upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-23 16:20:26 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix scrubber with harden-glue turned off to reject NS (and other

Browse source 
not-address) records.


git-svn-id: file:///svn/unbound/trunk@3330 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2015-02-10 14:01:45 +00:00
parent e08aa7c5e1
commit 025f36b169
2 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
10 February 2015: Wouter
- Fix scrubber with harden-glue turned off to reject NS (and other
not-address) records.
9 February 2015: Wouter 9 February 2015: Wouter
- Fix validation failure in case upstream forwarder (ISC BIND) does - Fix validation failure in case upstream forwarder (ISC BIND) does
not have the same trust anchors and decides to insert unsigned NS not have the same trust anchors and decides to insert unsigned NS

4
iterator/iter_scrub.c
View file

@ -680,7 +680,9 @@ scrub_sanitize(sldns_buffer* pkt, struct msg_parse* msg,
* (we dont want its glue that was approved * (we dont want its glue that was approved
* during the normalize action) */ * during the normalize action) */
del_addi = 1; del_addi = 1;
} else if(!env->cfg->harden_glue) { } else if(!env->cfg->harden_glue && (
rrset->type == LDNS_RR_TYPE_A ||
rrset->type == LDNS_RR_TYPE_AAAA)) {
/* store in cache! Since it is relevant /* store in cache! Since it is relevant
* (from normalize) it will be picked up * (from normalize) it will be picked up
* from the cache to be used later */ * from the cache to be used later */