for purposes of clearing the AD bit, consider all trust levels below dns_trust_secure to be 'pending'

This commit is contained in:
Andreas Gustafsson
2000-05-16 22:16:02 +00:00
parent a823dfa663
commit b2d0b835c7

View File

@@ -1664,7 +1664,7 @@ dns_message_rendersection(dns_message_t *msg, dns_section_t sectionid,
* If we have rendered pending data, ensure
* that the AD bit is not set.
*/
if (rdataset->trust == dns_trust_pending &&
if (rdataset->trust < dns_trust_secure &&
(sectionid == DNS_SECTION_ANSWER ||
sectionid == DNS_SECTION_AUTHORITY))
msg->flags &= ~DNS_MESSAGEFLAG_AD;