Commit 5b5f1ba0 authored by Mark Andrews's avatar Mark Andrews

Check that sig0 name is the root.

parent b736d866
......@@ -1456,7 +1456,9 @@ getsection(isc_buffer_t *source, dns_message_t *msg, dns_decompress_t *dctx,
covers = dns_rdata_covers(rdata);
if (covers == 0) {
if (sectionid != DNS_SECTION_ADDITIONAL ||
count != msg->counts[sectionid] - 1) {
count != msg->counts[sectionid] - 1 ||
!dns_name_equal(name, dns_rootname))
{
DO_ERROR(DNS_R_BADSIG0);
} else {
skip_name_search = true;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment