WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-29 05:04:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

- Fix for #1462: Fix that auth primary host name lookup

Browse Source 
allows CNAMEs.
This commit is contained in:
W.C.A. Wijngaards
2026-06-16 11:13:47 +02:00
parent 1ab75c0043
commit 3d78cb8d9a
2 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/Changelog
+2
View File
@@ -60,6 +60,8 @@
localzone processing, during RPZ qname trigger processing,
the RRset retains its previous data correcly. Thanks to
Qifan Zhang, Palo Alto Networks, for the report.
- Fix for #1462: Fix that auth primary host name lookup
allows CNAMEs.
15 June 2026: Wouter
- Fix to add `max-transfer-size` and `max-transfer-time` that
services/authzone.c
+10 -3
View File
@@ -5850,7 +5850,8 @@ xfr_master_add_addrs(struct auth_master* m, struct ub_packed_rrset_key* rrset,
/** check if the lookup target name equals the found answer name. */
static int
xfer_target_equals_answer_name(struct auth_master* lookup_target,
struct ub_packed_rrset_key* answer)
struct ub_packed_rrset_key* answer, struct query_info* rq,
struct reply_info* rep)
{
uint8_t qname[LDNS_MAX_DOMAINLEN+1];
size_t qname_len;
@@ -5864,6 +5865,10 @@ xfer_target_equals_answer_name(struct auth_master* lookup_target,
}
if(query_dname_compare(answer->rk.dname, qname) == 0)
return 1;
/* It could be a CNAME. */
if(reply_find_rrset_section_an(rep, qname, qname_len,
LDNS_RR_TYPE_CNAME, rq->qclass))
return 1;
return 0;
}
@@ -5898,7 +5903,8 @@ void auth_xfer_transfer_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
struct ub_packed_rrset_key* answer =
reply_find_answer_rrset(&rq, rep);
if(answer && xfer_target_equals_answer_name(
xfr->task_transfer->lookup_target, answer)) {
xfr->task_transfer->lookup_target, answer,
&rq, rep)) {
xfr_master_add_addrs(xfr->task_transfer->
lookup_target, answer, wanted_qtype);
} else if(answer) {
@@ -7048,7 +7054,8 @@ void auth_xfer_probe_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
struct ub_packed_rrset_key* answer =
reply_find_answer_rrset(&rq, rep);
if(answer && xfer_target_equals_answer_name(
xfr->task_probe->lookup_target, answer)) {
xfr->task_probe->lookup_target, answer,
&rq, rep)) {
xfr_master_add_addrs(xfr->task_probe->
lookup_target, answer, wanted_qtype);
} else if(answer) {