BIND from brew on OSX - Crash

[James L. Brown]

Have you tried bind in the latest macOS beta versions?

James.

> On 24 Jul 2025, at 5:00 pm, stuart--- via bind-users <bind-users at lists.isc.org> wrote:
> 
> Hi,
> 
> This is mostly just me wondering if this is just a "me" issue or whether this is endemic of BIND on OSX.
> 
> I use BIND as distributed by brew.sh on OSX (14.7.6, M2 Pro) for local testing of various things and ran into an issue last week. When I configured BIND to listen on an alternate port (1053 or 2053 or ..., you get the idea), after a few queries, it would cause a panic and thus a reboot of my computer.
> 
> This is using the 9.20.11_1 release from brew.
> 
> Simple configuration below.
> 
> Starting in the foreground with this:
> 
>  /opt/homebrew/opt/bind/sbin/named -f -g -c /Users/sbrowne/tmp/ihelp-3115/primary/named.conf
> 
> I can issue a single dig, but a second panics the system and reboots:
> 
>  dig -p 1053 @127.0.0.1 soa example.com.
> 
> If I leave it on port 53 (started under sudo) it doesn't crash, but my intention is to have multiple instances running (on different ports) to test various replication things.
> 
> The first line of the OSX crash report is:
> 
> panic(cpu 8 caller 0xfffffe0025883038): Mutex 0xfffffe24cc3f1c00 is unexpectedly owned by thread 0xfffffe1ffd3c4fd0 @lock_mtx.c:175
> 
> The rest can be provided if it is believed to be of interest.
> 
> Stuart
> 
> --- named.conf --
> options {
>  directory "/Users/sbrowne/tmp/ihelp-3115/primary";
>  listen-on port 1053 { localhost; };
>  listen-on-v6 { none; };
>  server-id "primary";
> };
> 
> view primary {
>  allow-new-zones true;
>  zone "example.com" {
>    file "example.com";
>    type primary;
>  };
> };
> --- END named.conf ---
> 
> --- named -V output ---
> BIND 9.20.11 (Stable Release) <id:c6b2e31>
> running on Darwin arm64 23.6.0 Darwin Kernel Version 23.6.0: Thu Apr 24 20:29:29 PDT 2025; root:xnu-10063.141.1.705.2~1/RELEASE_ARM64_T6020
> built by make with  '--prefix=/opt/homebrew/Cellar/bind/9.20.11_1' '--sysconfdir=/opt/homebrew/etc/bind' '--localstatedir=/opt/homebrew/var' '--with-json-c' '--with-libidn2=/opt/homebrew/opt/libidn2' '--with-openssl=/opt/homebrew/opt/openssl at 3' '--without-lmdb' 'CC=clang' 'CFLAGS=-DLIBXML_HAS_DEPRECATED_MEMORY_ALLOCATION_FUNCTIONS' 'PKG_CONFIG_PATH=/opt/homebrew/opt/pkgconf/lib/pkgconfig:/opt/homebrew/opt/jemalloc/lib/pkgconfig:/opt/homebrew/opt/json-c/lib/pkgconfig:/opt/homebrew/opt/libidn2/lib/pkgconfig:/opt/homebrew/opt/libnghttp2/lib/pkgconfig:/opt/homebrew/opt/libuv/lib/pkgconfig:/opt/homebrew/opt/openssl at 3/lib/pkgconfig:/opt/homebrew/opt/readline/lib/pkgconfig:/opt/homebrew/opt/userspace-rcu/lib/pkgconfig' 'PKG_CONFIG_LIBDIR=/usr/lib/pkgconfig:/opt/homebrew/Library/Homebrew/os/mac/pkgconfig/14'
> compiled by CLANG Apple LLVM 16.0.0 (clang-1600.0.26.6)
> compiled with OpenSSL version: OpenSSL 3.5.1 1 Jul 2025
> linked to OpenSSL version: OpenSSL 3.5.1 1 Jul 2025
> compiled with libuv version: 1.51.0
> linked to libuv version: 1.51.0
> compiled with liburcu version: 0.15.3
> compiled with jemalloc version: 5.3.0
> compiled with libnghttp2 version: 1.66.0
> linked to libnghttp2 version: 1.66.0
> compiled with libxml2 version: 2.9.13
> linked to libxml2 version: 20913
> compiled with json-c version: 0.18
> linked to json-c version: 0.18
> compiled with zlib version: 1.2.12
> linked to zlib version: 1.2.12
> threads support is enabled
> DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
> DS algorithms: SHA-1 SHA-256 SHA-384
> HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
> TKEY mode 2 support (Diffie-Hellman): no
> TKEY mode 3 support (GSS-API): yes
> 
> default paths:
>  named configuration:  /opt/homebrew/etc/bind/named.conf
>  rndc configuration:   /opt/homebrew/etc/bind/rndc.conf
>  nsupdate session key: /opt/homebrew/var/run/named/session.key
>  named PID file:       /opt/homebrew/var/run/named/named.pid
> --- END named -V output ---
> 
> -- 
> Visit https://protect.checkpoint.com/v2/r04/___https://lists.isc.org/mailman/listinfo/bind-users___.Y3A0YTpib3Jkb2ludGVybmF0aW9uYWw6YzpvOmQyNzk4MjA1NjY4MTdmZDk2YjFiNzc1YjY3NGVjYjMzOjc6MDA2NjpiN2Y4NzZiMjI2ZDExYzcxODg4ZDYyMGZhYWY5MGVmMzNhNWU2Y2VhMWZiMDZlZDkxNjdkZWIwNDk2ZTRlM2RlOnA6VDpO to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://protect.checkpoint.com/v2/r04/___https://www.isc.org/contact/___.Y3A0YTpib3Jkb2ludGVybmF0aW9uYWw6YzpvOmQyNzk4MjA1NjY4MTdmZDk2YjFiNzc1YjY3NGVjYjMzOjc6ZWJhMjo0MWE1M2I0MzIyYjMzNGQ1YjY2OTU5NmQ3N2NjMzVjNDUzMzA0ZDQ0ZmEwNGM4NjU2NzhiNDQ3NTljMDA4NDQ4OnA6VDpO for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://protect.checkpoint.com/v2/r04/___https://lists.isc.org/mailman/listinfo/bind-users___.Y3A0YTpib3Jkb2ludGVybmF0aW9uYWw6YzpvOmQyNzk4MjA1NjY4MTdmZDk2YjFiNzc1YjY3NGVjYjMzOjc6MmRkZTphYjZkNDVhNWMyN2NmYmY5NjBlMDEzODQ1NTRlMDNkNTEwNjg2OGMyNjAzOWMxYWM3MTIyYWI5YTI3MjIyYjM2OnA6VDpO