- sync_keyzone() could leak ISC_R_NOMORE, causing zone_postload() to think it had failed - journal roll-forward on key zones complained about having the wrong number of SOA records - dns_soa_buildrdata() could return a pointer to memory allocated on the stack