From: Matthijs Mekking <matje@NLnetLabs.nl>
Date: Thu, 17 Nov 2011 09:47:10 +0000 (+0000)
Subject: next closer is already done in ldns_dnssec_nsec3_closest_encloser
X-Git-Tag: release-1.6.12~34
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d66197cea6910aa0343a5fb1a6b88fc7024a8b9a;p=thirdparty%2Fldns.git

next closer is already done in ldns_dnssec_nsec3_closest_encloser

svn:NO TEST
---

diff --git a/dnssec_verify.c b/dnssec_verify.c
index 4e35afe1..18af5d2f 100644
--- a/dnssec_verify.c
+++ b/dnssec_verify.c
@@ -1644,8 +1644,6 @@ ldns_dnssec_verify_denial_nsec3_match(ldns_rr *rr,
 		} else {
 			result = LDNS_STATUS_DNSSEC_NSEC_RR_NOT_COVERED;
 		}
-
-		/* still need to check covering next closer */
 	} else if (packet_nodata && packet_qtype != LDNS_RR_TYPE_DS) {
 		/* section 8.5 */
 		hashed_name = ldns_nsec3_hash_name_frm_nsec3(
@@ -1712,8 +1710,6 @@ ldns_dnssec_verify_denial_nsec3_match(ldns_rr *rr,
 		}
 		ldns_rdf_deep_free(closest_encloser);
 		ldns_rdf_deep_free(wildcard);
-
-		/* still need to check covering next closer */
 	} else if (packet_nodata && packet_qtype == LDNS_RR_TYPE_DS) {
 		/* section 8.6 */
 		/* note: up to XXX this is the same as for 8.5 */