Package: opendnssec-signer
Version: 1:1.3.9-5
Severity: normal
Tags: upstream

Dear Maintainer,

There's a condition that leads to a segfault of ods-signerd.

If you set up a NotifyCommand in the form of:
<NotifyCommand>/usr/sbin/rndc reload %zone</NotifyCommand>
and you add a new zone to zonelist.xml but you have not added the zone
to bind9, then the NotifyCommand returns with an error (1). If the zone
in question hasn't been previously added in the past (there are no entries yet 
for it in signconf),
then ods-signerd segfaults.

May  6 16:47:20 xxxx kernel: [345243.122129] ods-signerd[15978]: segfault at 
5368e00d ip 00007ff029561cba sp 00007ff0266eb080 error 4 in 
libc-2.13.so[7ff02951c000+182000]

at the /var/lib/opendnssec/unsigned directory one finds only the zone.name.axfr
file of the new zone.

while the segfault is actually caused by an administrator error (missing
config parts in bind9 that leads to a rndc error) it would be nice if
ods-signerd handled it a bit better.

-- System Information:
Debian Release: 7.5
  APT prefers stable
  APT policy: (800, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=el_GR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages opendnssec-signer depends on:
ii  libc6              2.13-38+deb7u1
ii  libldns1           1.6.13-1
ii  libxml2            2.8.0+dfsg1-7+nmu3
ii  opendnssec-common  1:1.3.9-5

Versions of packages opendnssec-signer recommends:
ii  opendnssec-auditor   1:1.3.9-5
ii  opendnssec-enforcer  1:1.3.9-5

Versions of packages opendnssec-signer suggests:
pn  opendnssec  <none>
ii  softhsm     1.3.3-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to