Merge branch...

Merge branch '804-large-nsec3-responses-cause-failure-in-adding-records-to-ncache-and-eventually-formerr-instead-of-nxdomain-v9_11' into 'v9_11'

Resolve "Large NSEC3 responses cause failure in adding records to ncache and, eventually, FORMERR (instead of NXDOMAIN)"

See merge request !1316

CHANGES

+5125.	[bug]		Allow for up to 100 records or 64k of data when caching
+			a negative response. [GL #804]
+
 5124.	[bug]		Named could incorrectly return FORMERR rather than
 			SERVFAIL. [GL #804]
 

lib/dns/ncache.c

@@ -28,7 +28,7 @@
 #include <dns/rdataset.h>
 #include <dns/rdatastruct.h>
 
-#define DNS_NCACHE_RDATA 20U
+#define DNS_NCACHE_RDATA 100U
 
 /*
  * The format of an ncache rdata is a sequence of zero or more records of
@@ -129,7 +129,7 @@ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
 	dns_rdata_t rdata[DNS_NCACHE_RDATA];
 	dns_rdataset_t ncrdataset;
 	dns_rdatalist_t ncrdatalist;
-	unsigned char data[4096];
+	unsigned char data[65536];
 	unsigned int next = 0;
 
 	/*