mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-11 02:49:59 -04:00
Don't include authority data if it would force us to unset the AD bit
This commit is contained in:
parent
8426878e98
commit
8469ee3726
1 changed files with 4 additions and 0 deletions
|
|
@ -1581,6 +1581,10 @@ query_addbestns(ns_client_t *client) {
|
|||
zsigrdataset = NULL;
|
||||
}
|
||||
|
||||
if ((client->message->flags & DNS_MESSAGEFLAG_CD) == 0 &&
|
||||
rdataset->trust == dns_trust_pending)
|
||||
goto cleanup;
|
||||
|
||||
query_addrrset(client, &fname, &rdataset, &sigrdataset, dbuf,
|
||||
DNS_SECTION_AUTHORITY);
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue