From 410456d3d84749a1cc8331ed4e289496bc5a61bc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Wed, 13 Jul 2022 10:31:16 +0200 Subject: [PATCH] Add CHANGES entry and release note for GL #3439 (cherry picked from commit cfa398ad373ca652402a330542dc9600ba1f29d2) --- CHANGES | 7 +++++++ doc/notes/notes-current.rst | 6 ++++++ 2 files changed, 13 insertions(+) diff --git a/CHANGES b/CHANGES index 13d9e9fe3b..188bbd6158 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,10 @@ +5925. [bug] With a forwarder configured for all queries, resolution + failures encountered during DS chasing could trigger + assertion failures due to a logic bug in + resume_dslookup() that caused it to call + dns_resolver_createfetch() with an invalid name. + [GL #3439] + 5924. [func] When it's necessary to use AXFR to respond to an IXFR request, a message explaining the reason is now logged at level info. [GL #2683] diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 70ae09d0bf..3f3ed47efe 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -40,6 +40,12 @@ Feature Changes Bug Fixes ~~~~~~~~~ +- When running as a validating resolver forwarding all queries to + another resolver, :iscman:`named` could crash with an assertion + failure. These crashes occurred when the configured forwarder sent a + broken DS response and :iscman:`named` failed its attempts to find a + proper one instead. This has been fixed. :gl:`#3439` + - Non-dynamic zones that inherit dnssec-policy from the view or options level were not marked as inline-signed, and thus were never scheduled to be re-signed. This is now fixed. :gl:`#3438`