diff options
| author | Vladimír Čunát <vladimir.cunat@nic.cz> | 2017-04-24 14:13:32 +0200 |
|---|---|---|
| committer | Vladimír Čunát <vladimir.cunat@nic.cz> | 2017-04-24 14:13:32 +0200 |
| commit | b514078627b6ecd8f44a0c7c036289bac4dcc6c9 (patch) | |
| tree | acab7b7e0bebf61f82b93097f4d0b7b22fba4439 | |
| parent | Merge branch 'ci-respdiff' into 'master' (diff) | |
| parent | dnssec/nsec: fix wildcard_match_check() to allow processing of *. wildcard (diff) | |
| download | knot-resolver-b514078627b6ecd8f44a0c7c036289bac4dcc6c9.tar.xz knot-resolver-b514078627b6ecd8f44a0c7c036289bac4dcc6c9.zip | |
Merge !277: dnssec/nsec: fix wildcards directly under the root
| -rw-r--r-- | lib/dnssec/nsec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/dnssec/nsec.c b/lib/dnssec/nsec.c index 1f598c4b..cff0ab43 100644 --- a/lib/dnssec/nsec.c +++ b/lib/dnssec/nsec.c @@ -299,7 +299,7 @@ static int wildcard_match_check(const knot_pkt_t *pkt, const knot_pktsection_t * int wcard_labels = knot_dname_labels(rrset->owner, NULL); int common_labels = knot_dname_matched_labels(rrset->owner, sname); int rrsig_labels = coverign_rrsig_labels(rrset, sec); - if (wcard_labels <= 1 || + if (wcard_labels < 1 || common_labels != wcard_labels - 1 || common_labels != rrsig_labels) { continue; |