mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 10:18:25 +00:00
Don't validate error returns.
This commit is contained in:
@@ -955,6 +955,9 @@ int dnssec_validate_reply(time_t now, struct dns_header *header, size_t plen, ch
|
|||||||
int type1, class1, rdlen1, type2, class2, rdlen2;
|
int type1, class1, rdlen1, type2, class2, rdlen2;
|
||||||
int i, j, rc;
|
int i, j, rc;
|
||||||
|
|
||||||
|
if (RCODE(header) != NXDOMAIN && RCODE(header) != NOERROR)
|
||||||
|
return STAT_INSECURE;
|
||||||
|
|
||||||
if (!(ans_start = skip_questions(header, plen)))
|
if (!(ans_start = skip_questions(header, plen)))
|
||||||
return STAT_INSECURE;
|
return STAT_INSECURE;
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user