From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Fri, 18 May 2018 15:36:27 +0000 (+0200)
Subject: zero the must-be-zero bits
X-Git-Tag: dnsdist-1.3.1~70^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fb5152f70e0414e5ced761cf7e3c754504114fd4;p=thirdparty%2Fpdns.git

zero the must-be-zero bits
---

diff --git a/pdns/pdns_recursor.cc b/pdns/pdns_recursor.cc
index dac86fb0c8..175145a129 100644
--- a/pdns/pdns_recursor.cc
+++ b/pdns/pdns_recursor.cc
@@ -1294,7 +1294,7 @@ static void startDoResolve(void *p)
          OPT record.  This MUST also occur when a truncated response (using
          the DNS header's TC bit) is returned."
       */
-      if (addRecordToPacket(pw, makeOpt(edo.d_packetsize, 0, edo.d_Z), minTTL, dc->d_ttlCap, maxanswersize)) {
+      if (addRecordToPacket(pw, makeOpt(edo.d_packetsize, 0, edo.d_Z & EDNSOpts::DNSSECOK), minTTL, dc->d_ttlCap, maxanswersize)) {
         pw.commit();
       }
     }