From: Ondřej Surý <ondrej@isc.org>
Date: Thu, 19 Feb 2026 12:44:23 +0000 (+0100)
Subject: Fix assertion failure when sending notify fails over UDP
X-Git-Tag: v9.20.20~17^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e68aa79e2ac1505afa9c8bde79b61e881c365c10;p=thirdparty%2Fbind9.git

Fix assertion failure when sending notify fails over UDP

When dns_request_create() fails in notify_send_toaddr() the TSIG key was
not cleared when retrying over TCP causing assertion failure.  Set the
TSIG key to NULL in the dns_message to prevent the assertion failure.

(cherry picked from commit ee3391a1460cd80b910136a65f44b6400b5e38fe)
---

diff --git a/lib/dns/request.c b/lib/dns/request.c
index 052c9f10810..0abddd2fff1 100644
--- a/lib/dns/request.c
+++ b/lib/dns/request.c
@@ -649,6 +649,7 @@ again:
 
 cleanup:
 	if (result != ISC_R_SUCCESS) {
+		dns_message_settsigkey(message, NULL);
 		req_cleanup(request);
 		dns_request_detach(&request);
 		req_log(ISC_LOG_DEBUG(3), "%s: failed %s", __func__,