From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Thu, 13 Sep 2007 15:09:58 +0000 (+0000)
Subject: if no NSEC3 present, skip validation.
X-Git-Tag: release-0.5~30
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=92198b3624048f7f89d3d3fc421254058c645643;p=thirdparty%2Funbound.git

if no NSEC3 present, skip validation.


git-svn-id: file:///svn/unbound/trunk@611 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/validator/val_nsec3.c b/validator/val_nsec3.c
index 2ecfff672..a6e444b9f 100644
--- a/validator/val_nsec3.c
+++ b/validator/val_nsec3.c
@@ -980,6 +980,8 @@ nsec3_prove_nameerror(struct module_env* env, struct val_env* ve,
 		return sec_status_bogus; /* no valid NSEC3s, bogus */
 	rbtree_init(&ct, &nsec3_hash_cmp); /* init names-to-hash cache */
 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
+	if(!flt.zone)
+		return sec_status_bogus; /* no RRs */
 	if(nsec3_iteration_count_high(ve, &flt, kkey))
 		return sec_status_insecure; /* iteration count too high */