upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix #404: DNS query with small edns bufsize fail.

Browse source
This commit is contained in:
W.C.A. Wijngaards 2021-01-18 08:29:52 +01:00
parent e55f38fa83
commit c125fe67bc
4 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
doc/Changelog
View file

@ -1,3 +1,6 @@
18 January 2021: Wouter
- Fix #404: DNS query with small edns bufsize fail.
15 January 2021: Wouter 15 January 2021: Wouter
- Merge #402 from fobser: Implement IPv4-Embedded addresses according - Merge #402 from fobser: Implement IPv4-Embedded addresses according
to RFC6052. to RFC6052.

2
doc/example.conf.in
View file

@ -388,7 +388,7 @@ server:
# target-fetch-policy: "3 2 1 0 0" # target-fetch-policy: "3 2 1 0 0"
# Harden against very small EDNS buffer sizes. # Harden against very small EDNS buffer sizes.
# harden-short-bufsize: no # harden-short-bufsize: yes
# Harden against unseemly large queries. # Harden against unseemly large queries.
# harden-large-queries: no # harden-large-queries: no

5
doc/unbound.conf.5.in
View file

@ -839,9 +839,8 @@ closer to that of BIND 9, while setting "\-1 \-1 \-1 \-1 \-1" gives behaviour
rumoured to be closer to that of BIND 8. rumoured to be closer to that of BIND 8.
.TP .TP
.B harden\-short\-bufsize: \fI<yes or no> .B harden\-short\-bufsize: \fI<yes or no>
Very small EDNS buffer sizes from queries are ignored. Default is off, since Very small EDNS buffer sizes from queries are ignored. Default is on, as
it is legal protocol wise to send these, and unbound tries to give very described in the standard.
small answers to these queries, where possible.
.TP .TP
.B harden\-large\-queries: \fI<yes or no> .B harden\-large\-queries: \fI<yes or no>
Very large queries are ignored. Default is off, since it is legal protocol Very large queries are ignored. Default is off, since it is legal protocol

3
util/config_file.c
View file

@ -220,7 +220,7 @@ config_create(void)
cfg->views = NULL; cfg->views = NULL;
cfg->acls = NULL; cfg->acls = NULL;
cfg->tcp_connection_limits = NULL; cfg->tcp_connection_limits = NULL;
cfg->harden_short_bufsize = 0; cfg->harden_short_bufsize = 1;
cfg->harden_large_queries = 0; cfg->harden_large_queries = 0;
cfg->harden_glue = 1; cfg->harden_glue = 1;
cfg->harden_dnssec_stripped = 1; cfg->harden_dnssec_stripped = 1;
@ -388,6 +388,7 @@ struct config_file* config_create_forlib(void)
cfg->val_log_level = 2; /* to fill why_bogus with */ cfg->val_log_level = 2; /* to fill why_bogus with */
cfg->val_log_squelch = 1; cfg->val_log_squelch = 1;
cfg->minimal_responses = 0; cfg->minimal_responses = 0;
cfg->harden_short_bufsize = 1;
return cfg; return cfg;
} }