From: Matthijs Mekking <matthijs@isc.org>
Date: Thu, 28 May 2026 09:51:04 +0000 (+0200)
Subject: Check options in templates that must be non-zero
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=21791160b3c4bd73ea437fd513fa39850e341d96;p=thirdparty%2Fbind9.git

Check options in templates that must be non-zero

Without this, named-checkconf falsely accepts badly configured zones,
and rndc addzone would abort on adding a zone referring to such
templates.
---

diff --git a/lib/isccfg/check.c b/lib/isccfg/check.c
index 26ae9a70b98..be410d77097 100644
--- a/lib/isccfg/check.c
+++ b/lib/isccfg/check.c
@@ -3525,6 +3525,9 @@ isccfg_check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
 	if (check_nonzero(zoptions) != ISC_R_SUCCESS) {
 		result = ISC_R_FAILURE;
 	}
+	if (toptions != NULL && check_nonzero(toptions) != ISC_R_SUCCESS) {
+		result = ISC_R_FAILURE;
+	}
 
 	/*
 	 * Check if a dnssec-policy is set.