- Fix for #1022: Fix ede prohibited in access control refused answers.

diff --git a/daemon/worker.c b/daemon/worker.c
index b9ec7544b97971a32d390a9111fc24adf9924256..176abf57d56e939cd42e3d65151759b5f2a49f58 100644 (file)
--- a/daemon/worker.c
+++ b/daemon/worker.c
@@ -1151,7 +1151,7 @@ deny_refuse(struct comm_point* c, enum acl_access acl,
                log_assert(sldns_buffer_limit(c->buffer) >= LDNS_HEADER_SIZE
                        && LDNS_QDCOUNT(sldns_buffer_begin(c->buffer)) == 1);
 
-               sldns_buffer_skip(c->buffer, LDNS_HEADER_SIZE); /* skip header */
+               sldns_buffer_set_position(c->buffer, LDNS_HEADER_SIZE); /* skip header */
 
                /* check additional section is present and that we respond with EDEs */
                if(LDNS_ARCOUNT(sldns_buffer_begin(c->buffer)) != 1

diff --git a/doc/Changelog b/doc/Changelog
index dfe567bbe7972944e5c7f39f60387349f568b4c7..04e77269fa16e4a5d3687d28d1286ae748477fcb 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+5 March 2024: Wouter
+       - Fix for #1022: Fix ede prohibited in access control refused answers.
+
 4 March 2024: Wouter
        - Fix edns subnet replies for scope zero answers to not get stored
          in the global cache, and in cachedb, when the upstream replies