Bugfix #411 empty non-terminal NSEC3s cause assertion failure in ldns_rdf_data

diff --git a/dnssec.c b/dnssec.c
index ccc1d3b954ace40548fdaa4a71f1301124088e33..b36e3f355de12a2eaab5a0a416989adfb1a4fb7c 100644 (file)
--- a/dnssec.c
+++ b/dnssec.c
@@ -1347,8 +1347,12 @@ ldns_nsec_bitmap_covers_type(const ldns_rdf *nsec_bitmap, ldns_rr_type type)
        uint16_t cur_type;
        uint16_t pos = 0;
        uint16_t bit_pos;
-       uint8_t *data = ldns_rdf_data(nsec_bitmap);
+       uint8_t *data;
 
+       if (nsec_bitmap == NULL) {
+               return false;
+       }
+       data = ldns_rdf_data(nsec_bitmap);
        while(pos < ldns_rdf_size(nsec_bitmap)) {
                window_block_nr = data[pos];
                bitmap_length = data[pos + 1];