Report information
The Basics
Id:
46387
Status:
resolved
Priority:
Low/Low
Queue:

People
Owner:
Nobody in particular
Cc:
AdminCc:

BugTracker
Version Fixed:
(no value)
Version Found:
(no value)
Versions Affected:
9.9.x, 9.10.x, 9.11.x
Versions Planned:
(no value)
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
bug

Dates
Created:Tue, 24 Oct 2017 04:33:17 -0400
Updated:Wed, 25 Oct 2017 08:00:57 -0400
Closed:Wed, 25 Oct 2017 08:00:57 -0400



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

From: marka@isc.org
Date: Mon, 23 Oct 2017 22:33:17 -1000
Subject: BIND 9.11.x: filter-aaaa system test failing after change 4780.
To: bind9-public@isc.org
4780. [bug] When answering ANY queries, don't include the NS RRset in the authority section if it was already in the answer section. [RT #44543] S:filter-aaaa:Mon Oct 23 21:39:07 PDT 2017 T:filter-aaaa:1:A A:System test filter-aaaa I:using pre-signed zones I:checking that conf/good1.conf is accepted (1) I:checking that conf/good2.conf is accepted (2) I:checking that conf/good3.conf is accepted (3) I:checking that conf/good4.conf is accepted (4) I:checking that conf/good5.conf is accepted (5) I:checking that conf/good6.conf is accepted (6) I:checking that conf/good7.conf is accepted (7) I:checking that conf/good8.conf is accepted (8) I:checking that conf/bad1.conf is rejected (9) I:checking that conf/bad2.conf is rejected (10) I:checking that conf/bad3.conf is rejected (11) I:checking that conf/bad4.conf is rejected (12) I:checking that conf/bad5.conf is rejected (13) I:checking that conf/bad6.conf is rejected (14) I:checking that AAAA is returned when only AAAA record exists, signed (15) I:checking that AAAA is returned when only AAAA record exists, unsigned (16) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed (17) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned (18) I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set (19) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set (20) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl (21) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY (22) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY (23) I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set (24) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set (25) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl (26) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6 (27) I:checking that AAAA is omitted from additional section, qtype=NS (28) I:failed I:checking that AAAA is omitted from additional section, qtype=MX, unsigned (29) I:checking that AAAA is included in additional section, qtype=MX, signed (30) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6 (31) I:checking that AAAA is returned when only AAAA record exists, signed with break-dnssec (32) I:checking that AAAA is returned when only AAAA record exists, unsigned with break-dnssec (33) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed with break-dnssec (34) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned with break-dnssec (35) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set with break-dnssec (36) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set with break-dnssec (37) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl with break-dnssec (38) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec (39) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec (40) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec (41) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec (42) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl with break-dnssec (43) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6 with break-dnssec (44) I:checking that AAAA is omitted from additional section, qtype=NS, with break-dnssec (45) I:failed I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, with break-dnssec (46) I:checking that AAAA is omitted from additional section, qtype=MX, signed, with break-dnssec (47) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6, with break-dnssec (48) I:checking that AAAA is returned when only AAAA record exists, signed, recursive (49) I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive (50) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive (51) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive (52) I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set, recursive (53) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive (54) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive (55) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY recursive (56) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY recursive (57) I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set, recursive (58) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set, recursive (59) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive (60) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6, recursive (61) I:checking that AAAA is omitted from additional section, qtype=NS (62) I:checking that AAAA is omitted from additional section, qtype=MX, unsigned (63) I:checking that AAAA is included in additional section, qtype=MX, signed (64) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6 (65) I:checking that AAAA is returned when only AAAA record exists, signed, recursive with break-dnssec (66) I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive with break-dnssec (67) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive with break-dnssec (68) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive with break-dnssec (69) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set, recursive with break-dnssec (70) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive with break-dnssec (71) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive with break-dnssec (72) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec (73) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec (74) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec (75) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec (76) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive with break-dnssec (77) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv6, recursive with break-dnssec (78) I:checking that AAAA is omitted from additional section, qtype=NS, recursive with break-dnssec (79) I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, recursive with break-dnssec (80) I:checking that AAAA is omitted from additional section, qtype=MX, signed, recursive with break-dnssec (81) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv6, recursive with break-dnssec (82) I:reconfiguring servers I:checking that AAAA is returned when only AAAA record exists, signed (83) I:checking that AAAA is returned when only AAAA record exists, unsigned (84) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed (85) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned (86) I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set (87) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set (88) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl (89) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY (90) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY (91) I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set (92) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set (93) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl (94) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv4 (95) I:checking that AAAA is omitted from additional section, qtype=NS (96) I:failed I:checking that AAAA is omitted from additional section, qtype=MX, unsigned (97) I:checking that AAAA is included in additional section, qtype=MX, signed (98) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv4 (99) I:checking that AAAA is returned when only AAAA record exists, signed with break-dnssec (100) I:checking that AAAA is returned when only AAAA record exists, unsigned with break-dnssec (101) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed with break-dnssec (102) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned with break-dnssec (103) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set with break-dnssec (104) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set with break-dnssec (105) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl with break-dnssec (106) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec (107) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec (108) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec (109) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec (110) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl with break-dnssec (111) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv4 with break-dnssec (112) I:checking that AAAA is omitted from additional section, qtype=NS, with break-dnssec (113) I:failed I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, with break-dnssec (114) I:checking that AAAA is omitted from additional section, qtype=MX, signed, with break-dnssec (115) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv4, with break-dnssec (116) I:checking that AAAA is returned when only AAAA record exists, signed, recursive (117) I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive (118) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive (119) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive (120) I:checking that AAAA is returned when both AAAA and A records exist, signed and DO set, recursive (121) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive (122) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive (123) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY recursive (124) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY recursive (125) I:checking that both A and AAAA are returned when both AAAA and A records exist, signed, qtype=ANY and DO is set, recursive (126) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set, recursive (127) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive (128) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv4, recursive (129) I:checking that AAAA is omitted from additional section, qtype=NS (130) I:checking that AAAA is omitted from additional section, qtype=MX, unsigned (131) I:checking that AAAA is included in additional section, qtype=MX, signed (132) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv4 (133) I:checking that AAAA is returned when only AAAA record exists, signed, recursive with break-dnssec (134) I:checking that AAAA is returned when only AAAA record exists, unsigned, recursive with break-dnssec (135) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed, recursive with break-dnssec (136) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned, recursive with break-dnssec (137) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, signed and DO set, recursive with break-dnssec (138) I:checking that NODATA/NOERROR is returned when both AAAA and A records exist, unsigned and DO set, recursive with break-dnssec (139) I:checking that AAAA is returned when both AAAA and A records exist and query source does not match acl, recursive with break-dnssec (140) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed and qtype=ANY with break-dnssec (141) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned and qtype=ANY with break-dnssec (142) I:checking that A and not AAAA is returned when both AAAA and A records exist, signed, qtype=ANY and DO is set with break-dnssec (143) I:checking that A and not AAAA is returned when both AAAA and A records exist, unsigned, qtype=ANY and DO is set with break-dnssec (144) I:checking that both A and AAAA are returned when both AAAA and A records exist, qtype=ANY and query source does not match acl, recursive with break-dnssec (145) I:checking that AAAA is returned when both AAAA and A record exists, unsigned over IPv4, recursive with break-dnssec (146) I:checking that AAAA is omitted from additional section, qtype=NS, recursive with break-dnssec (147) I:checking that AAAA is omitted from additional section, qtype=MX, unsigned, recursive with break-dnssec (148) I:checking that AAAA is omitted from additional section, qtype=MX, signed, recursive with break-dnssec (149) I:checking that AAAA is included in additional section, qtype=MX, unsigned, over IPv4, recursive with break-dnssec (150) I:exit status: 4 R:FAIL E:filter-aaaa:Mon Oct 23 21:39:09 PDT 2017
Subject: BIND 9.11.x, 9.10.x, 9.9.x: filter-aaaa system test failing after change 4780.
It was a merge error fixed by Evan yesterday with the following commits: - 4d39bffd95 (v9_11) - cd2556d78c (v9_10) - 39215c7e1f (v9_10_sub) - 3dbc4979c6 (v9_9) - d4da1f21c4 (v9_9_sub) None of the Robie builds including the above commits seem to have failed the filter-aaaa system test.