Reimplement:
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734]
(cherry picked from commit f240f4a5de)
This commit is contained in:
@@ -375,7 +375,7 @@ nxdomain a0-1s-cname.tld2s +dnssec @$ns6 # 19
|
||||
drop a3-8.tld2 any @$ns6 # 20 drop
|
||||
|
||||
end_group
|
||||
ckstatsrange $ns3 test1 ns3 22 25
|
||||
ckstatsrange $ns3 test1 ns3 22 27
|
||||
ckstats $ns5 test1 ns5 0
|
||||
ckstats $ns6 test1 ns6 0
|
||||
|
||||
|
||||
Reference in New Issue
Block a user