From: Libor Peltan <libor.peltan@nic.cz>
Date: Thu, 1 Oct 2020 10:06:17 +0000 (+0200)
Subject: bugfix: don't crash if error in sign ctx initialization
X-Git-Tag: v3.1.0~371^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=563fcdd886b5d5c52bceeb8fda3c4bda59ece73e;p=thirdparty%2Fknot-dns.git

bugfix: don't crash if error in sign ctx initialization
---

diff --git a/src/knot/dnssec/zone-events.c b/src/knot/dnssec/zone-events.c
index 7a14b518a3..b259b202ad 100644
--- a/src/knot/dnssec/zone-events.c
+++ b/src/knot/dnssec/zone-events.c
@@ -328,7 +328,11 @@ done:
 
 knot_time_t knot_dnssec_failover_delay(const kdnssec_ctx_t *ctx)
 {
-	return ctx->now + ctx->policy->rrsig_prerefresh;
+	if (ctx->policy == NULL) {
+		return ctx->now + 3600; // failed before allocating ctx->policy, use default
+	} else {
+		return ctx->now + ctx->policy->rrsig_prerefresh;
+	}
 }
 
 int knot_dnssec_validate_zone(zone_update_t *update, bool incremental)