diff options
| author | Oto Šťáva <oto.stava@nic.cz> | 2024-07-03 13:04:19 +0200 |
|---|---|---|
| committer | Oto Šťáva <oto.stava@nic.cz> | 2024-07-03 13:04:19 +0200 |
| commit | 84428783191be37224bf79bffc238b5021aa356d (patch) | |
| tree | 44c268d82dc97cc02fdf69ed70fd9379d0f3716c /lib | |
| parent | Merge branch 'separate-policy-kresd' into 'master' (diff) | |
| parent | Merge branch 'tls-client-error-log' into 'master-5' (diff) | |
| download | knot-resolver-84428783191be37224bf79bffc238b5021aa356d.tar.xz knot-resolver-84428783191be37224bf79bffc238b5021aa356d.zip | |
Merge remote-tracking branch 'origin/master-5' into master
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/layer/iterate.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/layer/iterate.c b/lib/layer/iterate.c index 6f312ca7..69fe344c 100644 --- a/lib/layer/iterate.c +++ b/lib/layer/iterate.c @@ -825,7 +825,10 @@ static int process_answer(knot_pkt_t *pkt, struct kr_request *req) } } else if (!query->parent) { /* Answer for initial query */ - const bool to_wire = ((pkt_class & (PKT_NXDOMAIN|PKT_NODATA)) != 0); + const bool to_wire = ((pkt_class & (PKT_NXDOMAIN|PKT_NODATA)) != 0) + /* We need to cover the case of positive wildcard answer + * with over-limit NSEC3 iterations. */ + || query->flags.DNSSEC_WEXPAND; state = pick_authority(pkt, req, to_wire); if (state != kr_ok()) { return KR_STATE_FAIL; |