From: Simon Kelley <simon@thekelleys.org.uk>
Date: Tue, 28 Apr 2015 20:26:35 +0000 (+0100)
Subject: Don't remove RRSIG RR from answers to ANY queries when the do bit is not set.
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2ed162ac204f3609fe4d9f9a0430baeaa352d88f;p=people%2Fms%2Fdnsmasq.git

Don't remove RRSIG RR from answers to ANY queries when the do bit is not set.
---

diff --git a/src/rfc1035.c b/src/rfc1035.c
index 32df31a..5828055 100644
--- a/src/rfc1035.c
+++ b/src/rfc1035.c
@@ -1608,6 +1608,11 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
       GETSHORT(qtype, p); 
       GETSHORT(qclass, p);
 
+      /* Don't filter RRSIGS from answers to ANY queries, even if do-bit
+	 not set. */
+      if (qtype == T_ANY)
+	*do_bit = 1;
+
       ans = 0; /* have we answered this question */
       
       if (qtype == T_TXT || qtype == T_ANY)