From: Mark Andrews <marka@isc.org>
Date: Wed, 24 Jun 2026 23:45:57 +0000 (+1000)
Subject: Add missing dumpnode call in dnssec-signzone
X-Git-Tag: v9.21.24~9^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e6889f789d979a8d9451b03cbe65dd785d7471fd;p=thirdparty%2Fbind9.git

Add missing dumpnode call in dnssec-signzone

When the out of zone name was skipped, to prevent it being signed,
dumpnode was not being called to preserve the contents of the node.
---

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index ba30e0e0ca4..5197feda639 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -1546,6 +1546,7 @@ assignwork(void *arg) {
 			goto next;
 		}
 		if (!dns_name_issubdomain(name, gorigin)) {
+			dumpnode(name, node);
 			dns_db_detachnode(&node);
 			goto next;
 		}