mirror of
https://github.com/NLnetLabs/unbound.git
synced 2026-08-17 21:25:50 +02:00
- Fix validator to set unchecked when validation recursion
requests are passed. The edns subnet module checks if validation is needed for a cache response, and set the validator to protect the cache with validation for non-subnet lookups.
This commit is contained in:
@@ -2699,7 +2699,9 @@ val_operate(struct module_qstate* qstate, enum module_ev event, int id,
|
||||
if(!needs_validation(qstate, qstate->return_rcode,
|
||||
qstate->return_msg)) {
|
||||
/* no need to validate this */
|
||||
if(qstate->return_msg)
|
||||
/* For valrec responses, leave at sec_status_unchecked,
|
||||
* no security status has been requested for it. */
|
||||
if(qstate->return_msg && !qstate->is_valrec)
|
||||
qstate->return_msg->rep->security =
|
||||
sec_status_indeterminate;
|
||||
qstate->ext_state[id] = module_finished;
|
||||
|
||||
Reference in New Issue
Block a user