Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

[Martin Hoffmann <[e-mail]>]

bert hubert wrote:
> On Wed, Oct 24, 2018 at 05:01:53AM -0400, Viktor Dukhovni wrote:
> > And yet, here and there I see mention of having to take care to
> > avoid "loops", but loops are impossible in a monotone strictly
> > decreasing sequence.  
> 
> Yes. This is one of the best ways of preventing such loops. Some
> libraries accidentally allowed a jump to the same place though, if I
> recall correctly.
> 
> PowerDNS, for reasons I'm trying to find out, not only checks if a
> jump went backwards but also refuses to go backwards more than 100
> times. It may be that someone made a packet that burned a lot of CPU
> time.

Alternatively, you could track and enforce the 255 octet limit of
domain names while chasing the compression pointers.

Kind regards,
Martin