Hi Jeroen,
Attached is the zone I used. Did you add the record for a.bar ?
Ex:
a.bar 300 IN NS ns.somewhere.net.
Chris
________________________________
From: Jeroen Koekkoek <jer...@nlnetlabs.nl>
Sent: Tuesday, October 8, 2024 5:33 AM
To: Chris LaVallee <claval...@edg.io>; nsd-users@lists.nlnetlabs.nl
<nsd-users@lists.nlnetlabs.nl>
Subject: Re: [nsd-users] SIGSEGV in rbtree_find_less_equal
Hi Chris,
I'm having trouble trying to reproduce the issue locally.
Like you I configure two zones.
zone:
name: example.com.
zonefile: example.com.zone.signed
zone:
name: bar.example.com.
zonefile: bar.example.com.zone
The file bar.example.com.zone does not exist. After touching and
reloading the signed zone, no segfault occurs. I've tried with and
without the "--disable-radix-tree" configure option (as the error
occurs in the rbtree). I've also tried with example.com. being an NSEC
and NSEC3 zone.
Can you provide some more details?
Best regards,
Jeroen
On Wed, 2024-10-02 at 14:57 +0000, Chris LaVallee via nsd-users wrote:
>
> Hi,
>
>
> I found a reproducible seg fault with a DNSSEC signed zone and
> overlapping config. I'm running NSD 4.10.1. Here's how to reproduce.
>
>
> 2 zones in nsd.conf:
>
>
> zone:
> name: "foo.com."
> zonefile: "/zones/foo.com.zone.signed"
>
>
> zone:
> name: "bar.foo.com."
> zonefile: "/zones/bar.foo.com.zone"
>
>
>
>
> Zone files:
>
>
> foo.com.zone.signed is DNSSEC signed with a record for a.bar (A
> record or anything)
> bar.foo.com.zone doesn't exist (but it's in nsd.conf shown above)
>
>
>
>
> Steps:
> 1) Startup NSD
> 2) touch foo.com.zone.signed
> 3) reload NSD
>
>
>
>
> nsd.log will say:
> [2024-10-02 07:19:58.691] nsd[962739]: info: control cmd: reload
> [2024-10-02 07:19:58.845] nsd[962752]: error: handle_reload_cmd:
> reload closed cmd channel
> [2024-10-02 07:19:58.845] nsd[962752]: warning: Reload process 962740
> failed, continuing with old database
>
>
> core dump says SIGSEGV in rbtree_find_less_equal
>
>
>
>
> Chris LaVallee
> Edgio (formally EdgeCast Networks)
>
>
>
>
> _______________________________________________
> nsd-users mailing list
> nsd-users@lists.nlnetlabs.nl
> https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users
; File written on Wed Oct 2 07:19:52 2024
; dnssec_signzone version 9.18.28-0ubuntu0.22.04.1-Ubuntu
foo.com. 86400 IN SOA ns.somewhere.net.
hostmaster.somecompany.com. (
2065715743 ; serial
10800 ; refresh (3 hours)
1080 ; retry (18 minutes)
2419200 ; expire (4 weeks)
900 ; minimum (15 minutes)
)
86400 RRSIG SOA 7 2 86400 (
20241101131952 20241002131952 3683
foo.com.
Hd+x5KzD+1DHa9QjaCHyMXTh5ugbKJsmvgY5
hMAVa9Txky3QR/3Ss6FoDej6SXCy/1JGYQrH
uxedFYMhwt/HWE3Czv3GRKXk7BKSoh/2mjRc
tN9UObrxzjyckKcV26uLFJclm4sIUtQbyvas
1hptml4wlu1HV3NyB9IG69T8oxX1/xVVCKGq
sXIpe/M/Tqoj95FbhabzaCNT1Z6DLtEtYDQo
Rl8CreFeuxOvw4LYn0PWi+Z6otb/lm0uOjn8
ua54HvpujqFH2u+VWOw4HSdQl9egzA0rkddL
hnwd6Etep6sRF2kalkTPhXOuLeagWkKNI1BY
BBkaHEVEY32unZYSKQ== )
86400 DNSKEY 256 3 7 (
AwEAAcfLnq88UJgOIHhwFqbu1oPLXakh+kEA
97hMfm1bpVZV8ZkGFck+tJsS/5sHjnKNchJd
0+HGooSJaCVvWysYTM+W8K0pNg+ZYPmk0UMU
P0aYKf0/t40hk7T08kkPW630eMqwgBcbK85+
xpJGpFIj4yFfryNUi0rX4viBf8xNDtQUYjnU
C3BTtH92MspAGCXPff+AuWFG7ISVqq88eTAD
USNLZ7aZuv0zXWPE0ylKZz1TzQ5kcUOOhqkD
s8oymhwboYxMG7EIr0iN6cul4C0bLyJdiJ0i
Xx2XAiPwa2Ugj5TKe8IFRU3lWty+2zp5HG+y
Fgkqw1i3dER08h0MR29ZfIs=
) ; ZSK; alg = NSEC3RSASHA1 ; key id =
3683
86400 DNSKEY 257 3 7 (
AwEAAYerZrleTh6IFQ2lWNEqY4bzw2iIFmSK
Ojoiyl6Cwda1gnvRYVOxo6BTMC6v/OFfY1fF
v79tFI71KQvZnW5rnmvtuyEW86N3us2l8bwV
xr5TSWlintZgRF7Ot0DOPAovtq3Pwr8V4WNC
pS+EoJ/qtqepjRJLQ879ZhQcjsLfGdhrqAvA
m92qvlyGPXUKLboU0y1NcXPqfCN/KXBUOpLT
YNDKthXcClp6Fw330leeL74uAkxNWrmdldql
x9pFn51F6JAL5RQUacyNYspfKzCFoUOFPLZt
/LkfagVFTV5sF3VWk0a2wtAlSh4u/ttZp8Xm
TW704iAkGN9/fhnXG/EvVd6EtGr0iOTnIyLa
VaQ6uvapW3aiskSXioeV7fvrSmxJmlcV0Gyy
eB9wGufCqOfutC3CO7ZmYbE3NahmqaaAnOvZ
yW4PNIWGN9dLtvcGslek/Me2D4NdWCMulzua
DCaBaL6WSuBD3QMwOd19X9Hkexi6Y/InRhbf
6XXZWCRmacYSWhKOhFxuugCoRw8bqDNGq0Po
A9pyqv9hBO3LdB5sUw17rE2AnFM6kPD92Cb0
m4vzQB+grw0oVvd33pZhbSw0Oz1uzO9E2wt6
FLTHu8qxwByOt8O5JztDbK7LTfPBQdlF/wdY
do9WLLqYYy1usKwUlX5FSe5CdgDLnpCc3D9W
WufJ
) ; KSK; alg = NSEC3RSASHA1 ; key id =
12468
86400 RRSIG DNSKEY 7 2 86400 (
20241101131952 20241002131952 3683
foo.com.
f6RRk2i16IQmnirFuSd1AdPW6duEcfAQ0bdM
828gZG2z0EjWBi+1i+k6qRb+EA1gb2DDhfbS
xpWwo6Bm18HUrMEMuKO95zKVGAY6KnRwSgGl
+MJN8Bis9N8m5oN1IELhFlV2W3TW/uRFyr73
Tu1VBuW04OaHdxVRmKQDhXqSxNFnfNo+Z9o/
odIAGrrUN1CtlpTMsqkNWsKSdA4hSxT/CT0t
CXdGJYcbHFWIwfIUaAe9jUfT9SblHvT7Sg/A
0bFeNi2KtRNbaO85hFkT25A34f9VWygvUCQ4
TF/tnQ9emYdOxF5QdlLl9HcagUunisfUmq1T
J1v1KeHDk6Xot03wcw== )
86400 RRSIG DNSKEY 7 2 86400 (
20241101131952 20241002131952 12468
foo.com.
UVSFA1kPoK6E7V7kSSY1iov8b6UKx1SkrBlD
VTVqM7c+ZKpz3Kt4UI9pPbvgy9UDEXMnKdug
wsY+sUtUxvE/mlzdzxhtl567GiS3MAuVT5wo
OYIIPvOBuWU0pVVzBkjCqOVBr68FhpiHb5/4
F8X2Czveimc/Gizfu3DfPIcciARaJmg7VZ5g
aEUjqpDGr5uBM78Eqt/rXcMnMf8ts/gY5wE4
tAezB5GSE/aa1LLbP7MFtuPUILnFc+1Zx+4P
1GO+Z36IpAyBK4BuUtl186gUHIuM1FFjR9oi
SjwmjE2SBqKNzuy37p+/LZ4odT17wrTCRt+i
/QYvHibaE1nfzQZ6iUfRgNO7DB2pIg+AqVlB
Brps8lM/hKW8cJ4rj8VmHI1Z2HQd9HW7ROby
+e13K91nzVTDbJneIpW2F60PJM9tbYsUil6G
VEMNQmCFAkEGlfvgnIDkycBy5UsGJibRkDdh
m0V3NfICoeWI5Cs7yWcNd5ND0lj+hA9focmi
Xmq7Yo/IO5hhPpTha751lREdHfVFVk2kdUUz
iKI3RYEPIWuS3gSE3L0y10ORIbnMmtaHYvPX
BA3ZXqf5j/5k0FrN9Brsy6xRSHEaN9OGJZtG
ONmMLTEatlbHx/Fx7mqwkcwOTcqV2ojQ6Uf0
i1yQEEumZHAM9ra6qJQhLlaeN+hisW8I69E= )
0 NSEC3PARAM 1 0 0 AA61D5A398769C09
0 RRSIG NSEC3PARAM 7 2 0 (
20241101131952 20241002131952 3683
foo.com.
jlqg1F0UbaVoP5MadStHUSywHWnBxlCH0pQF
2EGZ44bppoK7ilGg+3Q0xVQpupEn0+BW/E10
kh56QZQk/PxhgJuhCT1WaoMFzFFxA0b4w1w0
gKizejxmOovE7Fim321NNbmbdcmPCb825pt0
kNf9Rz9mq1GHz65ZJQk8e0S/oqPaOi2ojcs9
9gMCI4CYGBgmd7Euq2P2llXT4O4I0WGMd0P8
3fRTBLAnencO1hirnyDUH9TdAzmSVGyxJA8Y
A6UXipdCB5AXNtvgYk2hlPULSJdTLsev1sIi
kNxC3KOqcb/VKPrfNY7eK5gbFUzRWm1lciuM
qUITrnBietyB6Crdag== )
a.bar.foo.com. 300 IN NS ns.somewhere.net.
JJQE426PPT753J9OM8BOT2ICLQ3TESVL.foo.com. 900 IN NSEC3 1 1 0 AA61D5A398769C09 (
JJQE426PPT753J9OM8BOT2ICLQ3TESVL
SOA RRSIG DNSKEY NSEC3PARAM )
900 RRSIG NSEC3 7 3 900 (
20241101131952 20241002131952 3683
foo.com.
KHMkDGRFDHOP/3p/tJ++OvyNuPX52CpuqTOC
k8ZaHaBu0h3JKmjRhaC1tjq713uhDNCgkFb8
SCxnIcdPKzl6zvrSPlOFFB7FlF+4o0UvAKR+
rJosR9pmQgLhPbmI/ORnw/BMaLU08/RZ4ixD
NDj9F2hzuMRZXx3158JBzohH7SsWGXe5lGho
OsWuawjKH1YZoQejYr61zwZw1QVCxGwZCnWt
38tyFhe0AkUY0eEfUuB7H92UZmcKatgJqDx0
K03809sFR9oghGwN99b69+FA5yDihvN6T9nm
rwAWwX3sDAo13dJ4MYjJeJu5MiFDpNGHazSh
O+SQZulPsFecfh+lPw== )
_______________________________________________
nsd-users mailing list
nsd-users@lists.nlnetlabs.nl
https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users
