From 50b867ebacbd9b5fca40fdf5fe10bb1db02b640e Mon Sep 17 00:00:00 2001 From: Kees Monshouwer Date: Sun, 4 Jun 2017 13:31:54 +0200 Subject: [PATCH] auth: make sure Lua axfrfilter() does not insert out of zone data --- pdns/slavecommunicator.cc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pdns/slavecommunicator.cc b/pdns/slavecommunicator.cc index f89313d6d..ff492c377 100644 --- a/pdns/slavecommunicator.cc +++ b/pdns/slavecommunicator.cc @@ -264,6 +264,10 @@ static vector doAxfr(const ComboAddress& raddr, const DNSName } for(DNSResourceRecord& rr : out) { + if(!rr.qname.isPartOf(domain)) { + L<qname<<"'|"<qtype.getName()<<" during AXFR of zone '"<