bind9/lib
Evan Hunt 4444b168db negative 'blackhole' ACL match could be treated as positive
There was a bug in the checking of the "blackhole" ACL in
dns_request_create*(), causing an address to be treated as included
in the ACL if it was explicitly *excluded*. Thus, leaving "blackhole"
unset had no effect, but setting it to "none" would cause any
destination addresses to be rejected for dns_request purposes. This
would cause zone transfer requests and SOA queries to fail, among
other things.

The bug has been fixed, and "blackhole { none; };" was added to the
xfer system test as a regression test.
2022-02-16 19:05:06 -08:00
..
bind9 Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
dns negative 'blackhole' ACL match could be treated as positive 2022-02-16 19:05:06 -08:00
irs Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
isc Use UV_RUNTIME_CHECK() as appropriate 2022-02-16 11:16:57 +01:00
isccc Use ISC_R_SHUTTINGDOWN to detect netmgr shutting down 2022-01-13 09:14:12 +01:00
isccfg Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
ns allow dns_clientinfo to store client ECS data 2022-01-27 13:53:59 -08:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00