]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
nsec: correct wildcard proof check with queried for literal wildcard
authorMarek Vavruša <mvavrusa@cloudflare.com>
Mon, 18 Jun 2018 23:56:53 +0000 (16:56 -0700)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Thu, 21 Jun 2018 10:09:29 +0000 (12:09 +0200)
commit638413f8f49c21bb79d1e2ce83ff3b4f8c8c875d
tree55bea5161bfb3318ff3798a42264a3da65d302d8
parent4eedc70c82286af04215c5e9b306ca01b153f2b7
nsec: correct wildcard proof check with queried for literal wildcard

The validation fails in current implementation when queried directly
for the wildcard. In that case the count of the common labels with the
NSEC record is the same, and not shorter by 1 (to accomodate wildcard
expansion).
NEWS
lib/dnssec/nsec.c