Fix DNSSEC validation errors introduced in 4fe6744a220eddd3f1749b40cac3dfc510787de6
diff --git a/src/dnssec.c b/src/dnssec.c
index a54a0b4..c47e335 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -1610,7 +1610,7 @@
 		       int type_covered;
 		       unsigned char *psav = p1;
 		       
-		       if (rdlen < 18)
+		       if (rdlen1 < 18)
 			 return 0; /* bad packet */
 
 		       GETSHORT(type_covered, p1);