diff --git a/CHANGES b/CHANGES
index 4b20018109..82b5bec970 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+2764.	[bug]		"rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
+
 2763.	[bug]		"rndc sign" didn't create an NSEC chain. [RT #20591]
 
 2762.	[bug]		DLV validation failed with a local slave DLV zone.
diff --git a/bin/confgen/keygen.c b/bin/confgen/keygen.c
index bdeac94d88..a5db317700 100644
--- a/bin/confgen/keygen.c
+++ b/bin/confgen/keygen.c
@@ -14,7 +14,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: keygen.c,v 1.3 2009/06/11 23:47:55 tbox Exp $ */
+/* $Id: keygen.c,v 1.4 2009/11/12 14:02:38 marka Exp $ */
 
 /*! \file */
 
@@ -194,7 +194,7 @@ write_key_file(const char *keyfile, const char *user,
 	       dns_secalg_t alg) {
 	isc_result_t result;
 	const char *algname = alg_totext(alg);
-	FILE *fd;
+	FILE *fd = NULL;
 
 	DO("create keyfile", isc_file_safecreate(keyfile, &fd));