Don't validate error returns.

This commit is contained in:
Simon Kelley
2014-01-19 09:54:16 +00:00
parent 6c0cb858c1
commit 72ae2f3d56

View File

@@ -955,6 +955,9 @@ int dnssec_validate_reply(time_t now, struct dns_header *header, size_t plen, ch
int type1, class1, rdlen1, type2, class2, rdlen2;
int i, j, rc;
if (RCODE(header) != NXDOMAIN && RCODE(header) != NOERROR)
return STAT_INSECURE;
if (!(ans_start = skip_questions(header, plen)))
return STAT_INSECURE;