silence clang static analysis

(cherry picked from commit f933be6d452986a657626fa774ad72f10b6f827f)

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index dce6adf69da2253bbce136d1b5a70198ff27815f..5cb959841a9e78aacf8d411ee9a6f791a9e8a73e 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -3681,6 +3681,8 @@ main(int argc, char *argv[]) {
                if (nsec3iter > max)
                        fatal("NSEC3 iterations too big for weakest DNSKEY "
                              "strength. Maximum iterations allowed %u.", max);
+       } else {
+               hashlist_init(&hashlist, 0, 0); /* silence clang */
        }
 
        gversion = NULL;
@@ -3842,8 +3844,7 @@ main(int argc, char *argv[]) {
        dns_db_closeversion(gdb, &gversion, ISC_FALSE);
        dns_db_detach(&gdb);
 
-       if (IS_NSEC3)
-               hashlist_free(&hashlist);
+       hashlist_free(&hashlist);
 
        while (!ISC_LIST_EMPTY(keylist)) {
                key = ISC_LIST_HEAD(keylist);