# HG changeset patch
# User Kirill A. Korinsky <kirill@korins.ky>
# Date 1718500647 -10800
# Node ID ea0eef2dd12c2d41349d63c532e942cf95fc4d7b
# Parent  22f6716fe23d52067a112096c8fe47395c208df4
Resolver: allowed responses with AD bit set.

diff --git a/src/core/ngx_resolver.c b/src/core/ngx_resolver.c
--- a/src/core/ngx_resolver.c
+++ b/src/core/ngx_resolver.c
@@ -1774,7 +1774,7 @@ ngx_resolver_process_response(ngx_resolv
                    (response->nar_hi << 8) + response->nar_lo);
 
     /* response to a standard query */
-    if ((flags & 0xf870) != 0x8000 || (trunc && tcp)) {
+    if ((flags & 0xf850) != 0x8000 || (trunc && tcp)) {
         ngx_log_error(r->log_level, r->log, 0,
                       "invalid %s DNS response %ui fl:%04Xi",
                       tcp ? "TCP" : "UDP", ident, flags);