interesting
/
getdns
mirror of https://github.com/getdnsapi/getdns.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Only validate NOERROR & NXDOMAIN

This commit is contained in:
Willem Toorop 2015-07-02 12:59:28 +02:00
parent e3fe89c802
commit ae580575d0
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/dnssec.c
View File

@ -1840,6 +1840,16 @@ void priv_getdns_get_validation_chain(getdns_dns_req *dnsreq)
chain_head *chain = NULL; chain_head *chain = NULL;
for (netreq_p = dnsreq->netreqs; (netreq = *netreq_p) ; netreq_p++) { for (netreq_p = dnsreq->netreqs; (netreq = *netreq_p) ; netreq_p++) {
if (! netreq->response
|| netreq->response_len < GLDNS_HEADER_SIZE
|| ( GLDNS_RCODE_WIRE(netreq->response)
!= GETDNS_RCODE_NOERROR &&
GLDNS_RCODE_WIRE(netreq->response)
!= GETDNS_RCODE_NXDOMAIN) ) {
netreq->dnssec_status = GETDNS_DNSSEC_INSECURE;
continue;
}
add_pkt2val_chain( &dnsreq->my_mf, &chain add_pkt2val_chain( &dnsreq->my_mf, &chain
, netreq->response, netreq->response_len , netreq->response, netreq->response_len
, netreq , netreq
@ -1852,7 +1862,6 @@ void priv_getdns_get_validation_chain(getdns_dns_req *dnsreq)
, netreq , netreq
); );
} }
if (chain) if (chain)
check_chain_complete(chain); check_chain_complete(chain);
else else