From b20ddf5c13f0f8f071084e2c3aebb620024a8a6b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ond=C5=99ej=20Sur=C3=BD?= <ondrej@isc.org>
Date: Tue, 10 Mar 2026 10:21:04 +0100
Subject: [PATCH] Add missing isc_rwlock_destroy() for keylist_lock in
 dnssec-signzone

The keylist_lock rwlock is initialized at startup but never destroyed
on exit, unlike the sibling namelock mutex which is properly cleaned up.

(cherry picked from commit 5dc19a7d9254ea845a5572cb7e6d3c7cf1f02955)
---
 bin/dnssec/dnssec-signzone.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 1ae677b262..b19045e6c7 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -4182,6 +4182,7 @@ main(int argc, char *argv[]) {
 			    &sign_finish);
 	}
 	isc_mutex_destroy(&namelock);
+	isc_rwlock_destroy(&keylist_lock);
 
 	rcu_barrier();