Reimplement:

4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
This commit is contained in:
Mark Andrews
2017-03-01 12:01:16 +11:00
parent cb9582623e
commit c006cfc5a2
4 changed files with 332 additions and 523 deletions

View File

@@ -375,7 +375,7 @@ nxdomain a0-1s-cname.tld2s +dnssec @$ns6 # 19
drop a3-8.tld2 any @$ns6 # 20 drop
end_group
ckstatsrange $ns3 test1 ns3 22 25
ckstatsrange $ns3 test1 ns3 22 27
ckstats $ns5 test1 ns5 0
ckstats $ns6 test1 ns6 0