[1573] bit of cleanup

src/bin/auth/query.h

@@ -78,6 +78,9 @@ private:
     /// (signaled by find() returning NXRRSET), and the zone is signed
     /// with NSEC, an NSEC denial of existance proof is added.
     ///
+    /// \exception BadDS raised if find() returns anything other than
+    ///                  SUCCESS or NXRRSET when searching for the DS
+    ///                  record.
     /// \param finder The ZoneFinder where the delegation was found
     /// \param ds_name The name of the delegation RRset
     void addDS(isc::datasrc::ZoneFinder& finder,

src/bin/auth/tests/query_unittest.cc

@@ -515,7 +515,6 @@ MockZoneFinder::find(const Name& name, const RRType& type,
         }
     }
 
-
     // normal cases.  names are searched for only per exact-match basis
     // for simplicity.
     const Domains::const_iterator found_domain = domains_.find(name);
@@ -937,9 +936,8 @@ TEST_F(QueryTest, delegation) {
 }
 
 TEST_F(QueryTest, secureDelegation) {
-    // find match rrset, omit additional data which has already been provided
-    // in the answer section from the additional.
-    EXPECT_NO_THROW(Query(memory_client, Name("foo.signed-delegation.example.com"),
+    EXPECT_NO_THROW(Query(memory_client,
+                          Name("foo.signed-delegation.example.com"),
                           qtype, response, true).process());
 
     // Should now contain RRSIG and DS record as well.
@@ -957,7 +955,7 @@ TEST_F(QueryTest, secureUnsignedDelegation) {
                           Name("foo.unsigned-delegation.example.com"),
                           qtype, response, true).process());
 
-    // Should now contain RRSIG and DS record as well.
+    // Should now contain RRSIG and NSEC record as well.
     responseCheck(response, Rcode::NOERROR(), 0, 0, 3, 0,
                   NULL,
                   (string(unsigned_delegation_txt) +