BIND 10 #2504: Problem in inmem NSEC denial of existence handling

[BIND 10 Development]

#2504: Problem in inmem NSEC denial of existence handling
-------------------------------------+-------------------------------------
            Reporter:  jelte         |                        Owner:
                Type:  defect        |                       Status:  new
            Priority:  medium        |                    Milestone:  New
           Component:  data source   |  Tasks
           Sensitive:  0             |                     Keywords:
         Sub-Project:  DNS           |              Defect Severity:  N/A
Estimated Difficulty:  0             |  Feature Depending on Ticket:
         Total Hours:  0             |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
 Similar to the problem I just reported in #2503, the NSEC case is even
 worse, instead of returning SERFVAIL, it dies on an assert:

 {{{
 lt-b10-auth: zone_finder.cc:312:
 isc::datasrc::memory::{anonymous}::ConstNodeRRset
 isc::datasrc::memory::{anonymous}::getClosestNSEC(const
 isc::datasrc::memory::ZoneData&, isc::datasrc::memory::ZoneChain&,
 isc::datasrc::ZoneFinder::FindOptions): Assertion `false' failed.
 }}}

 in this case the zone I used was:
 {{{

 }}}ok.ok.ok.ok.dnssec.tjeb.nl.  600     IN      SOA     ns2.tjeb.nl.
 tjeb.tjeb.nl. 2005080901 28800 7200 604800 18000
 ok.ok.ok.ok.dnssec.tjeb.nl.     600     IN      A       178.18.82.80
 ok.ok.ok.ok.dnssec.tjeb.nl.     3600    IN      DNSKEY  256 3 5
 AwEAAag7J/qxkLI1keftNSKe0fqa2mU1GaeZGQoOSgVZvJAMh6LK9F1NMmWP2MeaeJvfTkmZs2UggGnFjkb7QQygrZnfxxCOVu5fG8x3Na5Z7jAdMgVfuJ1FTmsi2Bj4W/+b3fuvv/eVGqlEsFdth+sGA+BKH9mdBwmt+aXJf9gohXpx
 ;{id = 34791 (zsk), size = 1024b}
 ok.ok.ok.ok.dnssec.tjeb.nl.     600     IN      NS      ns2.tjeb.nl.
 ok.ok.ok.ok.dnssec.tjeb.nl.     18000   IN      NSEC
 ok.ok.ok.ok.dnssec.tjeb.nl. A NS SOA RRSIG NSEC DNSKEY
 ok.ok.ok.ok.dnssec.tjeb.nl.     600     IN      RRSIG   SOA 5 7 600
 20200101000000 20120627091929 34791 ok.ok.ok.ok.dnssec.tjeb.nl.
 Z+LjS0NtrUkOje1PZht8a3TylxEKabDltJSye3NO/n6tE9268S5EqQ6r0nZ0hO78c9r4lYxMlvnfyTAj/5rR/zdApCS0EnpQenVyvwagIAVdIcNqpZxr7i/tFmOvxyQK3NRhWqH83WhNwqRE1E4thUfNovtyscSLR+TOhuEBKlg=
 ok.ok.ok.ok.dnssec.tjeb.nl.     600     IN      RRSIG   A 5 7 600
 20200101000000 20120627091929 34791 ok.ok.ok.ok.dnssec.tjeb.nl.
 oYbwX46pDyaTNIeZByyLnUVc4RNgFmGeUuJ4sn0aIqrX6UqfNJwJpZiCspcyBRBNIZye6ypVNFD9RUHesrELHjFOAustg86GFws1jeEoDbi4W6wmeNQqiUfnyaqME3rHD9WE7I99Nqiyp8ZEBseem/SIOCsEXxPLrhoAL+Fa1+s=
 ok.ok.ok.ok.dnssec.tjeb.nl.     600     IN      RRSIG   NS 5 7 600
 20200101000000 20120627091929 34791 ok.ok.ok.ok.dnssec.tjeb.nl.
 KBRov1y79yN75feRo2Bv5B+UpmDAyEr/kTgWgL9dYtkuQXvT7Y1Lg5jhcFmyrAkpYud70i5Un2DEUtmnI2oUR7XUh1RDnMQZRgKkaDXNXj5D379hLxpD2jtN+A311ShReaM4laj44UiDzu0pjGtrDT7BY1c4Qb5XI0RLyI0VKSs=
 ok.ok.ok.ok.dnssec.tjeb.nl.     3600    IN      RRSIG   DNSKEY 5 7 3600
 20200101000000 20120627091929 34791 ok.ok.ok.ok.dnssec.tjeb.nl.
 NriwgSl8QskWiQMlIPzn3WvWQwfQDy8pnJ4U2qlOjWFeJ4wH7DS/P5BDh9+JXjKamh5Bdy2umSf1uY1BeodSP+Ga4yKxNb1sigGbToYGDsbLP1NfPPq6uijl5nRhqBQAAzjCmyU9sm6GUr/CyOpSTTxtFjosXZQ1t1GFya6Tgho=
 ok.ok.ok.ok.dnssec.tjeb.nl.     18000   IN      RRSIG   NSEC 5 7 18000
 20200101000000 20120627091929 34791 ok.ok.ok.ok.dnssec.tjeb.nl.
 ijT2etFxkmNLMdbugWsIrnPuJqxdPPO/ilWUb0ZapcuwtqV4mTZCalUlb3KSpcczHPfyClF7WvMEKdluLrX55TPKEBxx1AIdOduhwSTxCxgZpOp4LFIR3rg5hTH9bupEUvbFPWU8RX5oX0GLE0V/EpfNYpHOtvvG3rnegwynML4=
 }}}

-- 
Ticket URL: <http://bind10.isc.org/ticket/2504>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development