From 497161f72f628a279dfbc521c94e66e5bdb6f551 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" Date: Mon, 16 Jun 2025 16:59:53 +0200 Subject: [PATCH] - xfr-tsig, tsig_verify return failure comment improved. --- util/tsig.h | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/util/tsig.h b/util/tsig.h index b6ac605dd..d0d4226ca 100644 --- a/util/tsig.h +++ b/util/tsig.h @@ -178,7 +178,9 @@ struct tsig_algorithm* tsig_algo_find_name(const char* algo_name); /** * Verify pkt with the name (domain name), algorithm and key. - * out 0 on success, an error code otherwise. + * out 0 on success, on failure: + * -1 for malformed, no tsig RR, or too large for buffer. + * >0 rcode with a TSIG error code otherwise. */ int tsig_verify(struct sldns_buffer* pkt, const uint8_t* name, const uint8_t* alg, const uint8_t* secret, size_t secret_len, -- 2.47.2