Move REQUIRE outside comment unsupported alg

diff --git a/lib/dns/dnssec.c b/lib/dns/dnssec.c
index e255b6e2a9b5d9d395e17302af8eb8f10f4839d4..420c93aa050d093f49e12d9d5efe87be6f8e585b 100644 (file)
--- a/lib/dns/dnssec.c
+++ b/lib/dns/dnssec.c
@@ -1623,10 +1623,11 @@ dns_dnssec_keylistfromrdataset(const dns_name_t *origin,
                dns_rdata_reset(&rdata);
                dns_rdataset_current(&keys, &rdata);
 
-               /* Skip unsupported algorithms */
                REQUIRE(rdata.type == dns_rdatatype_key ||
                        rdata.type == dns_rdatatype_dnskey);
                REQUIRE(rdata.length > 3);
+
+               /* Skip unsupported algorithms */
                if (!dst_algorithm_supported(rdata.data[3]))
                        goto skip;
 

diff --git a/lib/dns/nsec3.c b/lib/dns/nsec3.c
index f30d69591bbb65b7be456df73f3a3bac49e774b6..9bd2b5781d7fcef059310994d941b6512bd9057f 100644 (file)
--- a/lib/dns/nsec3.c
+++ b/lib/dns/nsec3.c
@@ -1813,12 +1813,13 @@ dns_nsec3_maxiterations(dns_db_t *db, dns_dbversion_t *version,
                dns_rdata_t rdata = DNS_RDATA_INIT;
                dns_rdataset_current(&rdataset, &rdata);
 
-               /* Skip unsupported algorithms when
-                * calculating the maximum iterations.
-                */
                REQUIRE(rdata.type == dns_rdatatype_key ||
                        rdata.type == dns_rdatatype_dnskey);
                REQUIRE(rdata.length > 3);
+
+               /* Skip unsupported algorithms when
+                * calculating the maximum iterations.
+                */
                if (!dst_algorithm_supported(rdata.data[3]))
                        continue;