<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Hello Again,</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">I could have made my question a bit more clear as I try to understand the details behind what P4 addresses.<br></div><div><br></div><div>Perhaps I am having an internal battle between logic vs. interpretation around "or". Let me explain.<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">I'm wondering if a named process affected by <span>CVE-2012-5166 has symptoms of
both (1) "</span><span>not respond to queries" and (2) "not respond to control commands" at the same time, all the time. If that is the case, then P4 will not address my issue as I am only seeing (1) and so there may be another bug affecting BIND stability which I would like to report.<br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>Thank you.<br></span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div
dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Fr34k <freaknetboy@yahoo.com><br> <b><span style="font-weight: bold;">To:</span></b> Bindlist <bind-users@isc.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, October 25, 2012 9:51 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: BIND 9.9.1-P4 is now available<br> </font> </div> <br><meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv1380002391"><div><div style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div>Hello,</div><div><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">We
are finding several of our recursive BIND 9.9.1-P3 servers (on Solaris
10 OS) hung and I want to be able to qualify the symptoms in order to
convince others that P4 (or 9.9.2?) will (or will not) address this.<br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div>Let
me define what "hung" means in our experience: We find that named is
running but will not respond to queries, "rndc status" will respond with
output but that output shows that named is not processing any queries
(see below), other rndc commands appear to work
as well (e.g., "rndc dumpdb").<br><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">From what I understand, P4 offers this known bug fix:</div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">* A deliberately constructed combination of records could cause named<br> to hang while populating the additional section of a response.<br> [RT #31090] -- <span>CVE-2012-5166: Specially crafted DNS data can cause a lockup
in named</span></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">Additional
details are mentioned in
https://kb.isc.org/article/AA-00801/74/CVE-2012-5166%3A-Specially-crafted-DNS-data-can-cause-a-lockup-in-named.html:
"A nameserver that has become locked-up due to the problem reported in
this advisory will not respond to queries or control commands."</div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">So,
our hang issue qualifies for the "...will not respond to queries";
however, it seems that our issue does *not* qualify for the "... will
not respond to... control commands" piece if the responses from "rndc"
are considered control command.</div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">Thoughts?</div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">Thank you.<br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times,
serif;background-color:transparent;font-style:normal;">
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">$ rndc status</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">version: 9.9.1-P3
(version.bind/txt/ch disabled)</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">CPUs found: 2</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">worker threads: 2</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">UDP listeners per interface: 2</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">number of zones: 36</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">debug level: 0</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">xfers running: 0</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">xfers deferred: 0</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">soa queries in progress: 0</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">query logging is OFF</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">recursive clients: 0/3900/4000</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">tcp clients: 0/100</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">server is up and running</span></div>
</div><div style="color:rgb(31, 73, 125);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;"><br></div><div style="color:rgb(31, 73, 125);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">$ time host <a rel="nofollow" target="_blank" href="http://www.google.com/">www.google.com</a> 127.0.0.1</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">;; connection timed out; no
servers could be reached</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;"> </span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">real 0m10.035s</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">user 0m0.017s</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">sys
0m0.017s</span></div>
</div><div style="color:rgb(0, 0, 0);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;">
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">$ time host localhost 127.0.0.1</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">;; connection timed out; no
servers could be reached</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;"> </span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">real 0m10.034s</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">user 0m0.017s</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">sys
0m0.017s</span></div><div style="color:rgb(31, 73, 125);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;" class="yiv1380002391MsoNormal"><br></div></div><div style="color:rgb(31, 73, 125);font-size:16px;font-family:times new roman, new york, times, serif;background-color:transparent;font-style:normal;" class="yiv1380002391MsoNormal">
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">$ truss -p 17657</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">/4:
lwp_park(0xFE9AFD48, 0)
(sleeping...)</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">/3:
lwp_park(0x00000000, 0) (sleeping...)</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">/1:
sigtimedwait(0xFFBFFBE8, 0xFFBFFB68, 0x00000000) (sleeping...)</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">/2:
lwp_park(0x00000000, 0)
(sleeping...)</span></div>
<div class="yiv1380002391MsoNormal"><span style="color:#1F497D;">/5:
ioctl(8, DP_POLL, 0xFE98FF80) (sleeping...)</span></div>
</div></div></div></div><meta http-equiv="x-dns-prefetch-control" content="on"><br>_______________________________________________<br>Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br><br>bind-users mailing list<br><a ymailto="mailto:bind-users@lists.isc.org" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br><br> </div> </div> </blockquote></div> </div></body></html>