bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed

Phil Mayers p.mayers at imperial.ac.uk
Wed Nov 16 13:14:42 UTC 2011


On 16/11/11 13:07, Warren Kumari wrote:

> It was (very convincingly!) explained to me that INSISTS() are only
> used for the "this should not happen" cases, and if the INSISTS()
> were not there, many of the recent attacks may have led to much worse
> things like buffer overflows / more worrying security issues (and
> that the push for INSIST() was directly from this sort of thing in
> 8.x…).

I tend to agree with this kind of reasoning.

It might be good if bind were able to re-start itself, rather than dying 
outright (e.g. re-exec the process) but that is dangerous too; it's 
better done by an unrelated supervising process.



More information about the bind-users mailing list