A rdataset could have been left unassociated on the error path in the resume_dslookup() in the dns_resolver unit. Clone the rdataset after the error check, so it's not cloned before we check whether we can make further progress chasing DS records.
7292ee6d92