Re: Server crash on receiving query

[Ondřej Surý]

> On 6. 11. 2024, at 16:22, Mike Hodson  wrote:
> 
> Why is the bind project using such a library that seems to be perennially 
> unstable? 

You are absolutely and utterly wrong in your assessment.

Ondřej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Petr Špaček]

On 06. 11. 24 16:22, Mike Hodson wrote:
On Wed, Nov 6, 2024, 06:19 Ondřej Surý > wrote:


Since the libuv bug is in the open, I’ll link it here as well:
https://github.com/libuv/libuv/issues/4594 

I’m in contact with Apple folks, and they have all the information
they need now.


I find it funny that the one bug I ever have had in 'dig' where a +trace 
would fail to complete in a random fashion arbitrarily stopping partway 
through, that I mentioned to this list and is the reason I'm on this 
list in the first place, turned out to be a bug in the version of libuv 
chosen by ubuntu's packagers as stable.


And now libuv is crashing macOS arbitrarily?

Why is the bind project using such a library that seems to be 
perennially unstable?


This is macOS kernel bug, not a libuv bug.

--
Petr Špaček
Internet Systems Consortium
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Mike Hodson]

On Wed, Nov 6, 2024, 06:19 Ondřej Surý  wrote:

> Since the libuv bug is in the open, I’ll link it here as well:
> https://github.com/libuv/libuv/issues/4594
>
> I’m in contact with Apple folks, and they have all the information they
> need now.
>

I find it funny that the one bug I ever have had in 'dig' where a +trace
would fail to complete in a random fashion arbitrarily stopping partway
through, that I mentioned to this list and is the reason I'm on this list
in the first place, turned out to be a bug in the version of libuv chosen
by ubuntu's packagers as stable.

And now libuv is crashing macOS arbitrarily?

Why is the bind project using such a library that seems to be perennially
unstable?

Mike
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Ondřej Surý]

Since the libuv bug is in the open, I’ll link it here as well: 
https://github.com/libuv/libuv/issues/4594

I’m in contact with Apple folks, and they have all the information they need 
now.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 5. 11. 2024, at 11:58, James L. Brown via bind-users 
>  wrote:
> 
> 
>> 
>> On 2 Nov 2024, at 3:14 am, Scott Bradner  wrote:
>> 
>> I have the same problem with bind version 9.20.3 (on both Sonoma & Sequoia
>> 
>> the Sonoma attempt was on a machine that I did  a clean install on Sonoma on 
>> and
>> the only things on the machine were what came with the install, homebrew &
>> brew install bind
>> 
>> instant reboot when trying "dig @127.0.0.1 can.com"
>> 
>> Scott
> 
> A huge relive that I’m not the only one Scott!
> 
> Hopefully someone can help. I’m at a loss. It’s definitely not a hardware 
> issue.
> 
> James.
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[James L. Brown via bind-users]

> On 2 Nov 2024, at 3:14 am, Scott Bradner  wrote:
> 
> I have the same problem with bind version 9.20.3 (on both Sonoma & Sequoia 
> 
> the Sonoma attempt was on a machine that I did  a clean install on Sonoma on 
> and
> the only things on the machine were what came with the install, homebrew &
> brew install bind
> 
> instant reboot when trying "dig @127.0.0.1 can.com"
> 
> Scott

A huge relive that I’m not the only one Scott!

Hopefully someone can help. I’m at a loss. It’s definitely not a hardware issue.

James.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Petr Špaček]

Can we **please** stop discussing (suspected) security issue in this or 
any other public fora?


Apple needs to investigate this and while they do that we should not 
provide exploits or hints how to develop them.


If you are concerned please contact Apple.

Thank you.
Petr Špaček
Internet Systems Consortium


On 04. 11. 24 14:36, Scott Bradner wrote:

tried again after the crash and it now does one query & crashes on the 2nd

sigh

Scott


On Nov 4, 2024, at 9:32 AM, Scott Bradner  wrote:

I un-installed Little Snitch (and am not using the macOS firewall) and it
did change things - now the first quest from another computer caused the reboot

:-(

Scott


On Nov 4, 2024, at 9:24 AM, Anand Buddhdev  wrote:

On 04/11/2024 15:14, Scott Bradner wrote:

Hi Scott,

I doubt that BIND is using any special code to cause the crash. I am aware that 
Apple has introduced some new code around firewalling in macOS 15. In fact, 
before macOS 15.1, there was a serious issue with it, that broke long-running 
SSH connections. Maybe the DNS queries are tickling the firewall-related code 
and causing a kernel panic.

Regards,
Anand


it sure would help when taking the issue to apple to have some
idea what thing in named is causing the (should not be possible) reboot


--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users





--
Petr Špaček
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

thanks for figuring this out 

Scott

> On Nov 4, 2024, at 11:35 AM, Ondřej Surý  wrote:
> 
> I spent last two hours crashing my computer while bisecting the issue,
> and you would not have guessed the commit that causes this:
> 
> commit f063ee276e4a7f6cfccbefa969e8db8df952348b
> Author: Ondřej Surý 
> Date:   2022-05-18 14:10:58 +0200
> 
>Use libuv CFLAGS and LIBS when checking for features
> 
>When autoconf was checking for libuv features, the LIBUV_CFLAGS was not
>added to CFLAGS and LIBUV_LIBS to LIBS which resulted in false
>negatives.
> 
>Use AX_SAVE_FLAGS and AX_RESTORE_FLAGS to temporarily add LIBUV_CFLAGS
>and LIBUV_LIBS to their respective variables.
> 
> diff --git a/configure.ac b/configure.ac
> index 8dc5aca4c4..84108c9820 100644
> --- a/configure.ac
> +++ b/configure.ac
> @@ -557,6 +557,10 @@ AC_MSG_CHECKING([for libuv])
> PKG_CHECK_MODULES([LIBUV], [libuv >= 1.0.0], [],
>   [AC_MSG_ERROR([libuv not found])])
> 
> +AX_SAVE_FLAGS([libuv])
> +CFLAGS="$CFLAGS $LIBUV_CFLAGS"
> +LIBS="$LIBS $LIBUV_LIBS"
> +
> # libuv recvmmsg support
> AC_CHECK_DECLS([UV_UDP_MMSG_FREE, UV_UDP_MMSG_CHUNK], [], [], [[#include 
> ]])
> AC_MSG_CHECKING([whether struct msghdr uses padding for alignment])
> @@ -571,6 +575,8 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([#include 
> ],
> # libuv recverr support
> AC_CHECK_DECLS([UV_UDP_LINUX_RECVERR], [], [], [[#include ]])
> 
> +AX_RESTORE_FLAGS([libuv])
> +
> # [pairwise: --enable-doh --with-libnghttp2=auto, --enable-doh 
> --with-libnghttp2=yes, --disable-doh]
> AC_ARG_ENABLE([doh],
>   [AS_HELP_STRING([--disable-doh], [enable DNS over HTTPS, requires 
> libnghttp2 (default=yes)])],
> 
> The bug has been reported to Apple now as a security issue.
> 
> Ondrej
> --
> Ondřej Surý (He/Him)
> ond...@isc.org
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 4. 11. 2024, at 15:03, Scott Bradner  wrote:
>> 
>> for what its worth - I am NOT framing this as a BIND 9 fault  as in BIND 
>> should
>> change what it is doing 
>> 
>> but BIND 9 is doing something that Apple does not like  and it would
>> help Apple to know what that is
>> 
>> Scott
>> 
>>> On Nov 4, 2024, at 9:59 AM, Ondřej Surý  wrote:
>>> 
>>> Please stop framing this as this is BIND 9 fault. I’ll report this to Apple 
>>> as I can reproduce this on my machine too on unprivileged account.
>>> 
>>> Ondrej
>>> --
>>> Ondřej Surý — ISC (He/Him)
>>> 
>>> My working hours and your working hours may be different. Please do not 
>>> feel obligated to reply outside your normal working hours.
>>> 
 On 4. 11. 2024, at 14:23, Scott Bradner  wrote:
 
 does named so something in buffering previous queries that would
 trigger a different process on the third query?  (seems strange that
 its reboot from another computer is repeatable on the 3rd query for the
 same site?)
 
 note that many queries from another computer are just fine as long as its
 not for the same site
 
 Scott
 
>> On Nov 4, 2024, at 9:16 AM, Ondřej Surý  wrote:
>> 
>> maybe named is using some special system call
> 
> Named is not using anything special. All the stuff is just libraries and 
> standard API.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not 
> feel obligated to reply outside your normal working hours.
> 
>>> On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
>> 
>> maybe named is using some special system call
> 
 
>>> 
>> 
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Ondřej Surý]

I spent last two hours crashing my computer while bisecting the issue,
and you would not have guessed the commit that causes this:

commit f063ee276e4a7f6cfccbefa969e8db8df952348b
Author: Ondřej Surý 
Date:   2022-05-18 14:10:58 +0200

Use libuv CFLAGS and LIBS when checking for features

When autoconf was checking for libuv features, the LIBUV_CFLAGS was not
added to CFLAGS and LIBUV_LIBS to LIBS which resulted in false
negatives.

Use AX_SAVE_FLAGS and AX_RESTORE_FLAGS to temporarily add LIBUV_CFLAGS
and LIBUV_LIBS to their respective variables.

diff --git a/configure.ac b/configure.ac
index 8dc5aca4c4..84108c9820 100644
--- a/configure.ac
+++ b/configure.ac
@@ -557,6 +557,10 @@ AC_MSG_CHECKING([for libuv])
 PKG_CHECK_MODULES([LIBUV], [libuv >= 1.0.0], [],
   [AC_MSG_ERROR([libuv not found])])

+AX_SAVE_FLAGS([libuv])
+CFLAGS="$CFLAGS $LIBUV_CFLAGS"
+LIBS="$LIBS $LIBUV_LIBS"
+
 # libuv recvmmsg support
 AC_CHECK_DECLS([UV_UDP_MMSG_FREE, UV_UDP_MMSG_CHUNK], [], [], [[#include 
]])
 AC_MSG_CHECKING([whether struct msghdr uses padding for alignment])
@@ -571,6 +575,8 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([#include 
],
 # libuv recverr support
 AC_CHECK_DECLS([UV_UDP_LINUX_RECVERR], [], [], [[#include ]])

+AX_RESTORE_FLAGS([libuv])
+
 # [pairwise: --enable-doh --with-libnghttp2=auto, --enable-doh 
--with-libnghttp2=yes, --disable-doh]
 AC_ARG_ENABLE([doh],
   [AS_HELP_STRING([--disable-doh], [enable DNS over HTTPS, requires 
libnghttp2 (default=yes)])],

The bug has been reported to Apple now as a security issue.

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 4. 11. 2024, at 15:03, Scott Bradner  wrote:
> 
> for what its worth - I am NOT framing this as a BIND 9 fault  as in BIND 
> should
> change what it is doing 
> 
> but BIND 9 is doing something that Apple does not like  and it would
> help Apple to know what that is
> 
> Scott
> 
>> On Nov 4, 2024, at 9:59 AM, Ondřej Surý  wrote:
>> 
>> Please stop framing this as this is BIND 9 fault. I’ll report this to Apple 
>> as I can reproduce this on my machine too on unprivileged account.
>> 
>> Ondrej
>> --
>> Ondřej Surý — ISC (He/Him)
>> 
>> My working hours and your working hours may be different. Please do not feel 
>> obligated to reply outside your normal working hours.
>> 
>>> On 4. 11. 2024, at 14:23, Scott Bradner  wrote:
>>> 
>>> does named so something in buffering previous queries that would
>>> trigger a different process on the third query?  (seems strange that
>>> its reboot from another computer is repeatable on the 3rd query for the
>>> same site?)
>>> 
>>> note that many queries from another computer are just fine as long as its
>>> not for the same site
>>> 
>>> Scott
>>> 
> On Nov 4, 2024, at 9:16 AM, Ondřej Surý  wrote:
> 
> maybe named is using some special system call
 
 Named is not using anything special. All the stuff is just libraries and 
 standard API.
 
 Ondrej
 --
 Ondřej Surý — ISC (He/Him)
 
 My working hours and your working hours may be different. Please do not 
 feel obligated to reply outside your normal working hours.
 
>> On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
> 
> maybe named is using some special system call
 
>>> 
>> 
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

for what its worth - I am NOT framing this as a BIND 9 fault  as in BIND should
change what it is doing 

but BIND 9 is doing something that Apple does not like  and it would
help Apple to know what that is

Scott

> On Nov 4, 2024, at 9:59 AM, Ondřej Surý  wrote:
> 
> Please stop framing this as this is BIND 9 fault. I’ll report this to Apple 
> as I can reproduce this on my machine too on unprivileged account.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 4. 11. 2024, at 14:23, Scott Bradner  wrote:
>> 
>> does named so something in buffering previous queries that would
>> trigger a different process on the third query?  (seems strange that
>> its reboot from another computer is repeatable on the 3rd query for the
>> same site?)
>> 
>> note that many queries from another computer are just fine as long as its
>> not for the same site
>> 
>> Scott
>> 
 On Nov 4, 2024, at 9:16 AM, Ondřej Surý  wrote:
 
 maybe named is using some special system call
>>> 
>>> Named is not using anything special. All the stuff is just libraries and 
>>> standard API.
>>> 
>>> Ondrej
>>> --
>>> Ondřej Surý — ISC (He/Him)
>>> 
>>> My working hours and your working hours may be different. Please do not 
>>> feel obligated to reply outside your normal working hours.
>>> 
> On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
 
 maybe named is using some special system call
>>> 
>> 
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Ondřej Surý]

Please stop framing this as this is BIND 9 fault. I’ll report this to Apple as 
I can reproduce this on my machine too on unprivileged account.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 4. 11. 2024, at 14:23, Scott Bradner  wrote:
> 
> does named so something in buffering previous queries that would
> trigger a different process on the third query?  (seems strange that
> its reboot from another computer is repeatable on the 3rd query for the
> same site?)
> 
> note that many queries from another computer are just fine as long as its
> not for the same site
> 
> Scott
> 
>>> On Nov 4, 2024, at 9:16 AM, Ondřej Surý  wrote:
>>> 
>>> maybe named is using some special system call
>> 
>> Named is not using anything special. All the stuff is just libraries and 
>> standard API.
>> 
>> Ondrej
>> --
>> Ondřej Surý — ISC (He/Him)
>> 
>> My working hours and your working hours may be different. Please do not feel 
>> obligated to reply outside your normal working hours.
>> 
 On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
>>> 
>>> maybe named is using some special system call
>> 
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

tried again after the crash and it now does one query & crashes on the 2nd

sigh

Scott

> On Nov 4, 2024, at 9:32 AM, Scott Bradner  wrote:
> 
> I un-installed Little Snitch (and am not using the macOS firewall) and it
> did change things - now the first quest from another computer caused the 
> reboot
> 
> :-(
> 
> Scott
> 
>> On Nov 4, 2024, at 9:24 AM, Anand Buddhdev  wrote:
>> 
>> On 04/11/2024 15:14, Scott Bradner wrote:
>> 
>> Hi Scott,
>> 
>> I doubt that BIND is using any special code to cause the crash. I am aware 
>> that Apple has introduced some new code around firewalling in macOS 15. In 
>> fact, before macOS 15.1, there was a serious issue with it, that broke 
>> long-running SSH connections. Maybe the DNS queries are tickling the 
>> firewall-related code and causing a kernel panic.
>> 
>> Regards,
>> Anand
>> 
>>> it sure would help when taking the issue to apple to have some
>>> idea what thing in named is causing the (should not be possible) reboot
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

I un-installed Little Snitch (and am not using the macOS firewall) and it
did change things - now the first quest from another computer caused the reboot

:-(

Scott

> On Nov 4, 2024, at 9:24 AM, Anand Buddhdev  wrote:
> 
> On 04/11/2024 15:14, Scott Bradner wrote:
> 
> Hi Scott,
> 
> I doubt that BIND is using any special code to cause the crash. I am aware 
> that Apple has introduced some new code around firewalling in macOS 15. In 
> fact, before macOS 15.1, there was a serious issue with it, that broke 
> long-running SSH connections. Maybe the DNS queries are tickling the 
> firewall-related code and causing a kernel panic.
> 
> Regards,
> Anand
> 
>> it sure would help when taking the issue to apple to have some
>> idea what thing in named is causing the (should not be possible) reboot

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Anand Buddhdev]

On 04/11/2024 15:14, Scott Bradner wrote:

Hi Scott,

I doubt that BIND is using any special code to cause the crash. I am 
aware that Apple has introduced some new code around firewalling in 
macOS 15. In fact, before macOS 15.1, there was a serious issue with it, 
that broke long-running SSH connections. Maybe the DNS queries are 
tickling the firewall-related code and causing a kernel panic.


Regards,
Anand


it sure would help when taking the issue to apple to have some
idea what thing in named is causing the (should not be possible) reboot

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

does named so something in buffering previous queries that would
trigger a different process on the third query?  (seems strange that
its reboot from another computer is repeatable on the 3rd query for the 
same site?)

note that many queries from another computer are just fine as long as its
not for the same site

Scott

> On Nov 4, 2024, at 9:16 AM, Ondřej Surý  wrote:
> 
>> maybe named is using some special system call
> 
> Named is not using anything special. All the stuff is just libraries and 
> standard API.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
>> 
>> maybe named is using some special system call
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Ondřej Surý]

> maybe named is using some special system call

Named is not using anything special. All the stuff is just libraries and 
standard API.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 4. 11. 2024, at 14:14, Scott Bradner  wrote:
> 
> maybe named is using some special system call

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

it sure would help when taking the issue to apple to have some
idea what thing in named is causing the (should not be possible) reboot

maybe named is using some special system call

Scott

> On Nov 4, 2024, at 9:07 AM, Ondřej Surý  wrote:
> 
> As Mark said - you need to take this to Apple. It could be kernel bug, it 
> could be a compiler bug. Userspace program crashing the hardware is pretty 
> bad, but there’s nothing we can do on our side.
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 4. 11. 2024, at 14:03, Scott Bradner  wrote:
>> 
>> more observations
>> 
>> M1 Mac Mini
>> 
>> MacOS Sequoia 15.1
>> 
>> bind 9.20.3 installed by homebrew - as installed (no tweaking of named.conf
>> or anything else) - started using "sudo brew services start bind"
>> 
>> query from another computer
>>   dig @[ipaddress] cnn.com
>>   first two times get the correct results
>>   third time reboots the mini - reliable that its the 3rd time
>> 
>> query from itself
>>   dig @127.0.0.1
>>   first time reboots the mini - reliable that its the first query
>> 
>> nothing recorded in the named log
>> nothing recorded in console crash reports
>> nothing recorded in system log
>> 
>> Scott
>> 
 On Nov 4, 2024, at 4:14 AM, Borja Marcos via bind-users 
  wrote:
 
 
 
> On 25 Oct 2024, at 02:15, Mark Andrews  wrote:
 
 Take your machine to Apple.  You have a hardware fault or a kernel 
 security bug.  A user application should not be able to make an operating 
 system crash.
>>> 
>>> That’s interesting. I have heard of a similar problem but with a different 
>>> OS version (Sequoia) and the same Bind version.
>>> 
>>> Any clue on what might be different between bind 9.20.3 built with Homebrew 
>>> and 9.20.2 when getting queries via 127.0.0.1?
>>> 
>>> It’s obvious it is an OS bug, but looks quite puzzling.
>>> 
>>> 
>>> 
>>> 
>>> Borja.
>>> 
>>> --
>>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
>>> this list
>>> 
>>> ISC funds the development of this software with paid support subscriptions. 
>>> Contact us at https://www.isc.org/contact/ for more information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
>> 
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
>> this list
>> 
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Ondřej Surý]

As Mark said - you need to take this to Apple. It could be kernel bug, it could 
be a compiler bug. Userspace program crashing the hardware is pretty bad, but 
there’s nothing we can do on our side.

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 4. 11. 2024, at 14:03, Scott Bradner  wrote:
> 
> more observations
> 
> M1 Mac Mini
> 
> MacOS Sequoia 15.1
> 
> bind 9.20.3 installed by homebrew - as installed (no tweaking of named.conf
> or anything else) - started using "sudo brew services start bind"
> 
> query from another computer
>dig @[ipaddress] cnn.com
>first two times get the correct results
>third time reboots the mini - reliable that its the 3rd time
> 
> query from itself
>dig @127.0.0.1
>first time reboots the mini - reliable that its the first query
> 
> nothing recorded in the named log
> nothing recorded in console crash reports
> nothing recorded in system log
> 
> Scott
> 
>>> On Nov 4, 2024, at 4:14 AM, Borja Marcos via bind-users 
>>>  wrote:
>>> 
>>> 
>>> 
 On 25 Oct 2024, at 02:15, Mark Andrews  wrote:
>>> 
>>> Take your machine to Apple.  You have a hardware fault or a kernel security 
>>> bug.  A user application should not be able to make an operating system 
>>> crash.
>> 
>> That’s interesting. I have heard of a similar problem but with a different 
>> OS version (Sequoia) and the same Bind version.
>> 
>> Any clue on what might be different between bind 9.20.3 built with Homebrew 
>> and 9.20.2 when getting queries via 127.0.0.1?
>> 
>> It’s obvious it is an OS bug, but looks quite puzzling.
>> 
>> 
>> 
>> 
>> Borja.
>> 
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
>> this list
>> 
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> 
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

more observations

M1 Mac Mini

MacOS Sequoia 15.1

bind 9.20.3 installed by homebrew - as installed (no tweaking of named.conf 
or anything else) - started using "sudo brew services start bind"

query from another computer
dig @[ipaddress] cnn.com
first two times get the correct results
third time reboots the mini - reliable that its the 3rd time

query from itself
dig @127.0.0.1
first time reboots the mini - reliable that its the first query

nothing recorded in the named log
nothing recorded in console crash reports
nothing recorded in system log

Scott

> On Nov 4, 2024, at 4:14 AM, Borja Marcos via bind-users 
>  wrote:
> 
> 
> 
>> On 25 Oct 2024, at 02:15, Mark Andrews  wrote:
>> 
>> Take your machine to Apple.  You have a hardware fault or a kernel security 
>> bug.  A user application should not be able to make an operating system 
>> crash.
> 
> That’s interesting. I have heard of a similar problem but with a different OS 
> version (Sequoia) and the same Bind version.
> 
> Any clue on what might be different between bind 9.20.3 built with Homebrew 
> and 9.20.2 when getting queries via 127.0.0.1? 
> 
> It’s obvious it is an OS bug, but looks quite puzzling.
> 
> 
> 
> 
> Borja.
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Borja Marcos via bind-users]

> On 25 Oct 2024, at 02:15, Mark Andrews  wrote:
> 
> Take your machine to Apple.  You have a hardware fault or a kernel security 
> bug.  A user application should not be able to make an operating system crash.

That’s interesting. I have heard of a similar problem but with a different OS 
version (Sequoia) and the same Bind version.

Any clue on what might be different between bind 9.20.3 built with Homebrew and 
9.20.2 when getting queries via 127.0.0.1? 

It’s obvious it is an OS bug, but looks quite puzzling.




Borja.



signature.asc
Description: Message signed with OpenPGP
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Scott Bradner]

I have the same problem with bind version 9.20.3 (on both Sonoma & Sequoia 

the Sonoma attempt was on a machine that I did  a clean install on Sonoma on and
the only things on the machine were what came with the install, homebrew &
brew install bind

instant reboot when trying "dig @127.0.0.1 can.com"

Scott
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Server crash on receiving query

[Mark Andrews]

Take your machine to Apple.  You have a hardware fault or a kernel security 
bug.  A user application should not be able to make an operating system crash.

Mark

> On 24 Oct 2024, at 17:20, James L. Brown via bind-users 
>  wrote:
> 
> For almost two weeks my instance of named has cause a reboot of the machine 
> when it receives a query. Version 9.20.3.
> 
> 24-Oct-2024 17:02:40.785 general: notice: starting BIND 9.20.3 (Stable 
> Release) 
> 24-Oct-2024 17:02:40.786 general: notice: running on Darwin arm64 23.6.0 
> Darwin Kernel Version 23.6.0: Wed Jul 31 20:49:46 PDT 2024; 
> root:xnu-10063.141.1.700.5~1/RELEASE_ARM64_T8103
> 24-Oct-2024 17:02:40.786 general: notice: built with  
> '--prefix=/opt/homebrew/Cellar/bind/9.20.3' 
> '--sysconfdir=/opt/homebrew/etc/bind' '--localstatedir=/opt/homebrew/var' 
> '--with-json-c' '--with-libidn2=/opt/homebrew/opt/libidn2' 
> '--with-openssl=/opt/homebrew/opt/openssl@3' '--without-lmdb' 'CC=clang' 
> 'PKG_CONFIG_PATH=/opt/homebrew/opt/jemalloc/lib/pkgconfig:/opt/homebrew/opt/json-c/lib/pkgconfig:/opt/homebrew/opt/libidn2/lib/pkgconfig:/opt/homebrew/opt/libnghttp2/lib/pkgconfig:/opt/homebrew/opt/libuv/lib/pkgconfig:/opt/homebrew/opt/openssl@3/lib/pkgconfig:/opt/homebrew/opt/readline/lib/pkgconfig:/opt/homebrew/opt/userspace-rcu/lib/pkgconfig'
>  
> 'PKG_CONFIG_LIBDIR=/usr/lib/pkgconfig:/opt/homebrew/Library/Homebrew/os/mac/pkgconfig/14'
> 24-Oct-2024 17:02:40.787 general: notice: running as: named -n 7 -c 
> /opt/homebrew/etc/named.conf -L /opt/homebrew/var/log/named/named.log
> 24-Oct-2024 17:02:40.787 general: notice: compiled by CLANG Apple LLVM 15.0.0 
> (clang-1500.3.9.4)
> 24-Oct-2024 17:02:40.788 general: notice: compiled with OpenSSL version: 
> OpenSSL 3.3.2 3 Sep 2024
> 24-Oct-2024 17:02:40.788 general: notice: linked to OpenSSL version: OpenSSL 
> 3.3.2 3 Sep 2024
> 24-Oct-2024 17:02:40.788 general: notice: compiled with libuv version: 1.49.1
> 24-Oct-2024 17:02:40.789 general: notice: linked to libuv version: 1.49.2
> 24-Oct-2024 17:02:40.789 general: notice: compiled with liburcu version: 
> 0.14.1
> 24-Oct-2024 17:02:40.790 general: notice: compiled with jemalloc version: 
> 5.3.0
> 24-Oct-2024 17:02:40.790 general: notice: compiled with libnghttp2 version: 
> 1.63.0
> 24-Oct-2024 17:02:40.791 general: notice: linked to libnghttp2 version: 1.64.0
> 24-Oct-2024 17:02:40.791 general: notice: compiled with libxml2 version: 
> 2.9.13
> 24-Oct-2024 17:02:40.791 general: notice: linked to libxml2 version: 20913
> 24-Oct-2024 17:02:40.792 general: notice: compiled with json-c version: 0.18
> 24-Oct-2024 17:02:40.792 general: notice: linked to json-c version: 0.18
> 24-Oct-2024 17:02:40.793 general: notice: compiled with zlib version: 1.2.12
> 24-Oct-2024 17:02:40.793 general: notice: linked to zlib version: 1.2.12
> ...
> 24-Oct-2024 17:02:40.796 general: notice: adjusted limit on open files from 
> 2560 to 9223372036854775807
> 24-Oct-2024 17:02:40.797 general: info: found 8 CPUs, using 7 worker threads
> 
> I have an older server with name config file and zone files, and it runs 
> fine. It’s running older version bind.
> 
> Server is an M1 Mac mini running Sonoma macOS 14.7.
> 
> The query can come from external or from ‘dig’ issued on that machine.
> 
> The computer runs fine until it receives the query - heaps of free RAM, disk 
> space, CPU <20%, etc.
> 
> Any suggestions as to where to look? Nothing gets logged to named.log or my 
> queries log file.
> 
> Any help would be much appreciated.
> 
> Thanks, James.
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users