diff --git a/lib/ns/query.c b/lib/ns/query.c
index 11accf9b37..93c532c529 100644
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -6480,11 +6480,15 @@ query_checkrpz(query_ctx_t *qctx, isc_result_t result) {
  */
 static isc_result_t
 query_rpzcname(query_ctx_t *qctx, dns_name_t *cname) {
-	ns_client_t *client = qctx->client;
+	ns_client_t *client;
 	dns_fixedname_t prefix, suffix;
 	unsigned int labels;
 	isc_result_t result;
 
+	REQUIRE(qctx != NULL && qctx->client != NULL);
+
+	client = qctx->client;
+
 	CTRACE(ISC_LOG_DEBUG(3), "query_rpzcname");
 
 	labels = dns_name_countlabels(cname);