knot/dnssec: add missing function return check

diff --git a/src/knot/dnssec/zone-events.c b/src/knot/dnssec/zone-events.c
index 4b386a3b51e0fde5326404a4db2c6e9be85cbd63..635ffb93dde98c9f047a4149ebd06b2a180e0f5c 100644 (file)
--- a/src/knot/dnssec/zone-events.c
+++ b/src/knot/dnssec/zone-events.c
@@ -45,6 +45,9 @@ static int sign_init(const zone_contents_t *zone, zone_sign_flags_t flags, zone_
 
        if (roll_flags & KEY_ROLL_DO_NSEC3RESALT) {
                r = knot_dnssec_nsec3resalt(ctx, &reschedule->last_nsec3resalt, &reschedule->next_nsec3resalt);
+               if (r != KNOT_EOK) {
+                       return r;
+               }
        }
 
        // perform key rollover if needed