- rpz-triggers, fix that after cname an nsdname or nsip trigger has cname

  rrsets prepended by the iterator.

diff --git a/iterator/iterator.c b/iterator/iterator.c
index f83170c16bd9470a58d3405ccb2c69cfb1e3b1bb..0883b91b0096550ba55268202c0c313e1e1c67d0 100644 (file)
--- a/iterator/iterator.c
+++ b/iterator/iterator.c
@@ -2479,6 +2479,10 @@ processQueryTargets(struct module_qstate* qstate, struct iter_qstate* iq,
                        qstate->return_rcode = FLAGS_GET_RCODE(forged_response->rep->flags);
                        qstate->return_msg = forged_response;
                        next_state(iq, FINISHED_STATE);
+                       if(!iter_prepend(iq, qstate->return_msg, qstate->region)) {
+                               log_err("rpz, prepend rrsets: out of memory");
+                               return error_response(qstate, id, LDNS_RCODE_SERVFAIL);
+                       }
                        return 0;
                }
        }
@@ -3039,7 +3043,7 @@ processQueryResponse(struct module_qstate* qstate, struct iter_qstate* iq,
                                qstate->return_msg = forged_response;
                                next_state(iq, FINISHED_STATE);
                                if(!iter_prepend(iq, qstate->return_msg, qstate->region)) {
-                                       log_err("rpz, prepend rrsets: out of memory");
+                                       log_err("rpz after cname, prepend rrsets: out of memory");
                                        return error_response(qstate, id, LDNS_RCODE_SERVFAIL);
                                }
                                qstate->return_msg->qinfo = qstate->qinfo;