From 4ada1290584745ab6643eece9e1756a8c0e079ca Mon Sep 17 00:00:00 2001 From: Michal Sekletar Date: Wed, 20 Dec 2023 16:44:14 +0100 Subject: [PATCH] resolved: actually check authenticated flag of SOA transaction Fixes #25676 (cherry picked from commit 3b4cc1437b51fcc0b08da8cc3f5d1175eed25eb1) (cherry picked from commit 6da5ca9dd69c0e3340d4439413718ad4963252de) (cherry picked from commit 029272750fe451aeaac87a8c783cfb067f001e16) (cherry picked from commit 5c149c77cbf7b3743fa65ce7dc9d2b5a58351968) (cherry picked from commit bb78da7f955c0102047319c55fff9d853ab7c87a) (cherry picked from commit f58fc88678b893162f2d6d4b2db094e7b1646386) --- src/resolve/resolved-dns-transaction.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/resolve/resolved-dns-transaction.c b/src/resolve/resolved-dns-transaction.c index 9438eb44c2..9a7a26f390 100644 --- a/src/resolve/resolved-dns-transaction.c +++ b/src/resolve/resolved-dns-transaction.c @@ -2762,7 +2762,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord * if (r == 0) continue; - return FLAGS_SET(t->answer_query_flags, SD_RESOLVED_AUTHENTICATED); + return FLAGS_SET(dt->answer_query_flags, SD_RESOLVED_AUTHENTICATED); } return true; @@ -2789,7 +2789,7 @@ static int dns_transaction_requires_rrsig(DnsTransaction *t, DnsResourceRecord * /* We found the transaction that was supposed to find the SOA RR for us. It was * successful, but found no RR for us. This means we are not at a zone cut. In this * case, we require authentication if the SOA lookup was authenticated too. */ - return FLAGS_SET(t->answer_query_flags, SD_RESOLVED_AUTHENTICATED); + return FLAGS_SET(dt->answer_query_flags, SD_RESOLVED_AUTHENTICATED); } return true;