From 35025b6e88b726ae89caacbb312d1b40e5c20b4d Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Mon, 10 Dec 2018 08:41:26 +1100 Subject: [PATCH] silently ignore additional keytag options --- lib/ns/client.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lib/ns/client.c b/lib/ns/client.c index b71aa73eaa..321818bd27 100644 --- a/lib/ns/client.c +++ b/lib/ns/client.c @@ -2079,6 +2079,12 @@ process_keytag(ns_client_t *client, isc_buffer_t *buf, size_t optlen) { return (DNS_R_OPTERR); } + /* Silently drop additional keytag options. */ + if (client->keytag != NULL) { + isc_buffer_forward(buf, (unsigned int)optlen); + return (ISC_R_SUCCESS); + } + client->keytag = isc_mem_get(client->mctx, optlen); if (client->keytag != NULL) { client->keytag_len = (uint16_t)optlen;