silence clang static analysis

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index edeb60e33352acfe1554f058f0a1e00907300827..ea70f181dd9f1b29b424bb30c0f04f5429ef3a09 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -3742,6 +3742,8 @@ main(int argc, char *argv[]) {
                if (nsec3iter > max)
                        fatal("NSEC3 iterations too big for weakest DNSKEY "
                              "strength. Maximum iterations allowed %u.", max);
+       } else {
+               hashlist_init(&hashlist, 0, 0); /* silence clang */
        }
 
        gversion = NULL;
@@ -3903,8 +3905,7 @@ main(int argc, char *argv[]) {
        dns_db_closeversion(gdb, &gversion, ISC_FALSE);
        dns_db_detach(&gdb);
 
-       if (IS_NSEC3)
-               hashlist_free(&hashlist);
+       hashlist_free(&hashlist);
 
        while (!ISC_LIST_EMPTY(keylist)) {
                key = ISC_LIST_HEAD(keylist);