From 03bf7abbc95b582c9d5cbb07f5195712c4b30ae4 Mon Sep 17 00:00:00 2001
From: bert hubert <bert.hubert@netherlabs.nl>
Date: Sun, 29 Oct 2017 16:23:21 +0100
Subject: [PATCH] With this commit, the root-anchor provisioning machinery no
 longer uses g_rootdnsname which might not yet have been initialized. This
 broke DNSSEC validation with -flto.

---
 pdns/rec-lua-conf.cc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pdns/rec-lua-conf.cc b/pdns/rec-lua-conf.cc
index da2d7491e..3353df34d 100644
--- a/pdns/rec-lua-conf.cc
+++ b/pdns/rec-lua-conf.cc
@@ -33,9 +33,10 @@ GlobalStateHolder<LuaConfigItems> g_luaconfs;
 
 LuaConfigItems::LuaConfigItems()
 {
+  DNSName root("."); // don't use g_rootdnsname here, it might not exist yet
   for (const auto &dsRecord : rootDSs) {
     auto ds=unique_ptr<DSRecordContent>(dynamic_cast<DSRecordContent*>(DSRecordContent::make(dsRecord)));
-    dsAnchors[g_rootdnsname].insert(*ds);
+    dsAnchors[root].insert(*ds);
   }
 }
 
-- 
2.40.0