fix: answer section is always validated

zmap · Nov 1, 2024 · 4d62421 · 4d62421
1 parent ca5a2b5
commit 4d62421
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/zdns/dnssec.go b/src/zdns/dnssec.go
@@ -33,9 +33,8 @@ func (r *Resolver) validateChainOfDNSSECTrust(ctx context.Context, msg *dns.Msg,
 	typeToRRSets := make(map[uint16][]dns.RR)
 	typeToRRSigs := make(map[uint16][]*dns.RRSIG)
 
-	if msg.Authoritative {
-		updateTypeMapWithRRs(typeToRRSets, typeToRRSigs, msg.Answer)
-	} else {
+	updateTypeMapWithRRs(typeToRRSets, typeToRRSigs, msg.Answer)
+	if !msg.Authoritative && isIterative {
 		updateTypeMapWithRRs(typeToRRSets, typeToRRSigs, msg.Ns)
 	}