Call dns_dbiterator_destroy earlier to prevent potential deadlock.

diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index d9e95f957bc53e470d1ca6f182a2f01426624907..6fa659a34bbcd8155e906b8d20426a7d089bfb8c 100644 (file)
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -15623,6 +15623,8 @@ receive_secure_db(isc_task_t *task, isc_event_t *event) {
                dns_db_detachnode(db, &node);
        }
 
+       dns_dbiterator_destroy(&dbiterator);
+
        /*
         * Call restore_nsec3param() to create private-type records from
         * the old nsec3 parameters and insert them into db