diff -ru dnsdist-2.0.3.orig/dnsparser.cc dnsdist-2.0.3.CVE-2026-33598/dnsparser.cc
--- dnsdist-2.0.3.orig/dnsparser.cc	2026-03-13 16:12:38.000000000 +0100
+++ dnsdist-2.0.3.CVE-2026-33598/dnsparser.cc	2026-04-03 15:53:30.162781206 +0200
@@ -1235,13 +1235,12 @@
       uint32_t dnsttl = reader.get32BitInt();
       uint16_t contentLength = reader.get16BitInt();
       uint16_t pos = reader.getPosition();
+      reader.skip(contentLength);
 
       bool done = visitor(section, dnsclass, dnstype, dnsttl, contentLength, &packet.at(pos));
       if (done) {
         return true;
       }
-
-      reader.skip(contentLength);
     }
   }
   catch (...) {