mirror of
https://github.com/SagerNet/sing-box.git
synced 2026-07-01 05:03:09 +00:00
b5ec033a57
DNS rules referencing rule-sets that contain only ip_cidr predicates silently stopped matching when legacy DNS mode was disabled, because the IP-CIDR branch cannot match against an in-flight DNS query. The existing validation intentionally let every rule_set through on the premise that mixed sets still work via their non-IP branches, which is only true when such a branch exists. Track whether a rule-set carries any non-IP-CIDR predicate and reject pure-IP references the same way bare ip_cidr fields are already rejected. |
||
|---|---|---|
| .. | ||
| rule | ||
| conn.go | ||
| dns.go | ||
| neighbor_resolver_darwin.go | ||
| neighbor_resolver_lease.go | ||
| neighbor_resolver_linux.go | ||
| neighbor_resolver_parse.go | ||
| neighbor_resolver_platform.go | ||
| neighbor_resolver_stub.go | ||
| neighbor_table_darwin.go | ||
| neighbor_table_linux.go | ||
| network.go | ||
| platform_searcher.go | ||
| process_cache.go | ||
| route.go | ||
| router.go | ||
| rule_conds.go | ||