From: Grigorii Demidov <grigorii.demidov@nic.cz>
Date: Tue, 23 May 2017 09:15:39 +0000 (+0200)
Subject: layer/validate: don't try to find proof of DS non-existence in CNAME'ed answer for... 
X-Git-Tag: v1.3.0~12^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9784a848b7e710ec8a326aa847171649d3be967e;p=thirdparty%2Fknot-resolver.git

layer/validate: don't try to find proof of DS non-existence in CNAME'ed answer for DS query
---

diff --git a/lib/layer/validate.c b/lib/layer/validate.c
index 9b9b43d24..95be15ef5 100644
--- a/lib/layer/validate.c
+++ b/lib/layer/validate.c
@@ -330,7 +330,8 @@ static int update_delegation(struct kr_request *req, struct kr_query *qry, knot_
 	unsigned section = KNOT_ANSWER;
 	if (!knot_wire_get_aa(answer->wire)) { /* Referral */
 		section = KNOT_AUTHORITY;
-	} else if (knot_pkt_qtype(answer) == KNOT_RRTYPE_DS) { /* Subrequest */
+	} else if (knot_pkt_qtype(answer) == KNOT_RRTYPE_DS &&
+		   !(qry->flags & QUERY_CNAME)) {
 		section = KNOT_ANSWER;
 	} else { /* N/A */
 		return kr_ok();