Harden dnsdb against crafted DNS responses. Bug 3033