upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Test that a long CNAME chain causes SERVFAIL

Browse source 
Also check that the expected partial answer in returned too.

(cherry picked from commit 580f872fe1)
This commit is contained in:
Aram Sargsyan 2024-06-06 12:10:19 +00:00
parent 946931ccb7
commit 27f6fc915c
2 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
bin/tests/system/resolver/ans3/ans.pl
View file

@ -102,6 +102,9 @@ sub handleQuery {
$packet->push("answer",
new Net::DNS::RR($qname .
" 300 CNAME goodcname.example.org"));
} elsif ($qname =~ /^longcname/) {
$cname = $qname =~ s/longcname/longcnamex/r;
$packet->push("answer", new Net::DNS::RR($qname . " 300 CNAME " . $cname));
} elsif ($qname =~ /^nodata\.example\.net$/i) {
$packet->header->aa(1);
} elsif ($qname =~ /^nxdomain\.example\.net$/i) {

11
bin/tests/system/resolver/tests.sh
View file

@ -222,6 +222,17 @@ if [ -x "${RESOLVE}" ]; then
status=$((status + ret))
fi
n=$((n + 1))
echo_i "checking long CNAME chain target filtering (deny) ($n)"
ret=0
dig_with_opts +tcp longcname1.example.net @10.53.0.1 a >dig.out.ns1.test${n} || ret=1
grep -F "status: SERVFAIL" dig.out.ns1.test${n} >/dev/null || ret=1
grep -F "max. restarts reached" dig.out.ns1.test${n} >/dev/null || ret=1
lines=$(grep -F "CNAME" dig.out.ns1.test${n} | wc -l)
test ${lines:-1} -eq 17 || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=$((status + ret))
n=$((n + 1))
echo_i "checking DNAME target filtering (deny) ($n)"
ret=0