upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-09 09:06:26 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Don't do DS checks over disabled address families

Browse source 
(cherry picked from commit 05472e63e8)
This commit is contained in:
Mark Andrews 2023-11-30 16:46:50 +11:00
parent 542e891287
commit 69dde597b9
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
lib/dns/zone.c
View file

@ -6392,6 +6392,8 @@ dns_zone_setparentals(dns_zone_t *zone, const isc_sockaddr_t *parentals,
goto unlock;
}
report_no_active_addresses(zone, parentals, count, "parental-agents");
/*
* Now set up the parentals and parental key lists
*/
@ -21800,6 +21802,16 @@ checkds_send(dns_zone_t *zone) {
dst = zone->parentals[i];
if (isc_sockaddr_disabled(&dst)) {
if (key != NULL) {
dns_tsigkey_detach(&key);
}
if (transport != NULL) {
dns_transport_detach(&transport);
}
continue;
}
/* TODO: glue the transport to the checkds request */
if (checkds_isqueued(zone, &dst, key, transport)) {
@ -21827,6 +21839,12 @@ checkds_send(dns_zone_t *zone) {
"checkds: create DS query for "
"parent %d failed",
i);
if (key != NULL) {
dns_tsigkey_detach(&key);
}
if (transport != NULL) {
dns_transport_detach(&transport);
}
continue;
}
zone_iattach(zone, &checkds->zone);