summaryrefslogtreecommitdiff
path: root/deps/cares/src/ares_search.c
diff options
context:
space:
mode:
Diffstat (limited to 'deps/cares/src/ares_search.c')
-rw-r--r--deps/cares/src/ares_search.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/deps/cares/src/ares_search.c b/deps/cares/src/ares_search.c
index 68e852574f..001c3482a7 100644
--- a/deps/cares/src/ares_search.c
+++ b/deps/cares/src/ares_search.c
@@ -54,6 +54,13 @@ void ares_search(ares_channel channel, const char *name, int dnsclass,
const char *p;
int status, ndots;
+ /* Per RFC 7686, reject queries for ".onion" domain names with NXDOMAIN. */
+ if (ares__is_onion_domain(name))
+ {
+ callback(arg, ARES_ENOTFOUND, 0, NULL, 0);
+ return;
+ }
+
/* If name only yields one domain to search, then we don't have
* to keep extra state, so just do an ares_query().
*/