bind9/lib
Ondřej Surý 057ae0adb8 Restrict the alias-chain deadlock check to chaining CNAMEs
check_deadlock() aborted any fetch whose name equals the owner of a
chaining rdataset, assuming nothing the validator needs can live at an
alias.  That is true for a CNAME, but a DNAME aliases only the names
below its owner: with a DNAME at a zone apex, the DNSKEY signing the
DNAME lives at the owner name itself, so every answer synthesized from
a signed apex DNAME failed validation whenever that key was not
already validated in the cache.

Chaining CNAMEs, including those synthesized from a DNAME, still cover
the self-join case the check was added for.
2026-07-02 16:47:14 +02:00
..
dns Restrict the alias-chain deadlock check to chaining CNAMEs 2026-07-02 16:47:14 +02:00
isc Replace uint with unsigned int in the histo.c unit 2026-07-01 08:04:48 +02:00
isccc switch isc_md_type_t to a proper enum 2026-02-02 11:12:55 +03:00
isccfg Delegations have a minimal TTL of 60 seconds 2026-07-01 08:40:05 +02:00
ns Replace query and client attribute bitfield with named bools 2026-07-02 13:27:11 +02:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00