- Fix validator to set unchecked when validation recursion

requests are passed. The edns subnet module checks if validation
  is needed for a cache response, and set the validator to protect
  the cache with validation for non-subnet lookups.
This commit is contained in:
W.C.A. Wijngaards
2026-02-25 10:59:33 +01:00
parent fb322f3e87
commit bff3d762ff
4 changed files with 297 additions and 3 deletions
+3 -1
View File
@@ -2699,7 +2699,9 @@ val_operate(struct module_qstate* qstate, enum module_ev event, int id,
if(!needs_validation(qstate, qstate->return_rcode,
qstate->return_msg)) {
/* no need to validate this */
if(qstate->return_msg)
/* For valrec responses, leave at sec_status_unchecked,
* no security status has been requested for it. */
if(qstate->return_msg && !qstate->is_valrec)
qstate->return_msg->rep->security =
sec_status_indeterminate;
qstate->ext_state[id] = module_finished;