mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 18:28:25 +00:00
Small tweak to DNSSEC fix.
This commit is contained in:
@@ -2172,6 +2172,10 @@ int dnssec_chase_cname(time_t now, struct dns_header *header, size_t plen, char
|
|||||||
|
|
||||||
rc = validate_rrset(now, header, plen, class, nsec_type, daemon->workspacename, keyname, NULL, NULL, 0, 0, 0);
|
rc = validate_rrset(now, header, plen, class, nsec_type, daemon->workspacename, keyname, NULL, NULL, 0, 0, 0);
|
||||||
|
|
||||||
|
/* NSECs can't be wildcards. */
|
||||||
|
if (rc == STAT_SECURE_WILDCARD)
|
||||||
|
rc = STAT_BOGUS;
|
||||||
|
|
||||||
if (rc != STAT_SECURE)
|
if (rc != STAT_SECURE)
|
||||||
return rc;
|
return rc;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user