Silence gcc-10-fanalyzer false positive

Add REQUIRE(type == dns_rdatatype_nsec3 || firstp != NULL); so that dereferences of *firstp is not flagged as a NULL pointer dereference.

(cherry picked from commit 683ad6e4)

Closes #2702 (closed)