The CD bit changes broke insecurity proofs. They work again.

diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
index c5d297a1b472ebcea613fe645ed70ea0b46339df..f87f0fefc87718aa12fed1d20387d7d871d88e66 100644 (file)
--- a/lib/dns/resolver.c
+++ b/lib/dns/resolver.c
@@ -15,7 +15,7 @@
  * SOFTWARE.
  */
 
-/* $Id: resolver.c,v 1.154 2000/07/25 22:04:33 bwelling Exp $ */
+/* $Id: resolver.c,v 1.155 2000/07/26 00:03:18 bwelling Exp $ */
 
 #include <config.h>
 
@@ -2615,7 +2615,7 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, isc_stdtime_t now) {
                                        result = ISC_R_SUCCESS;
                                if (result != ISC_R_SUCCESS)
                                        break;
-                       } else
+                       } else if (!ANSWER(rdataset))
                                continue;
 
                        if (ANSWER(rdataset)) {