2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR

responses more gracefully. [RT #15941]
This commit is contained in:
Mark Andrews
2006-05-02 04:23:12 +00:00
parent ca97057dca
commit 317964b121
2 changed files with 8 additions and 2 deletions

View File

@@ -1,3 +1,6 @@
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
responses more gracefully. [RT #15941]
2012. [func] Don't insert new acache entries if acache is full.
[RT #15970]

View File

@@ -16,7 +16,7 @@
*/
/*
* $Id: tsig.c,v 1.117.18.8 2006/03/08 03:55:50 marka Exp $
* $Id: tsig.c,v 1.117.18.9 2006/05/02 04:23:12 marka Exp $
*/
/*! \file */
#include <config.h>
@@ -855,8 +855,11 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
msg->verify_attempted = 1;
if (msg->tcp_continuation)
if (msg->tcp_continuation) {
if (tsigkey == NULL || msg->querytsig == NULL)
return (DNS_R_UNEXPECTEDTSIG);
return (tsig_verify_tcp(source, msg));
}
/*
* There should be a TSIG record...