Core dump parsing ACL using key with BIND 9.5.x

David Coulthart davec at columbia.edu
Tue Oct 14 21:09:16 UTC 2008


In my named.conf, I have the following ACL:

acl "external-slaves" {
     key cuit-cuit-external.;
     key columbia.edu.-cpmc.columbia.edu.;
     key columbia.edu.-isc.org.;
};

When I parse this config with named-checkconf from 9.4.2-P2,  
everything works and I'm able to successfully run named with this  
config.

However, when I try 9.5.0-P2 or 9.5.1b2, I get the following error:

# /opt/local/sbin/named-checkconf
aclconf.c:378: INSIST(dacl->length <= dacl->alloc) failed.
Abort (core dumped)

The backtrace from the core file is:

(gdb) bt
#0  0xfee9feb0 in _wndoprnt () from /usr/lib/libc.so.1
#1  0xfee36e78 in decimal_to_extended () from /usr/lib/libc.so.1
#2  0x0021c68c in isc_assertion_typetotext ()
#3  0x0006d7c0 in cfg_acl_fromconfig ()
#4  0x00066ee0 in dump_zone ()
#5  0x00066fd4 in dump_zone ()
#6  0x0006af24 in bind9_check_key ()
#7  0x0006c0e4 in bind9_check_namedconf ()
#8  0x00063f50 in main ()

If I comment out the line "key columbia.edu.-cpmc.columbia.edu.;" BIND  
9.5.x's named-checkconf does not complain.  Is this a bug in BIND 9.5  
or is there something wrong with my config?  I'm able to successfully  
use this key on 9.4.2-P2 for zone transfers.

Thanks,
Dave Coulthart


More information about the bind-users mailing list