bind9/bin
Ondřej Surý 986533b5ae Validate DNS message CLASS early in request processing
Reject requests with unsupported or misused CLASS values before
further processing.  Only IN, CH, HS, RESERVED0 (for DNS Cookies),
ANY (for TKEY negotiation), and NONE (for DNS UPDATE) are accepted;
all other classes return NOTIMP.  Misuse of NONE or ANY outside
their allowed contexts returns FORMERR.

This adds further protection against bugs of the same general class
as YWH-PGM40640-70 and YWH-PGM40640-73.

(cherry picked from commit d41865a458b9ecd76be4097ac1bea1005cad72db)
(cherry picked from commit 1c8016c91c3674929f87cbe7ad09f3670e05ad4e)
2026-05-05 21:05:37 -07:00
..
check Extend dns_db_allrdatasets to control interation results 2022-12-08 11:20:35 +11:00
confgen Update sources to Clang 15 formatting 2022-11-29 10:30:34 +01:00
delv make "max_restarts" a configurable value 2024-08-20 17:35:07 +00:00
dig Don't use reference counting in isc_timer unit 2023-01-19 11:28:10 +01:00
dnssec Update the source code formatting using clang-format-17 2023-10-17 17:56:31 +02:00
named Disable UPDATE and NOTIFY for non-IN classes 2026-05-05 21:05:37 -07:00
nsupdate Handle address lookup failure more gracefully 2023-02-01 00:41:09 +11:00
pkcs11 Update sources to Clang 15 formatting 2022-11-29 10:30:34 +01:00
plugins Backport isc_ht API changes from BIND 9.18 2024-01-05 11:52:05 +01:00
python Adapt to Python scripts to black 23.1.0 2023-02-17 16:55:47 +01:00
rndc Document that reloading happens asynchronously 2023-09-27 10:14:35 +10:00
tests Validate DNS message CLASS early in request processing 2026-05-05 21:05:37 -07:00
tools Update sources to Clang 15 formatting 2022-11-29 10:30:34 +01:00
win32/BINDInstall Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00
Makefile.in Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00