REQUIRE assertion failure in resolver.c
Summary
Reported to security-officer@isc.org:
Hello
Once a week one of our internal Bind9 server crashes with the following error:
07-Aug-2019 00:56:44.207 general: critical: resolver.c:10583: REQUIRE(fetchp != ((void *)0) && *fetchp == ((void *)0)) failed
07-Aug-2019 00:56:44.207 general: critical: exiting (due to assertion failure)
...
We are not sure what is causing this, the time and date are always different, sometimes at night,
sometimes during the day. It started with version Bind9.14 and we thought it got better with
newer versions, but over the last couple of weeks it got worse.
BIND version used
BIND 9.14.4 (Stable Release) <id:ab4c496>
running on Linux x86_64 2.6.32-754.17.1.el6.x86_64 #1 SMP Thu Jun 20 11:47:12 EDT 2019
built by make with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-openssl=yes' '--enable-largefile' '--without-python' '--with-tuning=large' '--with-gssapi=yes' '--disable-isc-spnego' '--disable-dnstap' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'target_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O0 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
compiled by GCC 4.4.7 20120313 (Red Hat 4.4.7-23)
compiled with OpenSSL version: OpenSSL 1.0.1e 11 Feb 2013
linked to OpenSSL version: OpenSSL 1.0.1e-fips 11 Feb 2013
compiled with libxml2 version: 2.7.6
linked to libxml2 version: 20706
compiled with zlib version: 1.2.3
linked to zlib version: 1.2.3
threads support is enabled
default paths:
named configuration: /etc/named.conf
rndc configuration: /etc/rndc.conf
DNSSEC root key: /etc/bind.keys
nsupdate session key: /var/run/named/session.key
named PID file: /var/run/named/named.pid
named lock file: /var/run/named/named.lock
Relevant files
The submitter has kindly provided core dumps, libraries, configuration files, logs, and other supporting materials.
They have been uploaded to bikeshed.isc.org:/home/support/
Until engineering have a chance to examine the crash to see whether it is deliberately triggerable, please note that this ticket is marked confidential.