Skip to content

[9.11][CVE-2024-1737 (part 2)] Be smarter about refusing to add many RR types to the database

Nicki Křížek requested to merge 3405-limit-the-number-of-resource-records-in-rrset-nxdomain-9.11 into bind-9.11

Add HTTPS, SVCB, SRV, PTR, NAPTR, DNSKEY and TXT records to the list of the priority types that are put at the beginning of the slabheader list for faster access and to avoid eviction when there are more types than the max-types-per-name limit.

(cherry picked from commit b27c6bcc)

Backport of MR https://gitlab.isc.org/isc-private/bind9/-/merge_requests/712

Related #3405 (closed)

Merge request reports