From: David Vašek <david.vasek@nic.cz>
Date: Sat, 6 Jun 2026 11:29:49 +0000 (+0200)
Subject: kaspdb: fix a possible NULL pointer dereference
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7bbda2f65677d7541465e2c978ccad91caae415c;p=thirdparty%2Fknot-dns.git

kaspdb: fix a possible NULL pointer dereference
---

diff --git a/src/knot/dnssec/kasp/kasp_db.c b/src/knot/dnssec/kasp/kasp_db.c
index 527153915e..2535ba10d6 100644
--- a/src/knot/dnssec/kasp/kasp_db.c
+++ b/src/knot/dnssec/kasp/kasp_db.c
@@ -404,7 +404,7 @@ int kasp_db_delete_keys(knot_lmdb_db_t *db, const knot_dname_t *zone_name,
 	} else {
 		ret = kdnssec_ctx_init(conf(), &ctx, zone_name, db, NULL);
 		keystores = ctx.keystores;
-		delay = use_trash ? ctx.policy->trash_delay : 0;
+		delay = (use_trash && ret == KNOT_EOK) ? ctx.policy->trash_delay : delay;
 	}
 	if (ret != KNOT_EOK) {
 		return ret;