2876. [bug] Named could return SERVFAIL for negative responses

from unsigned zones. [RT #21131]
This commit is contained in:
Mark Andrews 2010-04-21 04:16:49 +00:00
parent 426848b63c
commit bb6d33103e
2 changed files with 5 additions and 2 deletions

View file

@ -1,3 +1,6 @@
2876. [bug] Named could return SERVFAIL for negative responses
from unsigned zones. [RT #21131]
2875. [bug] dns_time64_fromtext() could accept non digits.
[RT #21033]

View file

@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: validator.c,v 1.188 2010/03/26 17:12:48 marka Exp $ */
/* $Id: validator.c,v 1.189 2010/04/21 04:16:49 marka Exp $ */
#include <config.h>
@ -2990,7 +2990,7 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) {
return (ISC_R_SUCCESS);
}
if (val->authcount == val->authfail)
if (val->authfail != 0 && val->authcount == val->authfail)
return (DNS_R_BROKENCHAIN);
validator_log(val, ISC_LOG_DEBUG(3),
"nonexistence proof(s) not found");