Skip to content

[9.20] fix: test: Fix CID 510858: Null ptr derefs in check_keys

bind-team-rw-api-rw-repo requested to merge backport-5004-cid-510858-ksr-check-keys-9.20 into bind-9.20

Coverity Scan reported a new issue for the ksr system test. There is allegedly a null pointer dereference (FORWARD_NULL) in check_keys().

This popped up because previously we set 'retired' to 0 in case of unlimited lifetime, but we changed it to None.

It is actually a false positive, because if lifetime is unlimited there will be only one key in 'keys'.

However, the code would be better if we always initialized 'active' and if it is not the first key and retired is set, set the successor key's active time to the retire time of the predecessor key.

Closes #5004 (closed)

Backport of MR !9687 (merged)

Merge request reports