rec: Remove empty zones from the aggressive NSEC cache

diff --git a/pdns/recursordist/aggressive_nsec.cc b/pdns/recursordist/aggressive_nsec.cc
index db0f0736ecb1f97584414306e661ae1427c694f2..3e47588bc83c8345ddfcf7ec5b1e415443982e7a 100644 (file)
--- a/pdns/recursordist/aggressive_nsec.cc
+++ b/pdns/recursordist/aggressive_nsec.cc
@@ -191,6 +191,14 @@ void AggressiveNSECCache::prune(time_t now)
   }
 
   d_entriesCount -= erased;
+
+  if (!emptyEntries.empty())
+  {
+    WriteLock rl(d_lock);
+    for (const auto& entry : emptyEntries) {
+      d_zones.remove(entry);
+    }
+  }
 }
 
 static bool isMinimallyCoveringNSEC(const DNSName& owner, const std::shared_ptr<NSECRecordContent>& nsec)