<div dir="ltr">I'm interested in more details. In particular, it would help to know:<div> - is the trigger a well-formed DNS query or a crafted packet?<br></div><div><div> - does this affect authoritative servers or recursives?</div>
</div><div> - or is the problem actually in the response (through a recursive) from some evil authoritative server?</div><div><br></div><div>Even if you don't want to share the specifics, knowing the answers to these questions would help people judge the risks.</div>
<div><br></div><div>Damian</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Dec 17, 2013 at 6:00 PM, Jared Mauch <span dir="ltr"><<a href="mailto:jared@puck.nether.net" target="_blank">jared@puck.nether.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Anyone seen this crash:?<br>
<br>
I’m hitting it fairly often right now and trying to poke at the code for triage:<br>
<br>
17-Dec-2013 20:56:03.138 general: name.c:1727: INSIST(offset <= length) failed, back trace<br>
17-Dec-2013 20:56:03.138 general: #0 0x43140d in ??<br>
17-Dec-2013 20:56:03.138 general: #1 0x7ffff622517a in ??<br>
17-Dec-2013 20:56:03.138 general: #2 0x7ffff7873536 in ??<br>
17-Dec-2013 20:56:03.139 general: #3 0x7ffff7877b8d in ??<br>
17-Dec-2013 20:56:03.139 general: #4 0x432590 in ??<br>
17-Dec-2013 20:56:03.139 general: #5 0x4367a6 in ??<br>
17-Dec-2013 20:56:03.139 general: #6 0x440c1f in ??<br>
17-Dec-2013 20:56:03.139 general: #7 0x445c19 in ??<br>
17-Dec-2013 20:56:03.139 general: #8 0x426bef in ??<br>
17-Dec-2013 20:56:03.139 general: #9 0x7ffff6247836 in ??<br>
17-Dec-2013 20:56:03.139 general: #10 0x7ffff5dfcf33 in ??<br>
17-Dec-2013 20:56:03.139 general: #11 0x7ffff5b2aead in ??<br>
17-Dec-2013 20:56:03.139 general: exiting (due to assertion failure)<br>
<br>
<br>
Seems to perhaps be with a specific QNAME<br>
<br>
(gdb) bt<br>
#0 0x00007ffff5a6bc59 in raise () from /usr/lib64/libc.so.6<br>
#1 0x00007ffff5a6d368 in abort () from /usr/lib64/libc.so.6<br>
#2 0x00000000004315d6 in assertion_failed (file=<optimized out>, line=<optimized out>, type=<optimized out>, cond=<optimized out>) at ./main.c:218<br>
#3 0x00007ffff622517a in isc_assertion_failed () from /usr/lib64/libisc.so.95<br>
#4 0x00007ffff7873536 in set_offsets () from /usr/lib64/libdns.so.100<br>
#5 0x00007ffff7877b8d in dns_name_copy () from /usr/lib64/libdns.so.100<br>
#6 0x0000000000432590 in query_findclosestnsec3 (qname=qname@entry=0x7ffff26b6810, db=db@entry=0x7fffe73d82b0, version=version@entry=0x0,<br>
client=client@entry=0x7fffe8132e10, rdataset=0x7fffed088b00, sigrdataset=0x7fffed0880f0, fname=0x7fffed0850b0, exact=exact@entry=isc_boolean_true,<br>
found=found@entry=0x7ffff26b6810) at query.c:5337<br>
#7 0x00000000004367a6 in query_addwildcardproof (client=<optimized out>, db=0x7fffe73d82b0, version=0x7fffe73d0590, name=<optimized out>,<br>
ispositive=ispositive@entry=isc_boolean_false, nodata=nodata@entry=isc_boolean_false) at query.c:3482<br>
#8 0x0000000000440c1f in query_find (client=0x7fffe8132e10, event=event@entry=0x0, qtype=<optimized out>, qtype@entry=12) at query.c:6686<br>
#9 0x0000000000445c19 in ns_query_start (client=client@entry=0x7fffe8132e10) at query.c:7794<br>
#10 0x0000000000426bef in client_request (task=<optimized out>, event=<optimized out>) at client.c:1939<br>
#11 0x00007ffff6247836 in run () from /usr/lib64/libisc.so.95<br>
#12 0x00007ffff5dfcf33 in start_thread () from /usr/lib64/libpthread.so.0<br>
#13 0x00007ffff5b2aead in clone () from /usr/lib64/libc.so.6<br>
<br>
QNAME available in private for those that I trust.<br>
<br>
- Jared<br>
<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br>
dns-jobs</a> mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a><br>
</blockquote></div><br></div>