upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-12 05:32:42 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

[master] rpz_ver check was ineffective

Browse source
This commit is contained in:
Evan Hunt 2015-06-09 15:05:43 -07:00
parent f85deb5154
commit 215049febb
2 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
bin/named/query.c
View file

@ -6565,8 +6565,15 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
* Has response policy changed out from under us?
*/
if (rpz_st->rpz_ver != client->view->rpzs->rpz_ver) {
CTRACE(ISC_LOG_ERROR,
"query_find: RPZ settings out of date");
#ifdef WANT_QUERYTRACE
char txt[80];
sprintf(txt,
"query_find: RPZ settings out of date "
"(rpz_ver %d, expected %d)",
client->view->rpzs->rpz_ver,
rpz_st->rpz_ver);
CTRACE(ISC_LOG_ERROR, txt);
#endif
QUERY_ERROR(DNS_R_SERVFAIL);
goto cleanup;
}

3
bin/named/server.c
View file

@ -1935,7 +1935,8 @@ configure_rpz(dns_view_t *view, const cfg_obj_t *rpz_obj,
dns_rpz_detach_rpzs(&view->rpzs);
dns_rpz_attach_rpzs(pview->rpzs, &view->rpzs);
} else if (old != NULL && pview != NULL) {
view->rpzs->rpz_ver = pview->rpzs->rpz_ver + 1;
pview->rpzs->rpz_ver += 1;
view->rpzs->rpz_ver = pview->rpzs->rpz_ver;
cfg_obj_log(rpz_obj, ns_g_lctx, ISC_LOG_DEBUG(1),
"updated RPZ policy: version %d",
view->rpzs->rpz_ver);