bind9/lib/ns
Evan Hunt c5f99f3508 Check that an NSEC signer is at or above the name to be validated
Add a check that an NSEC record being used as a proof of nonexistence
for a given name is not signed by a name lower in the DNS hierarchy than
the one in question.

Fixes: isc-projects/bind9#5876
2026-06-24 21:03:45 +00:00
..
include Preserve the request buffer across async SIG(0) processing 2026-06-08 11:30:28 +00:00
.gitignore Add support for User Statically Defined Tracing (USDT) probes 2023-08-21 18:39:53 +02:00
client.c Use original query name when caching SERVFAIL 2026-06-17 09:32:19 +02:00
hooks.c use a standard CLEANUP macro 2025-12-03 13:45:43 -08:00
interfacemgr.c switch to RETERR where it wasn't being used 2025-12-03 13:45:43 -08:00
listenlist.c Use ControlStatementsExceptControlMacros for SpaceBeforeParens 2025-08-19 07:58:33 +02:00
meson.build Use unique names for probes.d files 2025-09-24 13:18:13 +02:00
notify.c Move zone set/get properties to own source file 2026-04-02 15:50:07 +02:00
probes-ns.d Use unique names for probes.d files 2025-09-24 13:18:13 +02:00
query.c Check that an NSEC signer is at or above the name to be validated 2026-06-24 21:03:45 +00:00
server.c Add low contention stats counter 2026-03-26 10:19:25 +01:00
stats.c Add low contention stats counter 2026-03-26 10:19:25 +01:00
tests Move all the unit tests to /tests/<libname>/ 2022-05-28 14:53:02 -07:00
update.c ISC_ATTR_UNUSED in favor of UNUSED() 2026-06-11 10:53:56 +00:00
xfrout.c Apply XFR-out quota after ACL is checked 2026-05-07 13:32:15 +02:00