<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi everyone.<br>
<br>
I'm unsure of the email I should be writing to, but I chose this
one;<br>
<br>
<br>
I've just found a segfault/core dump bug in dig.<br>
<br>
Running a dig command with +nssearch and +tcp will cause dig to
coredump..<br>
<br>
Example:<br>
--snip--<br>
<br>
$ dig +time=3 +nssearch +tcp google.com<br>
socket.c:2535: REQUIRE(socketp != ((void *)0) && *socketp ==
((void *)0)) failed, back trace<br>
#0 0xb3f77b in ??<br>
#1 0xb3f6c4 in ??<br>
#2 0xb72062 in ??<br>
#3 0xd1d3ef in ??<br>
#4 0xd1d7c3 in ??<br>
#5 0xb629ac in ??<br>
#6 0x972d4c in ??<br>
#7 0x55bbae in ??<br>
Aborted (core dumped)<br>
<br>
--/snip--<br>
<br>
<br>
It was discovered whilst running "dig +time=3 +nssearch
tynyturi.com", which [sometimes] dumps.<br>
--<br>
SOA v1s1.xundns.com. nsadmin.xundns.com. 50845 3600 600 604800 600
from server 121.10.104.50 in 258 ms.<br>
SOA v1s1.xundns.com. nsadmin.xundns.com. 50845 3600 600 604800 600
from server 59.63.165.131 in 260 ms.<br>
SOA v1s1.xundns.com. nsadmin.xundns.com. 50845 3600 600 604800 600
from server 59.63.181.21 in 261 ms.<br>
SOA v1s1.xundns.com. nsadmin.xundns.com. 50845 3600 600 604800 600
from server 60.174.233.164 in 271 ms.<br>
;; Truncated, retrying in TCP mode.<br>
socket.c:2535: REQUIRE(socketp != ((void *)0) && *socketp ==
((void *)0)) failed, back trace<br>
#0 0x29877b in ??<br>
#1 0x2986c4 in ??<br>
#2 0x2cb062 in ??<br>
#3 0xb8a3ef in ??<br>
#4 0xb8a7c3 in ??<br>
#5 0x2bb9ac in ??<br>
#6 0x828d4c in ??<br>
#7 0x92cbae in ??<br>
Aborted (core dumped)<br>
<br>
--<br>
<br>
<br>
And finally, gdb output:<br>
<br>
<br>
--snip--<br>
Starting program: /usr/bin/dig +time=3 +nssearch +tcp tynyturi.com<br>
[Thread debugging using libthread_db enabled]<br>
Using host libthread_db library
"/lib/i386-linux-gnu/libthread_db.so.1".<br>
[New Thread 0xb7f93b40 (LWP 10758)]<br>
[New Thread 0xb7792b40 (LWP 10759)]<br>
[New Thread 0xb6f91b40 (LWP 10760)]<br>
socket.c:2535: REQUIRE(socketp != ((void *)0) && *socketp ==
((void *)0)) failed, back trace<br>
#0 0x31977b in ??<br>
#1 0x3196c4 in ??<br>
#2 0x34c062 in ??<br>
#3 0x8000d3ef in ??<br>
#4 0x8000d7c3 in ??<br>
#5 0x33c9ac in ??<br>
#6 0x371d4c in ??<br>
#7 0x475bae in ??<br>
<br>
Program received signal SIGABRT, Aborted.<br>
[Switching to Thread 0xb7f93b40 (LWP 10758)]<br>
0x00132416 in __kernel_vsyscall ()<br>
(gdb) backtrace<br>
#0 0x00132416 in __kernel_vsyscall ()<br>
#1 0x003b41df in raise () from /lib/i386-linux-gnu/libc.so.6<br>
#2 0x003b7825 in abort () from /lib/i386-linux-gnu/libc.so.6<br>
#3 0x003196c9 in isc_assertion_failed () from /usr/lib/libisc.so.83<br>
#4 0x0034c062 in isc__socket_create () from /usr/lib/libisc.so.83<br>
#5 0x8000d3ef in ?? ()<br>
#6 0x8000d7c3 in ?? ()<br>
#7 0x0033c9ac in ?? () from /usr/lib/libisc.so.83<br>
#8 0x00371d4c in start_thread () from
/lib/i386-linux-gnu/libpthread.so.0<br>
#9 0x00475bae in clone () from /lib/i386-linux-gnu/libc.so.6<br>
--/snip--<br>
<br>
<br>
Hopefully this information is useful :)<br>
<br>
<br>
<br>
Thanks,<br>
<br>
<div class="moz-signature">-- <br>
<b>Joshua Rogers</b> - <a
href="http://www.internot.info/docs/gpg_pubkey.asc.gpg">gpg
pubkey</a>
<br>
</div>
</body>
</html>