Move REQUIRE outside comment unsupported alg

(cherry picked from commit 5ca649967e661cd3f292913f54a72080da245523)

diff --git a/lib/dns/dnssec.c b/lib/dns/dnssec.c
index b7afce1a73f3f75c70b22f5819f2748615ad5b55..422e98e1787772aff09df5ecb564fa173f055c63 100644 (file)
--- a/lib/dns/dnssec.c
+++ b/lib/dns/dnssec.c
@@ -1686,10 +1686,11 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin,
                dns_rdata_reset(&rdata);
                dns_rdataset_current(&keys, &rdata);
 
-               /* Skip unsupported algorithms */
                REQUIRE(rdata.type == dns_rdatatype_key ||
                        rdata.type == dns_rdatatype_dnskey);
                REQUIRE(rdata.length > 3);
+
+               /* Skip unsupported algorithms */
                if (!dst_algorithm_supported(rdata.data[3]))
                        goto skip;
 

diff --git a/lib/dns/nsec3.c b/lib/dns/nsec3.c
index 978d03c7839679f6f73249ee0a1abe8bb53e81e9..6ae7ca85e6c553d5ce60b7c7b4484637035e84da 100644 (file)
--- a/lib/dns/nsec3.c
+++ b/lib/dns/nsec3.c
@@ -1806,12 +1806,13 @@ dns_nsec3_maxiterations(dns_db_t *db, dns_dbversion_t *version,
                dns_rdata_t rdata = DNS_RDATA_INIT;
                dns_rdataset_current(&rdataset, &rdata);
 
-               /* Skip unsupported algorithms when
-                * calculating the maximum iterations.
-                */
                REQUIRE(rdata.type == dns_rdatatype_key ||
                        rdata.type == dns_rdatatype_dnskey);
                REQUIRE(rdata.length > 3);
+
+               /* Skip unsupported algorithms when
+                * calculating the maximum iterations.
+                */
                if (!dst_algorithm_supported(rdata.data[3]))
                        continue;