pullup:

A message could be leaked when a segment of an incoming zone transfer
failed to verify.

diff --git a/lib/dns/xfrin.c b/lib/dns/xfrin.c
index 49dc11df2cfb510d84e7304fb31a109bd8e7e44d..6a58a4513e68ae57b96061fd6896f64a5f30f3c5 100644 (file)
--- a/lib/dns/xfrin.c
+++ b/lib/dns/xfrin.c
@@ -15,7 +15,7 @@
  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: xfrin.c,v 1.109.2.6 2001/09/06 00:20:49 marka Exp $ */
+/* $Id: xfrin.c,v 1.109.2.7 2001/09/12 20:46:54 gson Exp $ */
 
 #include <config.h>
 
@@ -1136,7 +1136,7 @@ xfrin_recv_done(isc_task_t *task, isc_event_t *ev) {
        if (result != ISC_R_SUCCESS) {
                xfrin_log(xfr, ISC_LOG_DEBUG(3), "TSIG check failed: %s",
                       isc_result_totext(result));
-               return;
+               FAIL(result);
        }
 
        for (result = dns_message_firstname(msg, DNS_SECTION_ANSWER);