resolved: actually check authenticated flag of SOA transaction
authorMichal Sekletar <msekleta@redhat.com>
Wed, 20 Dec 2023 15:44:14 +0000 (16:44 +0100)
committerCarlos Henrique Lima Melara <charlesmelara@riseup.net>
Thu, 26 Jun 2025 00:44:53 +0000 (21:44 -0300)
Fixes #25676

Gbp-Pq: Name 0001-resolved-actually-check-authenticated-flag-of-SOA-tr.patch

src/resolve/resolved-dns-transaction.c

index 37f0ddde6c4eef51ec859963d691bfb78a5a617c..99364ca1e4819c38cb990705ecc07fc29f8a4bc3 100644 (file)
@@ -2446,7 +2446,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord *
                         if (r == 0)
                                 continue;
 
-                        return t->answer_authenticated;
+                        return dt->answer_authenticated;
                 }
 
                 return true;
@@ -2475,7 +2475,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord *
                          * RR for us. This means we are not at a zone cut. In
                          * this case, we require authentication if the SOA
                          * lookup was authenticated too. */
-                        return t->answer_authenticated;
+                        return dt->answer_authenticated;
                 }
 
                 return true;