ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]

Browse Source 
(cherry picked from commit c83b91fb63)
This commit is contained in:
Mark Andrews
2014-10-01 07:06:20 +10:00
parent 520fddb75b
commit 7e2d191c0a
8 changed files with 204 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
bin/tests/system/dnssec/tests.sh
View File

@@ -2524,5 +2524,28 @@ n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
#
# Test for +sigchase with a null set of trusted keys.
#
$DIG -p 5300 @10.53.0.3 +sigchase +trusted-key=/dev/null > dig.out.ns3.test$n 2>&1
if grep "Invalid option: +sigchase" dig.out.ns3.test$n > /dev/null
then
echo "I:Skipping 'dig +sigchase' tests"
n=`expr $n + 1`
else
echo "I:checking that 'dig +sigchase' doesn't loop with future inception ($n)"
ret=0
$DIG -p 5300 @10.53.0.3 dnskey future.example +sigchase \
+trusted-key=ns3/trusted-future.key > dig.out.ns3.test$n &
pid=$!
sleep 1
kill -9 $pid 2> /dev/null
wait $pid
grep ";; No DNSKEY is valid to check the RRSIG of the RRset: FAILED" dig.out.ns3.test$n > /dev/null || ret=1
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
n=`expr $n + 1`
fi
echo "I:exit status: $status"
exit $status