512 Fixed rebinding protection bug when using forwarder setups
BIND wasn't honoring option "deny-answer-aliases" when configured to
forward queries.

Before the fix it was possible for nameservers listed in "forwarders"
option to return CNAME answers pointing to unrelated domains of the
original query, which could be used as a vector for rebinding attacks.

The fix ensures that BIND apply filters even if configured as a forwarder
instance.

(cherry picked from commit af6a4de3d5ad6c1967173facf366e6c86b3ffc28)
2020-04-08 08:52:58 +02:00
..
include Replace sign operation bool with enum 2020-04-03 10:04:07 +02:00
rdata remove or comment empty conditional branches 2020-03-17 15:33:23 -07:00
tests Refactor the isc_log API so it cannot fail on memory failures 2020-03-18 11:44:18 +01:00
win32 Redesign dnssec sign statistics 2020-04-03 10:03:30 +02:00
.gitignore 4394. [func] Add rndc command "dnstap-reopen" to close and 2016-06-24 09:37:04 +10:00
acl.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
adb.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
api prep 9.16.1 2020-03-20 11:47:01 +01:00
badcache.c Workaround for clang static analyzer bug. 2020-03-04 10:48:59 +01:00
byaddr.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
cache.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
callbacks.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
catz.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
client.c Refactor the isc_log API so it cannot fail on memory failures 2020-03-18 11:44:18 +01:00
clientinfo.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
compress.c Add an arena to compressctx 2020-02-27 08:54:02 +01:00
db.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dbiterator.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dbtable.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
diff.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dispatch.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dlz.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dns64.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dnsrps.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
dnssec.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dnstap.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dnstap.proto fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
ds.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dst_api.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dst_internal.h Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dst_openssl.h Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dst_parse.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
dst_parse.h Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
dst_pkcs11.h Merge branch '46-just-use-clang-format-to-reformat-sources' into 'master' 2020-02-12 14:51:18 +00:00
dst_result.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
dyndb.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
ecdb.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
ecs.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
fixedname.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
forward.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
gen-unix.h Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
gen-win32.h Add C11 localtime_r and gmtime_r shims for Windows 2020-03-17 15:33:24 -07:00
gen.c Add C11 localtime_r and gmtime_r shims for Windows 2020-03-17 15:33:24 -07:00
geoip2.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
gssapi_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
gssapictx.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
hmac_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
ipkeylist.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
iptable.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
journal.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
kasp.c Fix race condition dnssec-policy with views 2020-03-09 16:25:35 +01:00
key.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
keydata.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
keymgr.c Only initialize goal on active keys 2020-04-03 09:16:51 +02:00
keytable.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
Kyuafile regen master 2017-12-29 01:44:18 +00:00
lib.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
log.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
lookup.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
Makefile.in Add ZLIB_LIBS to ISCLIBS 2020-02-28 15:22:59 +01:00
mapapi improve calculation of database size 2020-03-12 00:38:37 -07:00
master.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
masterdump.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
message.c Fixup the missing clang-format bits 2020-02-16 18:07:27 +01:00
name.c Fixup the missing clang-format bits 2020-02-16 18:07:27 +01:00
ncache.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
nsec.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
nsec3.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
nta.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
openssl_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
openssldh_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
opensslecdsa_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
openssleddsa_link.c Fix 'Dead nested assignment's from scan-build-10 2020-03-25 18:06:29 +01:00
opensslrsa_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
order.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
peer.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
pkcs11.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
pkcs11ecdsa_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
pkcs11eddsa_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
pkcs11rsa_link.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
portlist.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
private.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rbt.c improve calculation of database size 2020-03-12 00:38:37 -07:00
rbtdb.c Silence missing unlock from Coverity. 2020-03-13 13:17:46 +11:00
rbtdb.h Merge branch '46-add-curly-braces' into 'master' 2020-02-13 21:28:35 +00:00
rcode.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
rdata.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
rdatalist.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rdatalist_p.h Merge branch '46-just-use-clang-format-to-reformat-sources' into 'master' 2020-02-12 14:51:18 +00:00
rdataset.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rdatasetiter.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rdataslab.c improve calculation of database size 2020-03-12 00:38:37 -07:00
request.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
resolver.c Fixed rebinding protection bug when using forwarder setups 2020-04-08 08:52:58 +02:00
result.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rootns.c adjust the clang-format penalties to reduce string breaking 2020-02-17 14:43:46 -08:00
rpz.c incrementally clean up old RPZ records during updates 2020-04-01 01:32:55 -07:00
rriterator.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
rrl.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
sdb.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
sdlz.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
soa.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
spnego.asn1 Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
spnego.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
spnego.h Merge branch '46-add-curly-braces' into 'master' 2020-02-13 21:28:35 +00:00
spnego_asn1.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
spnego_asn1.pl Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
ssu.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
ssu_external.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
stats.c Replace hard coded value with constant 2020-04-03 10:04:24 +02:00
tcpmsg.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
time.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
timer.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
tkey.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
tsec.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
tsig.c Use the new sorting rules to regroup #include headers 2020-03-11 08:55:12 +00:00
tsig_p.h Merge branch '46-just-use-clang-format-to-reformat-sources' into 'master' 2020-02-12 14:51:18 +00:00
ttl.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
update.c Replace sign operation bool with enum 2020-04-03 10:04:07 +02:00
validator.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
version.c Merge branch '46-just-use-clang-format-to-reformat-sources' into 'master' 2020-02-12 14:51:18 +00:00
view.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
xfrin.c fix spelling errors reported by Fossies. 2020-02-21 07:05:31 +00:00
zone.c Replace sign operation bool with enum 2020-04-03 10:04:07 +02:00
zone_p.h Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00
zonekey.c Merge branch 'each-style-tweak' into 'master' 2020-02-14 05:35:29 +00:00
zoneverify.c remove or comment empty conditional branches 2020-03-17 15:33:23 -07:00
zt.c Merge branch '46-enforce-clang-format-rules' into 'master' 2020-02-14 08:45:59 +00:00