Don't validate error returns.

72ae2f3d · Simon Kelley · 6c0cb858 · 72ae2f3d
Commit 72ae2f3d authored Jan 19, 2014 by Simon Kelley
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

src/dnssec.c src/dnssec.c +3 -0

No files found.
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -955,6 +955,9 @@ int dnssec_validate_reply(time_t now, struct dns_header *header, size_t plen, ch
  int type1, class1, rdlen1, type2, class2, rdlen2;
  int i, j, rc;
+  if (RCODE(header) != NXDOMAIN && RCODE(header) != NOERROR)
+    return STAT_INSECURE;
  if (!(ans_start = skip_questions(header, plen)))
    return STAT_INSECURE;