From a6127611de9e7d36fecc4a59a0d1aad651e8092a Mon Sep 17 00:00:00 2001
From: Mark Wooding <mdw@distorted.org.uk>
Date: Thu, 23 May 2024 02:45:27 +0100
Subject: [PATCH] base.m4 (DKIM_SIGN_P): Check that the sending domain is
 actually listed.

---
 base.m4 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/base.m4 b/base.m4
index 0aadb78..4f16e20 100644
--- a/base.m4
+++ b/base.m4
@@ -424,7 +424,8 @@ m4_define(<:DKIM_SIGN_P:>,
 	       {!def:h_DKIM-Signature:} \
 	       {!def:h_List-ID:} \
 	       {or {{def:authenticated_id} \
-		    {def:authenticated_sender}}}}:>)
+		    {def:authenticated_sender}}} \
+	       {bool {DKIM_KEYS_INSTANCE(<:{true}:>, <:{false}:>)}}}:>)
 
 m4_define(<:DKIM_KEYS_INSTANCE:>,
 	<:${lookup {${domain:$h_From:}} partial0-lsearch \
-- 
2.11.0