nsec3 incremental fix: detect changed NSEC3PARAM by update

diff --git a/src/knot/dnssec/nsec3-chain.c b/src/knot/dnssec/nsec3-chain.c
index 5b6f5b7a514b23290193b6e13041fc22ac212432..addff4ec9b01592de6c087a638833af7dfd9ff50 100644 (file)
--- a/src/knot/dnssec/nsec3-chain.c
+++ b/src/knot/dnssec/nsec3-chain.c
@@ -776,7 +776,7 @@ int knot_nsec3_fix_chain(zone_update_t *update,
        bool opt_out = (params->flags & KNOT_NSEC3_FLAG_OPT_OUT);
 
        // ensure that the salt has not changed
-       if (!knot_nsec3param_uptodate(update->zone->contents, params)) {
+       if (!knot_nsec3param_uptodate(update->new_cont, params)) {
                int ret = knot_nsec3param_update(update, params);
                if (ret != KNOT_EOK) {
                        return ret;