upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix validation of nodata for DS query in NSEC zones, reported by

Browse source 
Ondrej Mikle.


git-svn-id: file:///svn/unbound/trunk@2662 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2012-05-02 11:58:27 +00:00
parent 53a448ffae
commit 2bf79c2e65
2 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
2 May 2012: Wouter
- Fix validation of nodata for DS query in NSEC zones, reported by
Ondrej Mikle.
13 April 2012: Wouter 13 April 2012: Wouter
- ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older - ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older
openssl. openssl.

4
validator/val_nsec.c
View file

@ -368,8 +368,8 @@ int nsec_proves_nodata(struct ub_packed_rrset_key* nsec,
!nsec_has_type(nsec, LDNS_RR_TYPE_SOA)) { !nsec_has_type(nsec, LDNS_RR_TYPE_SOA)) {
return 0; return 0;
} else if(qinfo->qtype == LDNS_RR_TYPE_DS && } else if(qinfo->qtype == LDNS_RR_TYPE_DS &&
nsec_has_type(nsec, LDNS_RR_TYPE_SOA && nsec_has_type(nsec, LDNS_RR_TYPE_SOA) &&
!dname_is_root(qinfo->qname))) { !dname_is_root(qinfo->qname)) {
return 0; return 0;
} }