mirror of
https://github.com/isc-projects/bind9.git
synced 2026-07-05 17:35:46 -04:00
check_deadlock() aborted any fetch whose name equals the owner of a chaining rdataset, assuming nothing the validator needs can live at an alias. That is true for a CNAME, but a DNAME aliases only the names below its owner: with a DNAME at a zone apex, the DNSKEY signing the DNAME lives at the owner name itself, so every answer synthesized from a signed apex DNAME failed validation whenever that key was not already validated in the cache. Chaining CNAMEs, including those synthesized from a DNAME, still cover the self-join case the check was added for. |
||
|---|---|---|
| .. | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| meson.build | ||