summaryrefslogtreecommitdiffstats
path: root/debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-08 14:54:37 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-08 14:54:37 +0000
commit5c6b8a58ae73e0da3929cffe9081a701578067fd (patch)
tree16ec161160f4a991fba35df60e8fd91fd990f878 /debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch
parentAdding debian version 5.6.0-1. (diff)
downloadknot-resolver-5c6b8a58ae73e0da3929cffe9081a701578067fd.tar.xz
knot-resolver-5c6b8a58ae73e0da3929cffe9081a701578067fd.zip
Adding debian version 5.6.0-1+deb12u1.debian/5.6.0-1+deb12u1debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch')
-rw-r--r--debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch22
1 files changed, 22 insertions, 0 deletions
diff --git a/debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch b/debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch
new file mode 100644
index 0000000..0bb8fb1
--- /dev/null
+++ b/debian/patches/0006-validator-compatibility-with-older-libknot-versions.patch
@@ -0,0 +1,22 @@
+From: =?utf-8?b?VmxhZGltw61yIMSMdW7DoXQ=?= <vladimir.cunat@nic.cz>
+Date: Mon, 12 Feb 2024 11:30:50 +0100
+Subject: validator: compatibility with older libknot versions
+
+The value is in IANA registry, so it's very constant anyway.
+---
+ lib/layer/validate.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/layer/validate.c b/lib/layer/validate.c
+index 95a7624..6c0d7ad 100644
+--- a/lib/layer/validate.c
++++ b/lib/layer/validate.c
+@@ -1130,7 +1130,7 @@ static int validate(kr_layer_t *ctx, knot_pkt_t *pkt)
+ count += (knot_pkt_rr(sec, i)->type == KNOT_RRTYPE_NSEC3);
+ if (count > 8) {
+ VERBOSE_MSG(qry, "<= too many NSEC3 records in AUTHORITY (%d)\n", count);
+- kr_request_set_extended_error(req, KNOT_EDNS_EDE_NSEC3_ITERS,
++ kr_request_set_extended_error(req, 27/*KNOT_EDNS_EDE_NSEC3_ITERS*/,
+ /* It's not about iteration values per se, but close enough. */
+ "DYRH: too many NSEC3 records");
+ qry->flags.DNSSEC_BOGUS = true;