summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon Kelley <simon@thekelleys.org.uk>2014-02-01 14:54:26 +0000
committerSimon Kelley <simon@thekelleys.org.uk>2014-02-01 14:54:26 +0000
commitf6a2b79310ccb69bde68d4fc9ccf5d7fa6627b70 (patch)
treec0e3901bfefce58e5b88401bdf456508f11b4d73
parent82e3f45a9f9655964b3d883ebf5ea10bf6e6e02d (diff)
downloaddnsmasq-f6a2b79310ccb69bde68d4fc9ccf5d7fa6627b70.tar.gz
Validate Ooops.
-rw-r--r--src/dnssec.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/dnssec.c b/src/dnssec.c
index 089d1a5..8a887ea 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -853,7 +853,7 @@ int dnssec_validate_by_ds(time_t now, struct dns_header *header, size_t plen, ch
if (recp1->addr.ds.keylen == (int)hash->digest_size &&
(ds_digest = blockdata_retrieve(recp1->addr.key.keydata, recp1->addr.ds.keylen, NULL)) &&
memcmp(ds_digest, digest, recp1->addr.ds.keylen) == 0 &&
- validate_rrset(now, header, plen, class, T_DNSKEY, name, keyname, key, rdlen - 4, algo, keytag))
+ validate_rrset(now, header, plen, class, T_DNSKEY, name, keyname, key, rdlen - 4, algo, keytag) == STAT_SECURE)
{
valid = 1;
break;