resolved: refuse OPT RRs in incoming packets that are not in the additional section
authorLennart Poettering <lennart@poettering.net>
Thu, 10 Dec 2015 12:46:53 +0000 (13:46 +0100)
committerLennart Poettering <lennart@poettering.net>
Fri, 11 Dec 2015 13:14:27 +0000 (14:14 +0100)
commite6b57b378709af68d1828e26aec684f88bd04172
tree91c28e8b50aaee95e6106dd9d368d46ba0164463
parentc33be4a6f229ed26407f19fbc463decb3d9b4cbc
resolved: refuse OPT RRs in incoming packets that are not in the additional section

We later rely that the DnsAnswer object contains all RRs from the
original packet, at least when it comes to the answer and authorization
sections, hence we better make sure we don#t silently end up removing an
OPT RR from these two sections.
src/resolve/resolved-dns-packet.c