Commit 3f59d6c2 authored by Mukund Sivaraman's avatar Mukund Sivaraman Committed by Mark Andrews
Browse files

Don't validate non-pending glue when adding to the additional section

(cherry picked from commit 31bd3147)
parent 0b7337f7
...@@ -1625,8 +1625,7 @@ query_addadditional(void *arg, dns_name_t *name, dns_rdatatype_t qtype) { ...@@ -1625,8 +1625,7 @@ query_addadditional(void *arg, dns_name_t *name, dns_rdatatype_t qtype) {
have_a = ISC_TRUE; have_a = ISC_TRUE;
#endif #endif
if (additionaltype == dns_rdatasetadditional_fromcache && if (additionaltype == dns_rdatasetadditional_fromcache &&
(DNS_TRUST_PENDING(rdataset->trust) || DNS_TRUST_PENDING(rdataset->trust) &&
DNS_TRUST_GLUE(rdataset->trust)) &&
!validate(client, db, fname, rdataset, sigrdataset)) !validate(client, db, fname, rdataset, sigrdataset))
{ {
dns_rdataset_disassociate(rdataset); dns_rdataset_disassociate(rdataset);
...@@ -1696,8 +1695,7 @@ query_addadditional(void *arg, dns_name_t *name, dns_rdatatype_t qtype) { ...@@ -1696,8 +1695,7 @@ query_addadditional(void *arg, dns_name_t *name, dns_rdatatype_t qtype) {
goto addname; goto addname;
#endif #endif
if (additionaltype == dns_rdatasetadditional_fromcache && if (additionaltype == dns_rdatasetadditional_fromcache &&
(DNS_TRUST_PENDING(rdataset->trust) || DNS_TRUST_PENDING(rdataset->trust) &&
DNS_TRUST_GLUE(rdataset->trust)) &&
!validate(client, db, fname, rdataset, sigrdataset)) !validate(client, db, fname, rdataset, sigrdataset))
{ {
dns_rdataset_disassociate(rdataset); dns_rdataset_disassociate(rdataset);
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment