From 3a1cb30c280fe3ecc4073111bd8c5918232d8b1f Mon Sep 17 00:00:00 2001
From: Willem Toorop <willem@nlnetlabs.nl>
Date: Tue, 21 Nov 2017 15:38:49 +0100
Subject: [PATCH] BOGUS answer because unable to fetch root DNSKEY...

... should not cause segfault
---
 src/dnssec.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/dnssec.c b/src/dnssec.c
index 03e8c326..4e1fc392 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -3164,6 +3164,7 @@ static void check_chain_complete(chain_head *chain)
 
 		if ((head = chain) && (node = _to_the_root(head->parent))
 		    && node->dnskey.name && *node->dnskey.name == 0
+		    && node->dnskey_req
 		    && node->dnskey_req->dnssec_status == GETDNS_DNSSEC_BOGUS){
 
 			DEBUG_ANCHOR("root DNSKEY set was bogus!\n");