about summary refs log tree commit diff
path: root/resolv
diff options
context:
space:
mode:
Diffstat (limited to 'resolv')
-rw-r--r--resolv/gethnamaddr.c12
-rw-r--r--resolv/nss_dns/dns-host.c10
2 files changed, 22 insertions, 0 deletions
diff --git a/resolv/gethnamaddr.c b/resolv/gethnamaddr.c
index 3272dbd591..16d7509f23 100644
--- a/resolv/gethnamaddr.c
+++ b/resolv/gethnamaddr.c
@@ -333,6 +333,18 @@ getanswer(answer, anslen, qname, qtype)
 			buflen -= n;
 			continue;
 		}
+		if ((type == T_SIG) || (type == T_KEY) || (type == T_NXT)) {
+			/* We don't support DNSSEC yet.  For now, ignore
+			 * the record and send a low priority message
+			 * to syslog.
+			 */
+			syslog(LOG_DEBUG|LOG_AUTH,
+	       "gethostby*.getanswer: asked for \"%s %s %s\", got type \"%s\"",
+			       qname, p_class(C_IN), p_type(qtype),
+			       p_type(type));
+			cp += n;
+			continue;
+		}
 		if (type != qtype) {
 			syslog(LOG_NOTICE|LOG_AUTH,
 	       "gethostby*.getanswer: asked for \"%s %s %s\", got type \"%s\"",
diff --git a/resolv/nss_dns/dns-host.c b/resolv/nss_dns/dns-host.c
index f8345bb591..ed4be67337 100644
--- a/resolv/nss_dns/dns-host.c
+++ b/resolv/nss_dns/dns-host.c
@@ -456,6 +456,16 @@ getanswer_r (const querybuf *answer, int anslen, const char *qname, int qtype,
 	  linebuflen -= n;
 	  continue;
 	}
+      if (type == T_SIG || type == T_KEY || type == T_NXT)
+	{
+	  /* We don't support DNSSEC yet.  For now, ignore the record
+	     and send a low priority message to syslog.  */
+	  syslog (LOG_DEBUG | LOG_AUTH,
+	       "gethostby*.getanswer: asked for \"%s %s %s\", got type \"%s\"",
+		  qname, p_class (C_IN), p_type(qtype), p_type (type));
+	  cp += n;
+	  continue;
+	}
       if (type != qtype)
 	{
 	  syslog (LOG_NOTICE | LOG_AUTH,