[bind-9.18.26] named crash with assertion failure

[avijeet gupta]

Hi All,

I have bind9 version 9.18.26 deployed on a dns server running on the AWS
ECS cluster. I noticed "named" crashed with assertion failure. It has
happened a few times now.

>From the coredump, it appears named crashied when it is trying to respond
to a query. I was sending a dig query with +dnssec flag but not sure if
that caused the issue. It works fine now with the same query.

Let me know if you need more information. Any help would be appreciated.

Below is the coredump:

(gdb) bt
#0  0x00007ff892802e97 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007ff892804801 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x000055864102e534 in assertion_failed (file=<optimized out>,
line=<optimized out>, type=isc_assertiontype_require,
    cond=0x7ff894582e28 "(((name)->attributes & 0x00000001) != 0 ? 1 :
0)") at main.c:247
#3  0x00007ff89485bdaa in isc_assertion_failed
(file=file at entry=0x7ff894582d64 "compress.c", line=line at entry=391,
type=type at entry=isc_assertiontype_require,
    cond=cond at entry=0x7ff894582e28 "(((name)->attributes & 0x00000001)
!= 0 ? 1 : 0)") at assertions.c:48
#4  0x00007ff89441842d in dns_compress_add
(cctx=cctx at entry=0x7ff88a59ab10, name=name at entry=0x7ff88a596f90,
prefix=<optimized out>, offset=<optimized out>) at compress.c:391
#5  0x00007ff894467eb5 in dns_name_towire2
(name=name at entry=0x7ff88a596f90, cctx=cctx at entry=0x7ff88a59ab10,
target=target at entry=0x7ff88a59aa50,
comp_offsetp=comp_offsetp at entry=0x0)
    at name.c:2025
#6  0x00007ff894468267 in dns_name_towire
(name=name at entry=0x7ff88a596f90, cctx=cctx at entry=0x7ff88a59ab10,
target=target at entry=0x7ff88a59aa50) at name.c:1915
#7  0x00007ff8944bcab5 in towire_nsec (target=<optimized out>,
cctx=<optimized out>, rdata=<optimized out>) at
rdata/generic/nsec_47.c:114
#8  dns_rdata_towire (rdata=<optimized out>,
cctx=cctx at entry=0x7ff88a59ab10, target=target at entry=0x7ff88a59aa50) at
rdata.c:863
#9  0x00007ff8944d20ee in towiresorted
(rdataset=rdataset at entry=0x7ff87c046c50,
owner_name=owner_name at entry=0x7ff87c0462d0, cctx=<optimized out>,
target=<optimized out>,
    order=<optimized out>, order_arg=order_arg at entry=0x7ff87c0447d8,
partial=<optimized out>, options=<optimized out>, countp=<optimized
out>, client_info=<optimized out>, state=0x0)
    at rdataset.c:688
#10 0x00007ff8944d3208 in dns_rdataset_towiresorted
(rdataset=rdataset at entry=0x7ff87c046c50,
owner_name=owner_name at entry=0x7ff87c0462d0, cctx=<optimized out>,
target=<optimized out>,
    order=<optimized out>, order_arg=order_arg at entry=0x7ff87c0447d8,
options=0, countp=0x7ff88a59a9e4, client_info=0x7ff87c044820) at
rdataset.c:751
#11 0x00007ff89445867f in dns_message_rendersection
(msg=0x7ff87c044600, sectionid=sectionid at entry=1,
options=options at entry=2) at message.c:2209
#12 0x00007ff89418ac8f in ns_client_send
(client=client at entry=0x7ff87c0439f8) at client.c:600
#13 0x00007ff894197687 in query_send (client=0x7ff87c0439f8) at query.c:587
#14 0x00007ff8941a0108 in ns_query_done
(qctx=qctx at entry=0x7ff88a59d440) at query.c:12070
#15 0x00007ff8941a94d3 in query_respond
(qctx=qctx at entry=0x7ff88a59d440) at query.c:8432
#16 0x00007ff8941a9801 in query_prepresponse
(qctx=qctx at entry=0x7ff88a59d440) at query.c:11019
#17 0x00007ff8941a48fa in query_gotanswer
(qctx=qctx at entry=0x7ff88a59d440, result=result at entry=ISC_R_SUCCESS) at
query.c:7829
#18 0x00007ff8941a6166 in query_lookup
(qctx=qctx at entry=0x7ff88a59d440) at query.c:6205
#19 0x00007ff8941a7a0c in ns__query_start
(qctx=qctx at entry=0x7ff88a59d440) at query.c:5772
#20 0x00007ff8941a8243 in query_setup
(client=client at entry=0x7ff87c0439f8, qtype=<optimized out>) at
query.c:5451
#21 0x00007ff8941ab212 in ns_query_start
(client=client at entry=0x7ff87c0439f8,
handle=handle at entry=0x7ff87c043890) at query.c:12533
#22 0x00007ff89418e3fe in ns__client_request (handle=<optimized out>,
eresult=<optimized out>, region=<optimized out>, arg=<optimized out>)
at client.c:2259
#23 0x00007ff8948477bc in isc__nm_async_readcb
(worker=worker at entry=0x0, ev0=ev0 at entry=0x7ff88a59e550) at
netmgr/netmgr.c:2907
#24 0x00007ff894847948 in isc__nm_readcb
(sock=sock at entry=0x7ff8840aca20, uvreq=<optimized out>,
eresult=eresult at entry=ISC_R_SUCCESS) at netmgr/netmgr.c:2880
#25 0x00007ff8948571b1 in udp_recv_cb (handle=<optimized out>,
nrecv=84, buf=0x7ff88a59e6b0, addr=0x7ff88a59e800, flags=8) at
netmgr/udp.c:651
#26 0x00007ff89323dc43 in uv__udp_recvmmsg
(handle=handle at entry=0x7ff8840ad040, buf=buf at entry=0x7ff88a59ef90) at
src/unix/udp.c:195
#27 0x00007ff89323e92b in uv__udp_recvmsg (handle=0x7ff8840ad040) at
src/unix/udp.c:238
#28 uv__udp_io (loop=<optimized out>, w=0x7ff8840ad0c0, revents=1) at
src/unix/udp.c:142
#29 0x00007ff89324163b in uv__io_poll (loop=loop at entry=0x55867046c9a8,
timeout=<optimized out>) at src/unix/linux.c:1528
#30 0x00007ff89322f18b in uv_run (loop=loop at entry=0x55867046c9a8,
mode=mode at entry=UV_RUN_DEFAULT) at src/unix/core.c:448
#31 0x00007ff894849d3a in nm_thread (worker0=0x55867046c998) at
netmgr/netmgr.c:704
#32 0x00007ff8948826c5 in isc__trampoline_run (arg=0x55867048e230) at
trampoline.c:190
#33 0x00007ff892bbc6db in start_thread () from
/lib/x86_64-linux-gnu/libpthread.so.0
#34 0x00007ff8928e588f in clone () from /lib/x86_64-linux-gnu/libc.so.6
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20250227/0b4f4bd8/attachment.htm>