From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Thu, 13 Sep 2007 15:11:25 +0000 (+0000)
Subject: Use nsec3s_seen flag for speedup.
X-Git-Tag: release-0.5~29
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b22e1d42732f673227f24f97cfe662a7a49b7566;p=thirdparty%2Funbound.git

Use nsec3s_seen flag for speedup.


git-svn-id: file:///svn/unbound/trunk@612 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/validator/validator.c b/validator/validator.c
index a334b491b..00354177d 100644
--- a/validator/validator.c
+++ b/validator/validator.c
@@ -642,7 +642,7 @@ validate_nameerror_response(struct module_env* env, struct val_env* ve,
 			nsec3s_seen = 1;
 	}
 
-	if(!has_valid_nsec || !has_valid_wnsec) {
+	if((!has_valid_nsec || !has_valid_wnsec) && nsec3s_seen) {
 		/* use NSEC3 proof, both answer and auth rrsets, in case
 		 * NSEC3s end up in the answer (due to qtype=NSEC3 or so) */
 		chase_reply->security = nsec3_prove_nameerror(env, ve,