Bug Report from www.isc.org: Name: Leo Lai Email: lai_leo@hotmail.com Software Version: BIND 9.10.4-P6 and BIND 9.11.0-P3 OS: CentOS 5.11 (final) Subject:DIG segfault when doing TOPDOWN SIGCHASE Bug Detail =========== dig +topdown +sigchase +trusted-key=./trusted-key.key isc.org cat trusted-key.key ;; Truncated, retrying in TCP mode. . 139660 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= . 139660 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= Full Results: dig +topdown +sigchase +trusted-key=./trusted-key.key isc.org Launch a query to find a RRset of type A for zone: isc.org with nameservers: . 22884 IN NS h.root-servers.net. . 22884 IN NS c.root-servers.net. . 22884 IN NS b.root-servers.net. . 22884 IN NS j.root-servers.net. . 22884 IN NS a.root-servers.net. . 22884 IN NS i.root-servers.net. . 22884 IN NS k.root-servers.net. . 22884 IN NS f.root-servers.net. . 22884 IN NS d.root-servers.net. . 22884 IN NS m.root-servers.net. . 22884 IN NS l.root-servers.net. . 22884 IN NS g.root-servers.net. . 22884 IN NS e.root-servers.net. Launch a query to find a RRset of type A for zone: isc.org with nameservers: . 22884 IN NS h.root-servers.net. . 22884 IN NS c.root-servers.net. . 22884 IN NS b.root-servers.net. . 22884 IN NS j.root-servers.net. . 22884 IN NS a.root-servers.net. . 22884 IN NS i.root-servers.net. . 22884 IN NS k.root-servers.net. . 22884 IN NS f.root-servers.net. . 22884 IN NS d.root-servers.net. . 22884 IN NS m.root-servers.net. . 22884 IN NS l.root-servers.net. . 22884 IN NS g.root-servers.net. . 22884 IN NS e.root-servers.net. Launch a query to find a RRset of type DNSKEY for zone: . ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== ;; Ok, find a Trusted Key in the DNSKEY RRset: 61045 ;; Ok, find a Trusted Key in the DNSKEY RRset: 61045 ;; Ok, find a Trusted Key in the DNSKEY RRset: 19036 ;; VERIFYING DNSKEY RRset for . with DNSKEY:19036: success ;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658 ;; and we try to continue chain of trust validation of the zone: org. Launch a query to find a RRset of type NS for zone: org. ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== Launch a query to find a RRset of type DS for zone: org. ;; DNSKEYset: . 149269 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= . 149269 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= ;; RRSIG of the DNSKEYset: . 149269 IN RRSIG DNSKEY 8 0 172800 20170323000000 20170302000000 19036 . MGd1N1W6/E34bFS9eu5kNv8mJtAoxe2ltLoUg9O+yRDOw3WYbee7HQLT yF/dX74unkx3pmU2k1fba7TvNx4m+swfMsb+uAPjLJe0B+LZMo/VvNvE B+rvvh5GjCFcRvLtcxpl/UfXka7hgQxq06DvvRbFBxO97X58/KYSmNPg 9dNkanJFDbyRjww8ClDpTUdlXjVH8TrvaK6Pv88T11UGGXxz46QBIzoW Orr+Z3CLa049tzEGVX7gSwEs4aomupvvcE3t7Ka8lkpX7DPQJY+c/Xgt 2ur2GzOj0lli7EYm12uMRj/fJMr1dqj59zUltfCYXGdqc5evFqjTQiSw i0pESQ== ;; DSset: org. 22884 IN DS 9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982 org. 22884 IN DS 9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5 ;; RRSIGset of DSset org. 22884 IN RRSIG DS 8 1 86400 20170320050000 20170307040000 61045 . XVvt8/WJZFS9fJTGAMzR1iz2+adszFC50vcuSyinnOgj4NVgCiMSnst2 4GDjt4SOzVlGx2EirBzspg/zGranEs+JerJufuNBdUYYHLcwcvR6fNSx vNebIPGSInuFP7XKn5NOXo9QZF6CZaSt5qlZRXFk6Es8CInEZkvVZ75/ gK++jGJgiIUduGoUFeS0+lv0/CFdZGsngr5eP5ROmysBgS+gq9cf7yoK sasUznAooptt9KAhL8TC4TPnk5UcFW7EoMkc/tOMFp5Mhgwa2LnEzo0F BPVLN1SADhyTKe1V9qYtUrpRKrq3bpgzCmPl/AMCoyWtZMhQ3alqvid/ 0o0hJg== ;; VERIFYING DS RRset for org. with DNSKEY:61045: success Launch a query to find a RRset of type A for zone: isc.org with nameservers: org. 86029 IN NS c0.org.afilias-nst.info. org. 86029 IN NS a0.org.afilias-nst.info. org. 86029 IN NS b2.org.afilias-nst.org. org. 86029 IN NS d0.org.afilias-nst.org. org. 86029 IN NS a2.org.afilias-nst.info. org. 86029 IN NS b0.org.afilias-nst.org. Launch a query to find a RRset of type DNSKEY for zone: org. ;; DNSKEYset: org. 465 IN DNSKEY 256 3 7 AwEAAXxsMmN/JgpEE9Y4uFNRJm7Q9GBwmEYUCsCxuKlgBU9WrQEFRrvA eMamUBeX4SE8s3V/TEk/TgGmPPp0pMkKD7mseluK6Ard2HZ6O3nPAzL4 i8py/UDRUmYNSCxwfdfjUWRmcB9H+NKWMsJoDhAkLFqg5HS7f0j4Vb99 Wac24Fk7 org. 465 IN DNSKEY 256 3 7 AwEAAayiVbuM+ehlsKsuAL1CI3mA+5JM7ti3VeY8ysmogElVMuSLNsX7 HFyq9O6qhZVJz54Teuzf2EGjO8cbK/fUbyzFW+4i4BRk+pVx673NRgQq DiB2oJDmQRK918Rmoxi/Sf8S7k9FB1Xzxspli9AJmn5tz4ACVsD2xTc1 wZtAKVjr org. 465 IN DNSKEY 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1b dq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5 T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsU ACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jI R2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tp dbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r 8ti6MNoJEHU= org. 465 IN DNSKEY 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw 9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9p dPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgr sGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431 msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8G ZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSn wXCNDXk0kk0= ;; RRSIG of the DNSKEYset: org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 3947 org. qiBjwm5RqlL3mCnTg6S+8znuQ0vEqDf/1X6pr5n/Urr3NpaSt9WNyWl/ p+FyFNF+JBf3dtF/H4RzDwtwLRTgO4tU4gYLMQiHQSBNB07bHg6VlMgK sXj+KEj4gHQQz0KShHOJzkH21Qn3gKSAOevZj1d6S3I8b8e9Si5QTnSl kZM= org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 9795 org. YKxTPQQtLpZNTMgprfJwpucqrneALm1qHQsDhSxw0m7F4+4uUaoFrDT1 O6gBLycH5QWfc11zGjUIqri1qDsi74wb/k1dvarYRwibX/M/jcQKot7v hrMlGN9eUakCbeVPnmsZsYDrX5xmQxCyaNsQRQuwRt3mda5HnMsujLzt ADS1n7btENQCR7WRLSC/Il6jvWes98Yukkheu7xPPM9f/wIuLy0kdUW8 VBs4LbMHmNRHL4FD5/7aPaXtvXZZIR91Xd+RFN7SImHqnYHw8czZvxnC irNZIf2iC8qBEQri/yCwtuul8n6MX7te2gRxGui1bO8HGkRLxlP6AKBL KgvETQ== org. 465 IN RRSIG DNSKEY 7 1 900 20170322152916 20170301142916 17883 org. wRdjfAriWXMJGIWUwZ3w1L3NlJ7ShZ351si+2BAU9qgE3zCuvxwShPXl MeUaswFOqPrupEw+axgjlhqDf1VPLbeAqx5KZyIVs8W+xqCX13Q5SoFZ tjuIo0n0Jl9Y8UaI68J7AxBjceZGvK0Xc7IiQ6KyfLFjP4ysOGkpSwpM wfTkvIb8H/ag+xFbIFuQcTc92ZRIgEHJhuppeD4Ty9Q5qpQgjBia1d03 Y5q2Yw/9GpK5IJbeAcVuh7jIjwRdtzatlzVOkboz9s6dlaf12s7HZ9aH Jk0zJ+/UDomnqana/elxz9EwXNChLOp4nfwVLPcTi50HXrJXwxrcdln5 5vVc6A== ;; OK a DS valids a DNSKEY in the RRset ;; Now verify that this DNSKEY validates the DNSKEY RRset ;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success ;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658 ;; ERROR : isc.org. is not a subdomain of: org. FAILED name.c:2200: REQUIRE(source->length > 0) failed, back trace #0 0x8210844 in ?? #1 0x8210a73 in ?? #2 0x808746b in ?? #3 0x80564b9 in ?? #4 0x8059621 in ?? #5 0x80599af in ?? #6 0x8060728 in ?? #7 0x823ae50 in ?? #8 0xc37912 in ?? #9 0xba247e in ?? Aborted --- This email was received through isc.org Bug Submission Form