diff options
| author | Vladimír Čunát <vladimir.cunat@nic.cz> | 2019-09-11 17:57:41 +0200 |
|---|---|---|
| committer | Vladimír Čunát <vladimir.cunat@nic.cz> | 2020-10-21 12:26:50 +0200 |
| commit | a9406f78284cc7e04adf659721f74378da45c8af (patch) | |
| tree | aff7746b02c244eebd29de03cc710ae61719313d /lib/resolve.c | |
| parent | compatible changes around kr_request::answer (diff) | |
| download | knot-resolver-a9406f78284cc7e04adf659721f74378da45c8af.tar.xz knot-resolver-a9406f78284cc7e04adf659721f74378da45c8af.zip | |
lib/resolve creation of first query: fix a rare possible bug
qname here wasn't lower-cased, so the match might not be correct.
Still, practically all deployments use either root TA or none,
and these can't be affected.
Diffstat (limited to 'lib/resolve.c')
| -rw-r--r-- | lib/resolve.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/resolve.c b/lib/resolve.c index 44fbef58..0cef2f97 100644 --- a/lib/resolve.c +++ b/lib/resolve.c @@ -776,7 +776,7 @@ static int resolve_query(struct kr_request *request, const knot_pkt_t *packet) qry->flags.AWAIT_CUT = true; /* Want DNSSEC if it's posible to secure this name (e.g. is covered by any TA) */ if ((knot_wire_get_ad(packet->wire) || knot_pkt_has_dnssec(packet)) && - kr_ta_covers_qry(request->ctx, qname, qtype)) { + kr_ta_covers_qry(request->ctx, qry->sname, qtype)) { qry->flags.DNSSEC_WANT = true; } } |