Michał Kępień 604d8f0b96 Add tests for CVE-2022-2795 ... Add a test ensuring that the amount of work fctx_getaddresses() performs for any encountered delegation is limited: delegate example.net to a set of 1,000 name servers in the redirect.com zone, the names of which all resolve to IP addresses that nothing listens on, and query for a name in the example.net domain, checking the number of times the findname() function gets executed in the process; fail if that count is excessively large. Since the size of the referral response sent by ans3 is about 20 kB, it cannot be sent back over UDP (EMSGSIZE) on some operating systems in their default configuration (e.g. FreeBSD - see the net.inet.udp.maxdgram sysctl). To enable reliable reproduction of CVE-2022-2795 (retry patterns vary across BIND 9 versions) and avoid false positives at the same time (thread scheduling - and therefore the number of fetch context restarts - vary across operating systems and across test runs), extend bin/tests/system/resolver/ans3/ans.pl so that it also listens on TCP and make "ns1" in the "resolver" system test always use TCP when communicating with "ans3". Also add a test (foo.bar.sub.tld1/TXT) that ensures the new limitations imposed on the resolution process by the mitigation for CVE-2022-2795 do not prevent valid, glueless delegation chains from working properly.		2022-10-19 11:53:08 +02:00
..
check	Remove the isc_app API	2022-08-26 09:09:25 +02:00
confgen	Replace alg_totext with dst_hmac_algorithm_totext	2022-09-27 16:54:39 +02:00
delv	Use designated initializers instead of memset()/MEM_ZERO for structs	2022-10-05 16:44:05 +02:00
dig	Simplify and speed up DNS name compression	2022-10-17 08:45:44 +02:00
dnssec	Use designated initializers instead of memset()/MEM_ZERO for structs	2022-10-05 16:44:05 +02:00
named	Include the function name when reporting unexpected errors	2022-10-17 13:43:59 +01:00
nsupdate	Document that nsupdate ignores server command in GSS-TSIG mode	2022-10-18 10:12:02 +02:00
plugins	Use designated initializers instead of memset()/MEM_ZERO for structs	2022-10-05 16:44:05 +02:00
rndc	prevent a possible shutdown hang in rndc	2022-09-12 13:14:19 -07:00
tests	Add tests for CVE-2022-2795	2022-10-19 11:53:08 +02:00
tools	Implement TLS transport support for dns_request and dns_dispatch	2022-09-19 16:36:28 +00:00
Makefile.am	Remove native PKCS#11 support	2021-09-09 15:35:39 +02:00