WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-29 05:04:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

- Validate QNAME minimised NXDOMAIN responses.

Browse Source 
- If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
   harden-below-nxdomain.



git-svn-id: file:///svn/unbound/trunk@3682 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Ralph Dolmans
2016-03-18 15:44:41 +00:00
parent 6362a12bd7
commit 5d061f13f9
3 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
iterator/iterator.c
+20
View File
@@ -2265,6 +2265,26 @@ processQueryResponse(struct module_qstate* qstate, struct iter_qstate* iq,
if(FLAGS_GET_RCODE(iq->response->rep->flags) !=
LDNS_RCODE_NOERROR)
iq->minimisation_state = DONOT_MINIMISE_STATE;
/* Make subrequest to validate intermediate NXDOMAIN if
* harden-below-nxdomain is enabled. */
if(FLAGS_GET_RCODE(iq->response->rep->flags) ==
LDNS_RCODE_NXDOMAIN &&
qstate->env->cfg->harden_below_nxdomain) {
struct module_qstate* subq = NULL;
log_query_info(VERB_QUERY,
"schedule NXDOMAIN validation:",
&iq->response->qinfo);
if(!generate_sub_request(
iq->response->qinfo.qname,
iq->response->qinfo.qname_len,
iq->response->qinfo.qtype,
iq->response->qinfo.qclass,
qstate, id, iq, INIT_REQUEST_STATE,
FINISHED_STATE, &subq, 1)) {
verbose(VERB_ALGO,
"could not validate NXDOMAIN response");
}
}
return next_state(iq, QUERYTARGETS_STATE);
}
return final_state(iq);