bert hubert wrote: > On Wed, Oct 24, 2018 at 05:01:53AM -0400, Viktor Dukhovni wrote: > > And yet, here and there I see mention of having to take care to > > avoid "loops", but loops are impossible in a monotone strictly > > decreasing sequence. > > Yes. This is one of the best ways of preventing such loops. Some > libraries accidentally allowed a jump to the same place though, if I > recall correctly. > > PowerDNS, for reasons I'm trying to find out, not only checks if a > jump went backwards but also refuses to go backwards more than 100 > times. It may be that someone made a packet that burned a lot of CPU > time.
Alternatively, you could track and enforce the 255 octet limit of domain names while chasing the compression pointers. Kind regards, Martin _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop