strange core dump

[Mark_Andrews at isc.org]

	Fixed in 8.2.1

	Mark

> Today morning our watchogs complained that two of our DNS servers
> had died. I am still running 8.1.2 on both of them, but I am curious
> if anyone has seen this before, if it is kind of an exploit? What
> puzzles me is that they both died within 10 seconds.
> 
> I have checked the logfiles and all I have found were two lines in each
> servers logfiles.  The core dumps are kinda useless, as I don't
> have debugging code/symbols in the binaries.
> 
> The two lines said:
> 
> Sep 18 07:10:09 fano named[3867]: ns_main.c:672: INSIST(evRead(lev, rfd, &iov
> , 1, stream_getlen, sp, &sp->evID_r) != -1): Invalid argument failed.
> Sep 18 07:10:16 fano /kernel: pid 3867 (named), uid 0: exited on signal 6 (co
> re dumped)
> 
> Sep 18 07:10:18 kronecker named[26222]: ns_main.c:672: INSIST(evRead(lev, rfd
> , &iov, 1, stream_getlen, sp, &sp->evID_r) != -1): Invalid argument failed.
> Sep 18 07:10:44 kronecker /kernel: pid 26222 (named), uid 0: exited on signal
>  6 (core dumped)
> 
> Times are GMT+2 (ntp synched)
> The two nameservers are mainly used by our customers, one of them (fano
> aka ns2.space.net) does not even show up publically, e.g. in zone files
> (kronecker is ns.space.net).
> Two others (ns3.dns.space.net and ns4.dns.space.net) had no problems.
> All four DNS servers run exactly the same setup, zones and version.
> 
> Thanks for any info
> 
> 	\Maex
> 
> P.S. And yes, I will upgrade as soon as 8.2.2-R is out ;-))
> 
> -- 
> SpaceNet GmbH             |   http://www.Space.Net/   | Yeah, yo mama dresses
> Research & Development    | mailto:maex-sig at Space.Net | you funny and you nee
> d
> Joseph-Dollinger-Bogen 14 |  Tel: +49 (89) 32356-0    | a mouse to delete fil
> es
> D-80807 Muenchen          |  Fax: +49 (89) 32356-299  |
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org