From: Marek Vavruša <marek.vavrusa@nic.cz>
Date: Sat, 28 Nov 2015 20:44:44 +0000 (+0100)
Subject: lib/dnssec: fixed nsec3 opt-out ignored
X-Git-Tag: v1.0.0-beta3~66
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=514417c6e3fc1cb9bbb3764ef0a4183c5e5be9c3;p=thirdparty%2Fknot-resolver.git

lib/dnssec: fixed nsec3 opt-out ignored
---

diff --git a/lib/dnssec/nsec3.c b/lib/dnssec/nsec3.c
index 29e2fa386..dcfa4053e 100644
--- a/lib/dnssec/nsec3.c
+++ b/lib/dnssec/nsec3.c
@@ -261,10 +261,10 @@ static int covers_name(int *flags, const knot_rrset_t *nsec3, const knot_dname_t
 	if (nsec3_flags & ~OPT_OUT_BIT) {
 		/* RFC5155 3.1.2 */
 		ret = kr_error(EINVAL);
+	} else {
+		ret = kr_ok();
 	}
 
-	ret = kr_ok();
-
 fail:
 	if (params.salt.data) {
 		dnssec_nsec3_params_free(&params);