Skip Menu |
Report information
The Basics
Id: 44838
Status: new
Priority: 50/50
Queue: bind9-public
People
Owner: Nobody in particular
Requestors: Leo Lai <lai_leo@hotmail.com>
Cc:
AdminCc:
Bug Information
Version Fixed: (no value)
Version Found: (no value)
Versions Affected: (no value)
Versions Planned: (no value)
Priority: P3 Low
Severity: S2 Normal
CVSS Score: (no value)
CVE ID: (no value)
Component: BIND Utilities
Area: bug
Dates
Created:Tue, 07 Mar 2017 20:45:10 -0500
Updated:Tue, 25 Jul 2017 11:21:40 -0400
Closed:Not set

This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

History Show full headers
# Tue, 07 Mar 2017 20:45:10 -0500 Leo Lai <lai_leo@hotmail.com> - Ticket created [Reply] [Comment]
Subject: BIND 9.10.4-P6 and BIND 9.11.0-P3 - DIG segfault when doing TOPDOWN SIGCHASE
Date: Wed, 8 Mar 2017 01:45:07 +0000
To: bind-bugs@isc.org
From: "Leo Lai" <lai_leo@hotmail.com>
Download (untitled) / with headers
text/plain 11.8KiB
Bug Report from www.isc.org: Name: Leo Lai Email: lai_leo@hotmail.com Software Version: BIND 9.10.4-P6 and BIND 9.11.0-P3 OS: CentOS 5.11 (final) Subject:DIG segfault when doing TOPDOWN SIGCHASE Bug Detail =========== dig +topdown +sigchase +trusted-key=./trusted-key.key isc.org cat trusted-key.key ;; Truncated, retrying in TCP mode. . 139660 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= . 139660 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= Full Results: dig +topdown +sigchase +trusted-key=./trusted-key.key isc.org Launch a query to find a RRset of type A for zone: isc.org with nameservers: . 22884 IN NS h.root-servers.net. . 22884 IN NS c.root-servers.net. . 22884 IN NS b.root-servers.net. . 22884 IN NS j.root-servers.net. . 22884 IN NS a.root-servers.net. . 22884 IN NS i.root-servers.net. . 22884 IN NS k.root-servers.net. . 22884 IN NS f.root-servers.net. . 22884 IN NS d.root-servers.net. . 22884 IN NS m.root-servers.net. . 22884 IN NS l.root-servers.net. . 22884 IN NS g.root-servers.net. . 22884 IN NS e.root-servers.net. Launch a query to find a RRset of type A for zone: isc.org with nameservers: . 22884 IN NS h.root-servers.net. . 22884 IN NS c.root-servers.net. . 22884 IN NS b.root-servers.net. . 22884 IN NS j.root-servers.net. . 22884 IN NS a.root-servers.net. . 22884 IN NS i.root-servers.net. . 22884 IN NS k.root-servers.net. . 22884 IN NS f.root-servers.net. . 22884 IN NS d.root-servers.net. . 22884 IN NS m.root-servers.net. . 22884 IN NS l.root-servers.net. . 22884 IN NS g.root-servers.net. . 22884 IN NS e.root-servers.net. Launch a query to find a RRset of type DNSKEY for zone: . ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== ;; Ok, find a Trusted Key in the DNSKEY RRset: 61045 ;; Ok, find a Trusted Key in the DNSKEY RRset: 61045 ;; Ok, find a Trusted Key in the DNSKEY RRset: 19036 ;; VERIFYING DNSKEY RRset for . with DNSKEY:19036: success ;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658 ;; and we try to continue chain of trust validation of the zone: org. Launch a query to find a RRset of type NS for zone: org. ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== Launch a query to find a RRset of type DS for zone: org. ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== ;; DSset: org. 22884 IN DS 9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982 org. 22884 IN DS 9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5 ;; RRSIGset of DSset org. 22884 IN RRSIG DS 8 1 86400 20170320050000 20170307040000 61045 . XVvt8/WJZFS9fJTGAMzR1iz2+adszFC50vcuSyinnOgj4NVgCiMSnst2 4GDjt4SOzVlGx2EirBzspg/zGranEs+JerJufuNBdUYYHLcwcvR6fNSx vNebIPGSInuFP7XKn5NOXo9QZF6CZaSt5qlZRXFk6Es8CInEZkvVZ75/ gK++jGJgiIUduGoUFeS0+lv0/CFdZGsngr5eP5ROmysBgS+gq9cf7yoK sasUznAooptt9KAhL8TC4TPnk5UcFW7EoMkc/tOMFp5Mhgwa2LnEzo0F BPVLN1SADhyTKe1V9qYtUrpRKrq3bpgzCmPl/AMCoyWtZMhQ3alqvid/ 0o0hJg== ;; VERIFYING DS RRset for org. with DNSKEY:61045: success Launch a query to find a RRset of type A for zone: isc.org with nameservers: org. 86029 IN NS c0.org.afilias-nst.info. org. 86029 IN NS a0.org.afilias-nst.info. org. 86029 IN NS b2.org.afilias-nst.org. org. 86029 IN NS d0.org.afilias-nst.org. org. 86029 IN NS a2.org.afilias-nst.info. org. 86029 IN NS b0.org.afilias-nst.org. Launch a query to find a RRset of type DNSKEY for zone: org. ;; DNSKEYset: org. 465 IN DNSKEY 256 3 7 AwEAAXxsMmN/JgpEE9Y4uFNRJm7Q9GBwmEYUCsCxuKlgBU9WrQEFRrvA eMamUBeX4SE8s3V/TEk/TgGmPPp0pMkKD7mseluK6Ard2HZ6O3nPAzL4 i8py/UDRUmYNSCxwfdfjUWRmcB9H+NKWMsJoDhAkLFqg5HS7f0j4Vb99 Wac24Fk7 org. 465 IN DNSKEY 256 3 7 AwEAAayiVbuM+ehlsKsuAL1CI3mA+5JM7ti3VeY8ysmogElVMuSLNsX7 HFyq9O6qhZVJz54Teuzf2EGjO8cbK/fUbyzFW+4i4BRk+pVx673NRgQq DiB2oJDmQRK918Rmoxi/Sf8S7k9FB1Xzxspli9AJmn5tz4ACVsD2xTc1 wZtAKVjr org. 465 IN DNSKEY 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1b dq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5 T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsU ACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jI R2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tp dbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r 8ti6MNoJEHU= org. 465 IN DNSKEY 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw 9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9p dPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgr sGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431 msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8G ZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSn wXCNDXk0kk0= ;; RRSIG of the DNSKEYset: org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 3947 org. qiBjwm5RqlL3mCnTg6S+8znuQ0vEqDf/1X6pr5n/Urr3NpaSt9WNyWl/ p+FyFNF+JBf3dtF/H4RzDwtwLRTgO4tU4gYLMQiHQSBNB07bHg6VlMgK sXj+KEj4gHQQz0KShHOJzkH21Qn3gKSAOevZj1d6S3I8b8e9Si5QTnSl kZM= org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 9795 org. YKxTPQQtLpZNTMgprfJwpucqrneALm1qHQsDhSxw0m7F4+4uUaoFrDT1 O6gBLycH5QWfc11zGjUIqri1qDsi74wb/k1dvarYRwibX/M/jcQKot7v hrMlGN9eUakCbeVPnmsZsYDrX5xmQxCyaNsQRQuwRt3mda5HnMsujLzt ADS1n7btENQCR7WRLSC/Il6jvWes98Yukkheu7xPPM9f/wIuLy0kdUW8 VBs4LbMHmNRHL4FD5/7aPaXtvXZZIR91Xd+RFN7SImHqnYHw8czZvxnC irNZIf2iC8qBEQri/yCwtuul8n6MX7te2gRxGui1bO8HGkRLxlP6AKBL KgvETQ== org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 17883 org. wRdjfAriWXMJGIWUwZ3w1L3NlJ7ShZ351si+2BAU9qgE3zCuvxwShPXl MeUaswFOqPrupEw+axgjlhqDf1VPLbeAqx5KZyIVs8W+xqCX13Q5SoFZ tjuIo0n0Jl9Y8UaI68J7AxBjceZGvK0Xc7IiQ6KyfLFjP4ysOGkpSwpM wfTkvIb8H/ag+xFbIFuQcTc92ZRIgEHJhuppeD4Ty9Q5qpQgjBia1d03 Y5q2Yw/9GpK5IJbeAcVuh7jIjwRdtzatlzVOkboz9s6dlaf12s7HZ9aH Jk0zJ+/UDomnqana/elxz9EwXNChLOp4nfwVLPcTi50HXrJXwxrcdln5 5vVc6A== ;; OK a DS valids a DNSKEY in the RRset ;; Now verify that this DNSKEY validates the DNSKEY RRset ;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success ;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658 ;; ERROR : isc.org. is not a subdomain of: org. FAILED name.c:2200: REQUIRE(source->length > 0) failed, back trace #0 0x8210844 in ?? #1 0x8210a73 in ?? #2 0x808746b in ?? #3 0x80564b9 in ?? #4 0x8059621 in ?? #5 0x80599af in ?? #6 0x8060728 in ?? #7 0x823ae50 in ?? #8 0xc37912 in ?? #9 0xba247e in ?? Aborted --- This email was received through isc.org Bug Submission Form
# Wed, 08 Mar 2017 06:45:54 -0500 Mukund Sivaraman <muks@isc.org> - Priority P3 Low added
# Wed, 08 Mar 2017 06:45:54 -0500 Mukund Sivaraman <muks@isc.org> - Severity S2 Normal added
# Wed, 08 Mar 2017 06:45:55 -0500 Mukund Sivaraman <muks@isc.org> - Area bug added
# Wed, 08 Mar 2017 06:45:55 -0500 Mukund Sivaraman <muks@isc.org> - Component BIND Utilities added
# Tue, 25 Jul 2017 11:21:40 -0400 Vicky Risk <vicky@isc.org> - Queue changed from #6 to bind9-public