From 0bbd72b2f3d79b5f15ae1fa7d1fea6e579eeef97 Mon Sep 17 00:00:00 2001 From: Tom Gundersen Date: Thu, 23 Jul 2015 13:28:09 +0200 Subject: resolved: rr - fix parsing of NSEC3 We were appending rather than reading the bitmap. --- src/resolve/resolved-dns-packet.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/resolve') diff --git a/src/resolve/resolved-dns-packet.c b/src/resolve/resolved-dns-packet.c index 25035ed7ee..b76f981906 100644 --- a/src/resolve/resolved-dns-packet.c +++ b/src/resolve/resolved-dns-packet.c @@ -1712,10 +1712,12 @@ int dns_packet_read_rr(DnsPacket *p, DnsResourceRecord **ret, size_t *start) { if (r < 0) goto fail; - r = dns_packet_append_types(p, rr->nsec3.types, NULL); + r = dns_packet_read_type_windows(p, &rr->nsec.types, offset + rdlength - p->rindex, NULL); if (r < 0) goto fail; + /* empty non-terminals can have NSEC3 records, so empty bitmaps are allowed */ + break; } default: -- cgit v1.2.3-54-g00ecf