bind9/lib/isccfg
Evan Hunt bfb027fecd
Disable recursion for non-IN classes
Force recursion off, and set allow-recursion/allow-recursion-on ACLs
to none, for views with a class other than IN. Log a configuration
warning if recursion is explicitly enabled for a non-IN view.

This addresses YWH-PGM40640-74 and YWH-PGM40640-75 by preventing any
attempt at recursive processing in a class-CHAOS view, ensuring that
server addresses used for recursive queries and received in recursive
responses are of the expected format.

Fixes: isc-projects/bind9#5780
Fixes: isc-projects/bind9#5781
2026-05-07 13:32:15 +02:00
..
include shrunk cfgobj down from 48 bytes to 40 bytes 2025-12-06 08:51:23 +01:00
aclconf.c use a standard CLEANUP macro 2025-12-03 13:45:43 -08:00
check.c Disable recursion for non-IN classes 2026-05-07 13:32:15 +02:00
duration.c Remove redundant parentheses from the return statement 2024-11-19 12:27:22 +01:00
kaspconf.c Fix KASP key leaks on keystore lookup failure 2026-03-14 13:58:32 +01:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00
namedconf.c Remove NZF support, make LMDB required for new zone storage 2026-03-18 11:02:33 +01:00
parser.c shrunk cfgobj down from 48 bytes to 40 bytes 2025-12-06 08:51:23 +01:00
tests Move all the unit tests to /tests/<libname>/ 2022-05-28 14:53:02 -07:00