BIND 10 #1808: support NSEC for normal NXRRSET in in-memory
BIND 10 Development
do-not-reply at isc.org
Thu May 10 01:10:58 UTC 2012
#1808: support NSEC for normal NXRRSET in in-memory
-------------------------------------+-------------------------------------
Reporter: | Owner: kevin_tes
jinmei | Status: reviewing
Type: task | Milestone:
Priority: | Sprint-20120515
medium | Resolution:
Component: data | Sensitive: 0
source | Sub-Project: DNS
Keywords: | Estimated Difficulty: 3
Defect Severity: N/A | Total Hours: 0
Feature Depending on Ticket: in- |
memory NSEC |
Add Hours to Ticket: 0 |
Internal?: 0 |
-------------------------------------+-------------------------------------
Comment (by kevin_tes):
Replying to [comment:8 jinmei]:
> - I made some editorial fixes to the branch. I think I've pointed out
> these things several times. Things like redundant white space or
> space after comma should be avoidable using some tool. If you
> cannot avoid introducing these in editing, please seriously consider
> using some tool before asking for review. Discussing such primitive
> things in review cycles is not a very efficient way of using our
> time.
sorry,I have already set my vim editor in the .vimrc file:
{{{
highlight WhitespaceEOL ctermbg=red guibg=red
match WhitespaceEOL /\s\+$/
}}}
But it seems not work.I'll try other tool before asking for review.
>
> - about the main change: unlike the comment it doesn't seem to check
> whether DNSSEC are requested. Also there's no test for that case to
> confirm or deny the suspicion.
>
> - DATASRC_MEM_NXRRSET is used in two different places. We must not do
> it for our logging policy.
>
> - I'd combine the with-or-without NSEC case using a small helper
> function. See, e.g., trac1805 and how getClosestNSEC() is used in
> the NXDOMAIN case. This would also solve the duplicated log ID
> issue.
>
> - As noted above, we need to test the case when DNSSEC records are not
> requested but the zone is NSEC signed.
>
thanks,changed will be made,based on these.
> - Why did you remove the findNSECSigned test? Due to that some test
> cases were lost.
>
Here,i do think it does not need this test anymore, if NXRRSET case
completed.
> - This comment doesn't seem to be very helpful. In some sense, it's
> too trivial; on the other hand, it's too blunt and not clear what it
> tries to comment.
> {{{#!cpp
> // Test if NSEC works
> }}}
thanks,changed will be made,based on these.
--
Ticket URL: <http://bind10.isc.org/ticket/1808#comment:10>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list