bind9/bin/tests
Ondřej Surý 205cd3509f Cover exact-name NODATA synthesis from a pending NSEC
The #5872 reproducer plants a covering NSEC that is rejected inside the
cache (find_coveringnsec), so it never reaches the trust check on the
exact-match NODATA branch of query_coveringnsec(). This adds a companion
case: an NSEC owned by the victim name itself, injected at pending trust
via a CD=1 query, is returned by the cache as a NODATA proof for the
exact node and must not be used to synthesize a NODATA that would deny
the victim's real A record.

Reuses the f004.test fixture with a victim-owned forged NSEC.

Assisted-by: Claude:claude-fable-5
(cherry picked from commit dc02732883)
2026-07-08 15:29:25 +02:00
..
startperf Reformat shell scripts with shfmt 2023-10-26 10:23:50 +02:00
system Cover exact-name NODATA synthesis from a pending NSEC 2026-07-08 15:29:25 +02:00
testdata/wire move all optional tests from bin/tests to bin/tests/optional 2018-03-09 14:12:47 -08:00
.gitignore Move environment variables from conf.sh to pytest 2024-05-09 17:08:08 +02:00
convert_trs_to_junit.py Remove superfluous 'pylint: disable' directives 2026-02-25 13:33:25 +01:00
Makefile.am Fix pylint's 'invalid-name' errors 2026-02-25 13:15:05 +01:00
test_client.c TLS SNI - add low level support for SNI to the networking code 2024-12-26 18:31:03 +02:00
test_server.c Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
wire_test.c Finalize removal of memory debug flags size and mctx 2024-12-06 03:13:14 +00:00