bind 9.6-esv-r1 segfault

[Sergey V. Lobanov]

Some info from the core dump:

General info:
Core was generated by `/usr/local/sbin/named -4 -c /etc/named.conf -t 
/var/lib/named -u named -n 4'.
Program terminated with signal 11, Segmentation fault.
#0  0x0813d4d7 in resquery_udpconnected (task=0x8230ef88, event=0xa5bbf068)
     at resolver.c:1202
1202        QTRACE("udpconnected");

Backtrace:
#0  0x0813d4d7 in resquery_udpconnected (task=0x8230ef88, event=0xa5bbf068)
     at resolver.c:1202
#1  0x081c4916 in dispatch (manager=<value optimized out>) at task.c:862
#2  run (manager=<value optimized out>) at task.c:1005
#3  0xb753c725 in start_thread () from /lib/libpthread.so.0
#4  0xb73181ee in clone () from /lib/libc.so.6

Program listing:
1197    resquery_udpconnected(isc_task_t *task, isc_event_t *event) {
1198        resquery_t *query = event->ev_arg;
1199
1200        REQUIRE(event->ev_type == ISC_SOCKEVENT_CONNECT);
1201
1202        QTRACE("udpconnected");
1203
1204        UNUSED(task);
1205
1206        INSIST(RESQUERY_CONNECTING(query));


*event:
$7 = {ev_size = 48, ev_attributes = 0, ev_tag = 0x0, ev_type = 131076,
   ev_action = 0x813d490 <resquery_udpconnected>, ev_arg = 0x89db2c80,
   ev_sender = 0x8232d180, ev_destroy = 0x81a8970 <destroy>,
   ev_destroy_arg = 0x821d0e8, ev_link = {prev = 0xffffffff, next = 
0xffffffff}}

*query:
$8 = {magic = 2312763280, fctx = 0xdededede, mctx = 0xdededede,
   dispatchmgr = 0xdededede, dispatch = 0xdededede,
   exclusivesocket = 3739147998, addrinfo = 0xdededede, tcpsocket = 
0xdededede,
   start = {seconds = 3739147998, nanoseconds = 3739147998}, id = 57054,
   dispentry = 0xdededede, link = {prev = 0xdededede, next = 0xdededede},
   buffer = {magic = 3739147998, base = 0xdededede, length = 3739147998,
     used = 3739147998, current = 3739147998, active = 3739147998, link = {
       prev = 0xdededede, next = 0xdededede}, mctx = 0xdededede},
   tsig = 0xdededede, tsigkey = 0xdededede, options = 3739147998,
   attributes = 3739147998, sends = 3739147998, connects = 3739147998,
   data = 
"\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336\336", 
<incomplete sequence \336>}

Any ideas?

On 09/24/2010 09:13 AM, Sergey V. Lobanov wrote:
> Yesterday Bind has crashed with the following error:
>
> # grep segfault messages
> Sep 23 20:21:10 ns kernel: [5079807.029465] named[19531]: segfault at 
> dededf1e ip 0813d4d7 sp b618f320 error 5 in named[8048000+1c9000]
>
> Is it possible to determine the cause of this failure?
>
> # uname -a
> Linux ns 2.6.32.13-0.4-pae #1 SMP 2010-06-15 12:47:25 +0200 i686 i686 
> i386 GNU/Linux
>
> bind configuration options:
> $ ./configure --enable-largefile --enable-ipv6 --enable-epoll 
> --enable-threads
>
-- 

wbr,
Sergey V. Lobanov