Check if key is NULL before dereferencing it

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 9101098470bbe64ca6a4c5aa481c71dec8f0d348..caf8f125d1dfcf6ba57a786abc7a2d3ef5833214 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -552,7 +552,7 @@ signset(dns_diff_t *del, dns_diff_t *add, dns_dbnode_t *node, dns_name_t *name,
                future = isc_serial_lt(now, rrsig.timesigned);
 
                key = keythatsigned(&rrsig);
-               offline = key->pubkey;
+               offline = (key != NULL) ? key->pubkey : false;
                sig_format(&rrsig, sigstr, sizeof(sigstr));
                expired = isc_serial_gt(now, rrsig.timeexpire);
                refresh = isc_serial_gt(now + cycle, rrsig.timeexpire);