Files
bind9/lib/dns
alessio 887502e37d Drop malformed notify messages early instead of decompressing them
The DNS header shows if a message has multiple questions or invalid
NOTIFY sections. We can drop these messages early, right after parsing
the question. This matches RFC 9619 for multi-question messages and
Unbound's handling of NOTIFY.
To further add further robustness, we include an additional check for
unknown opcodes, and also drop those messages early.

Add early_sanity_check() function to check for these conditions:
- Messages with more than one question, as required by RFC 9619
- NOTIFY query messages containing answer sections (like Unbound)
- NOTIFY messages containing authority sections (like Unbound)
- Unknown opcodes.
2025-02-25 10:40:38 +01:00
..
2025-02-03 00:24:34 +00:00
2025-01-23 15:54:57 -08:00
2025-02-21 09:51:42 +00:00
2024-11-22 15:00:55 +01:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2024-11-27 16:04:25 +01:00
2024-12-10 08:46:22 +00:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2024-12-13 13:52:52 +01:00
2025-02-24 15:04:14 -08:00
2024-12-11 17:11:32 +00:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00
2025-01-23 15:54:57 -08:00