From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Fri, 15 Jul 2016 14:24:30 +0000 (+0200)
Subject: Do not follow CNAMEs when hunting for DS records
X-Git-Tag: auth-4.0.1~37^2~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=54d12bd16b91a4c3faf8c37df755bec525fa145d;p=thirdparty%2Fpdns.git

Do not follow CNAMEs when hunting for DS records

This fixes the CNAME at apex bogus
---

diff --git a/pdns/syncres.cc b/pdns/syncres.cc
index 8c44f81024..aa6e64c8ab 100644
--- a/pdns/syncres.cc
+++ b/pdns/syncres.cc
@@ -443,7 +443,7 @@ int SyncRes::doResolve(const DNSName &qname, const QType &qtype, vector<DNSRecor
       }
     }
 
-    if(doCNAMECacheCheck(qname,qtype,ret,depth,res)) // will reroute us if needed
+    if(qtype != QType::DS && doCNAMECacheCheck(qname,qtype,ret,depth,res)) // will reroute us if needed
       return res;
 
     if(doCacheCheck(qname,qtype,ret,depth,res)) // we done