picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

resolved: always consider NSEC/NSEC3 RRs as "primary" 

It's not OK to drop these for our proof of non-existance checks.
This commit is contained in:
Lennart Poettering 2015-12-14 21:22:40 +01:00
parent 5264131a9a
commit 24a5b982cf
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/resolve/resolved-dns-transaction.c
View File

@ -1288,7 +1288,10 @@ static int dns_transaction_is_primary_response(DnsTransaction *t, DnsResourceRec
/* Check if the specified RR is the "primary" response,
* i.e. either matches the question precisely or is a
* CNAME/DNAME for it */
* CNAME/DNAME for it, or is any kind of NSEC/NSEC3 RR */
if (IN_SET(rr->key->type, DNS_TYPE_NSEC, DNS_TYPE_NSEC3))
return 1;
r = dns_resource_key_match_rr(t->key, rr, NULL);
if (r != 0)