bugfix: don't crash if error in sign ctx initialization

diff --git a/src/knot/dnssec/zone-events.c b/src/knot/dnssec/zone-events.c
index 7a14b518a3f06aa453199b9c5c0501f6f803a82c..b259b202add446895536ee8dc8696f0856b188f5 100644 (file)
--- a/src/knot/dnssec/zone-events.c
+++ b/src/knot/dnssec/zone-events.c
@@ -328,7 +328,11 @@ done:
 
 knot_time_t knot_dnssec_failover_delay(const kdnssec_ctx_t *ctx)
 {
-       return ctx->now + ctx->policy->rrsig_prerefresh;
+       if (ctx->policy == NULL) {
+               return ctx->now + 3600; // failed before allocating ctx->policy, use default
+       } else {
+               return ctx->now + ctx->policy->rrsig_prerefresh;
+       }
 }
 
 int knot_dnssec_validate_zone(zone_update_t *update, bool incremental)