[v9_6] silence ccc-analyzer

3567.	[bug]		Silence clang static analyzer warnings. [RT #33365]

diff --git a/CHANGES b/CHANGES
index 8215d079b9d12427c115c370824c916910fe08f5..199f28d501bea474adc8fc4810dc99b21aae7888 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+3567.  [bug]           Silence clang static analyzer warnings. [RT #33365]
+
 3563.  [contrib]       zone2sqlite failed with some table names. [RT #33375]
 
 3561.  [bug]           dig: issue a warning if an EDNS query returns FORMERR

diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 1a760d65e405b190de7940cabfcdbd48572f729a..1cabbb0f701cfd9114af02dd6ff9dab3d7375bbf 100644 (file)
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -2030,6 +2030,10 @@ isspf(const dns_rdata_t *rdata) {
                data += tl;
                rdl -= tl;
        }
+
+       if (i < 6U)
+               return (ISC_FALSE);
+
        buf[i] = 0;
        if (strncmp(buf, "v=spf1", 6) == 0 && (buf[6] == 0 || buf[6] == ' '))
                return (ISC_TRUE);