bind9/bin/tests/system/unknown
Ondřej Surý b247dbb350
Validate DNS message CLASS early in request processing
Reject requests with unsupported or misused CLASS values before
further processing.  Only IN, CH, HS, RESERVED0 (for DNS Cookies),
ANY (for TKEY negotiation), and NONE (for DNS UPDATE) are accepted;
all other classes return NOTIMP.  Misuse of NONE or ANY outside
their allowed contexts returns FORMERR.

This adds further protection against bugs of the same general class
as YWH-PGM40640-70 and YWH-PGM40640-73.

(cherry picked from commit 0a687451505037e9f9a850c9cb113aed4995b03f)
2026-05-07 13:21:59 +02:00
..
ns1 explicitly set dnssec-validation in system tests 2023-06-26 15:03:06 -07:00
ns2 explicitly set dnssec-validation in system tests 2023-06-26 15:03:06 -07:00
ns3 explicitly set dnssec-validation in system tests 2023-06-26 15:03:06 -07:00
zones Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
large.out 3321. [security] dns_rdataslab_fromrdataset could produce bad 2012-06-01 23:33:16 +10:00
setup.sh Reformat shell scripts with shfmt 2023-10-26 13:05:00 +02:00
tests.sh Validate DNS message CLASS early in request processing 2026-05-07 13:21:59 +02:00
tests_sh_unknown.py Replace clean.sh files with extra_artifacts mark 2024-11-11 15:04:52 +01:00