[src/trunk]: src/external/bsd/blacklist/diff don't clear the db with positive...

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/d07b9b877b7c
branches:  trunk
changeset: 335789:d07b9b877b7c
user:      christos <christos%NetBSD.org@localhost>
date:      Fri Jan 23 21:38:09 2015 +0000

description:
don't clear the db with positive cache queries; negative cache queries
can be don't maliciously for cache pollution.

diffstat:

 external/bsd/blacklist/diff/named.diff |  17 +++++++++--------
 1 files changed, 9 insertions(+), 8 deletions(-)

diffs (72 lines):

diff -r bd708d2f10fb -r d07b9b877b7c external/bsd/blacklist/diff/named.diff
--- a/external/bsd/blacklist/diff/named.diff    Fri Jan 23 21:34:01 2015 +0000
+++ b/external/bsd/blacklist/diff/named.diff    Fri Jan 23 21:38:09 2015 +0000
@@ -54,7 +54,7 @@
 retrieving revision 1.8
 diff -u -u -r1.8 Makefile
 --- bin/named/Makefile 31 Dec 2013 20:23:12 -0000      1.8
-+++ bin/named/Makefile 23 Jan 2015 21:09:41 -0000
++++ bin/named/Makefile 23 Jan 2015 21:37:09 -0000
 @@ -33,7 +33,9 @@
        lwaddr.c lwdclient.c lwderror.c \
        lwdgabn.c lwdgnba.c lwdgrbn.c lwdnoop.c lwresd.c lwsearch.c \
@@ -72,7 +72,7 @@
 retrieving revision 1.11
 diff -u -u -r1.11 client.c
 --- dist/bin/named/client.c    10 Dec 2014 04:37:51 -0000      1.11
-+++ dist/bin/named/client.c    23 Jan 2015 21:09:42 -0000
++++ dist/bin/named/client.c    23 Jan 2015 21:37:09 -0000
 @@ -65,6 +65,8 @@
  #include <named/server.h>
  #include <named/update.h>
@@ -96,7 +96,7 @@
 retrieving revision 1.15
 diff -u -u -r1.15 main.c
 --- dist/bin/named/main.c      10 Dec 2014 04:37:51 -0000      1.15
-+++ dist/bin/named/main.c      23 Jan 2015 21:09:42 -0000
++++ dist/bin/named/main.c      23 Jan 2015 21:37:09 -0000
 @@ -83,6 +83,9 @@
  #ifdef HAVE_LIBXML2
  #include <libxml/xmlversion.h>
@@ -122,7 +122,7 @@
 retrieving revision 1.17
 diff -u -u -r1.17 query.c
 --- dist/bin/named/query.c     10 Dec 2014 04:37:52 -0000      1.17
-+++ dist/bin/named/query.c     23 Jan 2015 21:09:42 -0000
++++ dist/bin/named/query.c     23 Jan 2015 21:37:09 -0000
 @@ -65,6 +65,8 @@
  #include <named/sortlist.h>
  #include <named/xfrout.h>
@@ -141,11 +141,12 @@
        if ((options & DNS_GETDB_NOLOG) == 0) {
                char msg[NS_CLIENT_ACLMSGSIZE("query")];
                if (result == ISC_R_SUCCESS) {
-@@ -1026,6 +1030,7 @@
+@@ -1026,6 +1030,8 @@
                result = ns_client_checkaclsilent(client, NULL,
                                                  client->view->cacheacl,
                                                  ISC_TRUE);
-+              pfilter_notify(result, client, "cachedb");
++              if (result == ISC_R_SUCCESS)
++                      pfilter_notify(result, client, "cachedb");
                if (result == ISC_R_SUCCESS) {
                        /*
                         * We were allowed by the "allow-query-cache" ACL.
@@ -155,7 +156,7 @@
 retrieving revision 1.9
 diff -u -u -r1.9 update.c
 --- dist/bin/named/update.c    10 Dec 2014 04:37:52 -0000      1.9
-+++ dist/bin/named/update.c    23 Jan 2015 21:09:42 -0000
++++ dist/bin/named/update.c    23 Jan 2015 21:37:09 -0000
 @@ -59,6 +59,8 @@
  #include <named/server.h>
  #include <named/update.h>
@@ -195,7 +196,7 @@
 retrieving revision 1.7
 diff -u -u -r1.7 xfrout.c
 --- dist/bin/named/xfrout.c    10 Dec 2014 04:37:52 -0000      1.7
-+++ dist/bin/named/xfrout.c    23 Jan 2015 21:09:42 -0000
++++ dist/bin/named/xfrout.c    23 Jan 2015 21:37:09 -0000
 @@ -54,6 +54,8 @@
  #include <named/server.h>
  #include <named/xfrout.h>