From 34f4833e614626ba7dac2d836a257b69262ae6ba Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Fri, 28 Nov 2025 13:28:36 +1100
Subject: [PATCH] Check delegation response to ANY query

Glue if present should be returned.
---
 bin/tests/system/auth/ns1/example.net.db |  2 ++
 bin/tests/system/auth/tests.sh           | 10 ++++++++++
 2 files changed, 12 insertions(+)

diff --git a/bin/tests/system/auth/ns1/example.net.db b/bin/tests/system/auth/ns1/example.net.db
index 29885ca414..edb4c9cbe7 100644
--- a/bin/tests/system/auth/ns1/example.net.db
+++ b/bin/tests/system/auth/ns1/example.net.db
@@ -20,3 +20,5 @@ $TTL 300        ; 5 minutes
 			NS      ns
 ns                      A       10.53.0.1
 server			A	10.53.0.100
+child			NS	ns.child
+ns.child		A	10.53.0.1
diff --git a/bin/tests/system/auth/tests.sh b/bin/tests/system/auth/tests.sh
index 2499b46950..edb382202c 100644
--- a/bin/tests/system/auth/tests.sh
+++ b/bin/tests/system/auth/tests.sh
@@ -186,5 +186,15 @@ lines=$(wc -l <dig.out.test$n)
 [ $ret -eq 0 ] || echo_i "failed"
 status=$((status + ret))
 
+n=$((n + 1))
+echo_i "check delegation response to ANY query ($n)"
+ret=0
+$DIG $DIGOPTS @10.53.0.1 foo.child.example.net any >dig.out.test$n || ret=1
+grep "ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 2" dig.out.test$n >/dev/null || ret=1
+grep 'child\.example\.net\..300.IN.NS.ns\.child\.example\.net\.$' dig.out.test$n >/dev/null || ret=1
+grep 'ns\.child\.example\.net\..300.IN.A.10\.53\.0\.1$' dig.out.test$n >/dev/null || ret=1
+[ $ret -eq 0 ] || echo_i "failed"
+status=$((status + ret))
+
 echo_i "exit status: $status"
 [ $status -eq 0 ] || exit 1