Ondřej Surý 205cd3509f Cover exact-name NODATA synthesis from a pending NSEC ... The #5872 reproducer plants a covering NSEC that is rejected inside the cache (find_coveringnsec), so it never reaches the trust check on the exact-match NODATA branch of query_coveringnsec(). This adds a companion case: an NSEC owned by the victim name itself, injected at pending trust via a CD=1 query, is returned by the cache as a NODATA proof for the exact node and must not be used to synthesize a NODATA that would deny the victim's real A record. Reuses the f004.test fixture with a victim-owned forged NSEC. Assisted-by: Claude:claude-fable-5 (cherry picked from commit dc02732883)		2026-07-08 15:29:25 +02:00
..
check	Resolve ERR_MISSING_GLUE / ERR_EXTRA_AAAA value collision	2026-04-29 15:31:58 +00:00
confgen	Size HMAC key generation buffers to the maximum block size	2026-04-30 06:00:07 +02:00
delv	Skip detach when delv's client never created	2026-04-30 12:07:49 +02:00
dig	Replace the shared work pool with per-loop, per-lane worker threads	2026-06-17 21:15:17 +02:00
dnssec	Check wildcard signer and NOQNAME signer match	2026-06-18 10:58:11 -07:00
named	Add the tcp-reuse-timeout option	2026-06-25 11:37:51 +02:00
nsupdate	Fix a false positive compiler warning/error on Alpine 3.24	2026-06-24 18:06:47 +02:00
plugins	standardize CHECK and RETERR macros	2025-12-03 19:17:20 -08:00
rndc	List 'rndc dnssec' arguments in alphabetic order	2026-02-18 14:20:53 +00:00
tests	Cover exact-name NODATA synthesis from a pending NSEC	2026-07-08 15:29:25 +02:00
tools	Validate nsec3hash arguments instead of relying on atoi()	2026-05-21 11:41:29 +00:00
Makefile.am	Remove native PKCS#11 support	2021-09-09 15:35:39 +02:00