bind9/lib
Ondřej Surý c3f14d568c Skip DNS64 synthesis when answering a redirected response
redirect2() swaps qctx->db to the redirect zone before
query_nodata() runs. The DNS64 fallback there issues an A lookup
for the original query name, which is out of zone for the
redirect db, and the resulting query_notfound() trips
INSIST(!is_zone). The cached NCACHENXRRSET variant trips a
REQUIRE in dns_rdataset_first() on a disassociated rdataset.
The synth-from-dnssec entry reaches the same fallback via
query_coveringnsec(). Guarding the fallback with
!qctx->redirected leaves the nxdomain-redirect NXRRSET answer to
be served as-is.

(cherry picked from commit 4bfd18d08d)
2026-06-02 09:48:13 +02:00
..
dns Fix spelling typos in comments and code 2026-06-01 15:04:31 +00:00
isc Fix spelling typos in comments and code 2026-06-01 15:04:31 +00:00
isccc Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
isccfg Fix spelling typos in comments and code 2026-06-01 15:04:31 +00:00
ns Skip DNS64 synthesis when answering a redirected response 2026-06-02 09:48:13 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00