pullup:

 359.   [bug]           dnssec-signzone occasionally signed glue records.

diff --git a/CHANGES b/CHANGES
index e534c5462a571867fe28c9bbee35fa9bca105546..ebb405f2c327ae8aa1c2404f916744bd22f492ad 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,8 @@
  362.  [bug]           rndc no longer aborts if the configuration file is
                        missing an options statement. [RT #209]
 
+ 359.  [bug]           dnssec-signzone occasionally signed glue records.
+
  354.  [doc]           Man pages for the dnssec tools are now included in
                        the distribution, in doc/man/dnssec.
 

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index cf056783ea6b0e68feb19191fe58815023b7b064..6805ee958d448eb293d84e697e17c32592cdc13e 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -17,7 +17,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: dnssec-signzone.c,v 1.81 2000/06/22 21:49:04 tale Exp $ */
+/* $Id: dnssec-signzone.c,v 1.81.2.1 2000/08/02 21:05:31 gson Exp $ */
 
 #include <config.h>
 
@@ -1011,7 +1011,7 @@ signzone(dns_db_t *db, dns_dbversion_t *version) {
                nextnode = NULL;
                curnode = NULL;
                dns_dbiterator_current(dbiter, &curnode, curname);
-               if (!dns_name_equal(name, dns_db_origin(db))) {
+               if (!dns_name_equal(curname, dns_db_origin(db))) {
                        dns_rdatasetiter_t *rdsiter = NULL;
                        dns_rdataset_t set;