From fb5152f70e0414e5ced761cf7e3c754504114fd4 Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Fri, 18 May 2018 17:36:27 +0200 Subject: [PATCH] zero the must-be-zero bits --- pdns/pdns_recursor.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pdns/pdns_recursor.cc b/pdns/pdns_recursor.cc index dac86fb0c8..175145a129 100644 --- a/pdns/pdns_recursor.cc +++ b/pdns/pdns_recursor.cc @@ -1294,7 +1294,7 @@ static void startDoResolve(void *p) OPT record. This MUST also occur when a truncated response (using the DNS header's TC bit) is returned." */ - if (addRecordToPacket(pw, makeOpt(edo.d_packetsize, 0, edo.d_Z), minTTL, dc->d_ttlCap, maxanswersize)) { + if (addRecordToPacket(pw, makeOpt(edo.d_packetsize, 0, edo.d_Z & EDNSOpts::DNSSECOK), minTTL, dc->d_ttlCap, maxanswersize)) { pw.commit(); } } -- 2.47.2