picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

resolved: if we detect a message with incomplete DNSSEC data, consider this an invalid packet event

This commit is contained in:
Lennart Poettering 2016-01-21 01:07:56 +01:00
parent 7aa8ce9855
commit fcfaff1235
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/resolve/resolved-dns-transaction.c
View File

@ -675,6 +675,10 @@ static void dns_transaction_process_dnssec(DnsTransaction *t) {
/* All our auxiliary DNSSEC transactions are complete now. Try
* to validate our RRset now. */
r = dns_transaction_validate_dnssec(t);
if (r == -EBADMSG) {
dns_transaction_complete(t, DNS_TRANSACTION_INVALID_REPLY);
return;
}
if (r < 0) {
dns_transaction_complete(t, DNS_TRANSACTION_RESOURCES);
return;