Another filter_rrsigs fix.

diff --git a/src/dnssec.c b/src/dnssec.c
index 47ecc51d2cad491ce9355bf902010b142d49f996..44d626bc2f840b4eb075c2ca327bf922a13010ae 100644 (file)
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -2222,7 +2222,7 @@ size_t filter_rrsigs(struct dns_header *header, size_t plen)
          
          if (i < ntohs(header->ancount))
            chop_an++;
-         else if (i < ntohs(header->nscount))
+         else if (i < (ntohs(header->nscount) + ntohs(header->ancount)))
            chop_ns++;
          else
            chop_ar++;