It looks like there are multiple UAF patches (of which DNAME is one).  The bigger problem appears to be the UAF in Recurse_ProcessResponse[0], which implies it may be more than just DNAME records.<p>[0] - <a href="https:&#x2F;&#x2F;twitter.com&#x2F;Laughing_Mantis&#x2F;status&#x2F;674294695736967169" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;Laughing_Mantis&#x2F;status&#x2F;67429469573696716...</a>