dig +sigchase +topdown isc.org crashes
Summary
dig +sigchase +topdown isc.org crashes
BIND version used
(Paste the output of named -V
.)
BIND 9.11.5 (Extended Support Version) <id:14f22d9040>
running on Linux x86_64 4.19.14-300.fc29.x86_64 #1 SMP Wed Jan 9 21:30:35 UTC 2019
built by make with '--enable-exportlib' '--with-libtool' '--with-dlopen' '--with-libidn2' '--without-lmdb' '--with-atf=/usr' '--enable-threads' 'CFLAGS=-ggdb -O0'
compiled by GCC 8.2.1 20181215 (Red Hat 8.2.1-6)
compiled with OpenSSL version: OpenSSL 1.1.1a FIPS 20 Nov 2018
linked to OpenSSL version: OpenSSL 1.1.1a FIPS 20 Nov 2018
compiled with libxml2 version: 2.9.8
linked to libxml2 version: 20908
compiled with libjson-c version: 0.13.1
linked to libjson-c version: 0.13.1
compiled with zlib version: 1.2.11
linked to zlib version: 1.2.11
threads support is enabled
Steps to reproduce
I am aware these options are deprecated in the first case. But anyway, the might not be correct, but it should not crash at least.
Have caching resolver in /etc/resolv.conf, and isc.org already cached. I have local unbound 1.8 configured, but think it is not related.
./configure
sed -e 's/^CDEFINES =.*/& -DDIG_SIGCHASE -DDIG_SIGCHASE_TD/' -i bin/dig/Makefile
make -j4
cd bin/dig
./dig isc.org
./dig +sigchase +topdown isc.org
What is the current bug behavior?
LANG=C ./dig +sigchase +topdown isc.org
Launch a query to find a RRset of type A for zone: isc.org with nameservers:
. 72313 IN NS d.root-servers.net.
. 72313 IN NS i.root-servers.net.
. 72313 IN NS a.root-servers.net.
. 72313 IN NS k.root-servers.net.
. 72313 IN NS m.root-servers.net.
. 72313 IN NS g.root-servers.net.
. 72313 IN NS l.root-servers.net.
. 72313 IN NS f.root-servers.net.
. 72313 IN NS e.root-servers.net.
. 72313 IN NS j.root-servers.net.
. 72313 IN NS c.root-servers.net.
. 72313 IN NS h.root-servers.net.
. 72313 IN NS b.root-servers.net.
Launch a query to find a RRset of type A for zone: isc.org with nameservers:
. 72313 IN NS d.root-servers.net.
. 72313 IN NS i.root-servers.net.
. 72313 IN NS a.root-servers.net.
. 72313 IN NS k.root-servers.net.
. 72313 IN NS m.root-servers.net.
. 72313 IN NS g.root-servers.net.
. 72313 IN NS l.root-servers.net.
. 72313 IN NS f.root-servers.net.
. 72313 IN NS e.root-servers.net.
. 72313 IN NS j.root-servers.net.
. 72313 IN NS c.root-servers.net.
. 72313 IN NS h.root-servers.net.
. 72313 IN NS b.root-servers.net.
Launch a query to find a RRset of type DNSKEY for zone: .
;; DNSKEYset:
. 98908 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3 +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU=
. 98908 IN DNSKEY 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=
. 98908 IN DNSKEY 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/Uh D7cWeixV9Wqzj/cnqs8iWELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/E unplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTIrbVALf65VB2ABbBG 39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1M gwi2cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiII ZQqAfqbieruCGHRiSscC2ZE7iNreL/76f4JyIEUNkt6bQA29JsegxorL zQkpF7NKqZc=
;; RRSIG of the DNSKEYset:
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 19164 . bXBdgAqxgUU6bOQyg+5zqivk44vXUBtDYdscX9lTXnTd8CLwXFI71rj/ Cj7DSTAaKqJKsGINfaDt2sGSKLzfZkLtTVfeNnnImhdk/9UQ9eZ6rVZW jX2u7znsAsN26tX3PaU8smKbgvMNzvZd2L34AhmmAogGuzi9BYDZYjXI UI3yGHni2sSFNilCC4yW3pgZ8dlNyjaaoc38H324HAFHc7VM7S64vSya fGmA67WNZTDIJqF9jstAJXkezTB1RtvSCADemhHrxLieGVS6JQ1tGyVF 8wWjOGgRbbdXM3tKqbkc5fH2ZVpm2IR+HV+s2pwldPzN/sviIVr4y9CG ZpskUg==
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 20326 . dUp+Web00gZBfa1O+rytkdsu3RXpcCQoZUl5rR7Cc/1aa/SIx0m7yWAy SPNoGRn5X14o54ZM8dVOnUUqc7WgsNbXyYmDmpsXwJ1E3osjYXm2H9Dj HPtQ5w9IcgeuN5lN5U+5BWJMiBieW4uOjKVtqjzBhQjD3bJf4EJ3EDLj acayH6A8NfLvu+Oxy1jRiUVCCzb2MXVNFKRkMLXbHJvUls/3dfTpkrBN 5XhQoSbaDMSgrh4mi/jNNz6QHAcuC4zR6rj50wUMb+61bZu5ftJ5vb8d zrfrZgNaNa+alyt4dhb3z5wlXSXtovzpqyYY03Eo75q3eytsdHEbfnY0 eU1Ftg==
;; Ok, find a Trusted Key in the DNSKEY RRset: 20326
;; VERIFYING DNSKEY RRset for . with DNSKEY:20326: success
;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658
;; and we try to continue chain of trust validation of the zone: org.
Launch a query to find a RRset of type NS for zone: org.
;; DNSKEYset:
. 98908 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3 +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU=
. 98908 IN DNSKEY 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=
. 98908 IN DNSKEY 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/Uh D7cWeixV9Wqzj/cnqs8iWELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/E unplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTIrbVALf65VB2ABbBG 39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1M gwi2cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiII ZQqAfqbieruCGHRiSscC2ZE7iNreL/76f4JyIEUNkt6bQA29JsegxorL zQkpF7NKqZc=
;; RRSIG of the DNSKEYset:
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 19164 . bXBdgAqxgUU6bOQyg+5zqivk44vXUBtDYdscX9lTXnTd8CLwXFI71rj/ Cj7DSTAaKqJKsGINfaDt2sGSKLzfZkLtTVfeNnnImhdk/9UQ9eZ6rVZW jX2u7znsAsN26tX3PaU8smKbgvMNzvZd2L34AhmmAogGuzi9BYDZYjXI UI3yGHni2sSFNilCC4yW3pgZ8dlNyjaaoc38H324HAFHc7VM7S64vSya fGmA67WNZTDIJqF9jstAJXkezTB1RtvSCADemhHrxLieGVS6JQ1tGyVF 8wWjOGgRbbdXM3tKqbkc5fH2ZVpm2IR+HV+s2pwldPzN/sviIVr4y9CG ZpskUg==
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 20326 . dUp+Web00gZBfa1O+rytkdsu3RXpcCQoZUl5rR7Cc/1aa/SIx0m7yWAy SPNoGRn5X14o54ZM8dVOnUUqc7WgsNbXyYmDmpsXwJ1E3osjYXm2H9Dj HPtQ5w9IcgeuN5lN5U+5BWJMiBieW4uOjKVtqjzBhQjD3bJf4EJ3EDLj acayH6A8NfLvu+Oxy1jRiUVCCzb2MXVNFKRkMLXbHJvUls/3dfTpkrBN 5XhQoSbaDMSgrh4mi/jNNz6QHAcuC4zR6rj50wUMb+61bZu5ftJ5vb8d zrfrZgNaNa+alyt4dhb3z5wlXSXtovzpqyYY03Eo75q3eytsdHEbfnY0 eU1Ftg==
Launch a query to find a RRset of type DS for zone: org.
;; DNSKEYset:
. 98908 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3 +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU=
. 98908 IN DNSKEY 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=
. 98908 IN DNSKEY 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/Uh D7cWeixV9Wqzj/cnqs8iWELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/E unplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTIrbVALf65VB2ABbBG 39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1M gwi2cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiII ZQqAfqbieruCGHRiSscC2ZE7iNreL/76f4JyIEUNkt6bQA29JsegxorL zQkpF7NKqZc=
;; RRSIG of the DNSKEYset:
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 19164 . bXBdgAqxgUU6bOQyg+5zqivk44vXUBtDYdscX9lTXnTd8CLwXFI71rj/ Cj7DSTAaKqJKsGINfaDt2sGSKLzfZkLtTVfeNnnImhdk/9UQ9eZ6rVZW jX2u7znsAsN26tX3PaU8smKbgvMNzvZd2L34AhmmAogGuzi9BYDZYjXI UI3yGHni2sSFNilCC4yW3pgZ8dlNyjaaoc38H324HAFHc7VM7S64vSya fGmA67WNZTDIJqF9jstAJXkezTB1RtvSCADemhHrxLieGVS6JQ1tGyVF 8wWjOGgRbbdXM3tKqbkc5fH2ZVpm2IR+HV+s2pwldPzN/sviIVr4y9CG ZpskUg==
. 98908 IN RRSIG DNSKEY 8 0 172800 20190211000000 20190121000000 20326 . dUp+Web00gZBfa1O+rytkdsu3RXpcCQoZUl5rR7Cc/1aa/SIx0m7yWAy SPNoGRn5X14o54ZM8dVOnUUqc7WgsNbXyYmDmpsXwJ1E3osjYXm2H9Dj HPtQ5w9IcgeuN5lN5U+5BWJMiBieW4uOjKVtqjzBhQjD3bJf4EJ3EDLj acayH6A8NfLvu+Oxy1jRiUVCCzb2MXVNFKRkMLXbHJvUls/3dfTpkrBN 5XhQoSbaDMSgrh4mi/jNNz6QHAcuC4zR6rj50wUMb+61bZu5ftJ5vb8d zrfrZgNaNa+alyt4dhb3z5wlXSXtovzpqyYY03Eo75q3eytsdHEbfnY0 eU1Ftg==
;; DSset:
org. 27435 IN DS 9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5
org. 27435 IN DS 9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982
;; RRSIGset of DSset
org. 27435 IN RRSIG DS 8 1 86400 20190203170000 20190121160000 16749 . N3qO4/RJIVNhDG4K5hi/ETSkygWB48XO3wnqOrqZfrUabuUBbjGYMbfB 2YlpioPk33Zse+BfEVTKUiaJxSZ3nJ7wkBj1egu1lJxeLwiZ2ZJ5KJzp wHSqHL4ZUYENvOolOvOhT4up+I3yStMs4VuHf68UJftUkObrs0k6ulNK ipsGfGXxl++gvh6P41kzsyom+H4HNZpn/lSnBW8mBN5jFGcfTqppJ3dx Qwgjp2NCfCzwuaQG3s1LNnw80c2UIQFY5qPKx2Iby4cTEJTPT2o2mqqv hoeXc9+ewPOwLptXjYe6LRG/vsY90l/xbV9nvmKVgNZfR9FJ+9NufNWg hROXXg==
;; VERIFYING DS RRset for org. with DNSKEY:16749: success
Launch a query to find a RRset of type A for zone: isc.org with nameservers:
org. 95089 IN NS b0.org.afilias-nst.org.
org. 95089 IN NS c0.org.afilias-nst.info.
org. 95089 IN NS b2.org.afilias-nst.org.
org. 95089 IN NS a0.org.afilias-nst.info.
org. 95089 IN NS a2.org.afilias-nst.info.
org. 95089 IN NS d0.org.afilias-nst.org.
Launch a query to find a RRset of type DNSKEY for zone: org.
;; DNSKEYset:
org. 623 IN DNSKEY 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1b dq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5 T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsU ACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jI R2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tp dbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r 8ti6MNoJEHU=
org. 623 IN DNSKEY 256 3 7 AwEAAcyu1vNojLO1vy6FYAqt3Jne4EGKO5io4MKuTuVYC6POTafpympF aRtFfaG3WNmU89psInAyLLy9cpZrf6Zv7H1jxkFHib899GEEIbd8XgW8 oyHNgH5FrtB2LEGCaVXrPW8p2dASIgQ4EpDTZ8AxX0KWQYCyUtYYoMXD MOTKKKwZ
org. 623 IN DNSKEY 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw 9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9p dPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgr sGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431 msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8G ZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSn wXCNDXk0kk0=
org. 623 IN DNSKEY 256 3 7 AwEAAc5srBkat5T3kAMjJUFqZsmkySlr1UF1sdxTTQ2F6R5zhmbJqYg7 Y+SekXVi3Y7KgYD8sa14PGHMS0kHGcPTLlYwA7AzMY9U4BuabDYb90ys d+8n1PpDtf+BcYe4DuL1pCcOZPSeqko3yWUeu2fNzccBUtE0YazAypCf Sbztq+zT
;; RRSIG of the DNSKEYset:
org. 623 IN RRSIG DNSKEY 7 1 900 20190207152537 20190117142537 9795 org. NOfHL8wXeetoNN91jjOiET8lu4X/mxrRR4MeDA03oaQIRgNXGgB9Riz/ gcHm8hGivuxpaSGxbx4FTm5LO7hYFUuViC6oo06mdjhikmFeUfCqpdhs 6TZfntaX0GpYGN4JpJBDIeMFlF0LFdDYqtt6r26Cc6zhebFVMUChgG2o 6Ofvs/UeUppExO1UEeNULRAFqU7AEvxfsHyEhBbo5fKqBDBwz10UZ5bJ KSfXOgxI8wQyIR255AbQEwHxWGjTWnKico/Mrs0KnCp6EOCt5UahNKh9 MxIWiAjjP6IljqHUOHN+XGWsf3Lq1AcGGAH+4GNK+3P6+wJwtVsHt69l rEOeNA==
org. 623 IN RRSIG DNSKEY 7 1 900 20190207152537 20190117142537 17883 org. lYnkcCCWL7cJmtpifhwF7uhL3Aocj/L8Xp8jpqRcv4OBw1V5JcL0v9Lv wnWTc53fJzl+/yBTueC2/LMcQ4IbAXlK6+Aq9cePWopeawiTUjYK8LCE VK9xsfeYOUomKhTx27/ddIWhazmbfirWwGoC/uC44oirUrX59XCcyjB5 lcqsilwmSLBjmgVaXY2Y7oWRC/UcDLXwd/uS5Nrnpux45ogtyz+vcBZy 1UlmiwkDcrXyBxtrskmQwa7hj8nN+oq05qS8tffA+TZR4uss/biii6nS GcdILJkg/enXpEQpUKysyC89MekpisUtdwD3jVAhcdp4DHnR0/PxmxoZ CuDRKw==
org. 623 IN RRSIG DNSKEY 7 1 900 20190207152537 20190117142537 45404 org. mme7P7ZpocftnBBra2q00nXAwKMQLg0UwY0eD9a9GMMbP0gw5K3D9/S4 xluORkBZqSDBmd6FjuRKERT/TmLdET3A3R1hOTEtWLkuTlM92d3Ts4ds a31XVsyDGw1qiH1YMTaK2AbA0pOWHUj0GTzCnCdY3viDhquEsB2msDSA Ss8=
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success
;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658
;; ERROR : isc.org. is not a subdomain of: org. FAILED
name.c:2202: REQUIRE(source->length > 0) failed, back trace
#0 0x7f6e602ea626 in ??
#1 0x7f6e602ea545 in ??
#2 0x7f6e6047f08b in ??
#3 0x41fc1f in ??
#4 0x420f23 in ??
#5 0x422086 in ??
#6 0x41c975 in ??
#7 0x7f6e6031e33a in ??
#8 0x7f6e6031e695 in ??
#9 0x7f6e5fe0358e in ??
#10 0x7f6e5f9f96a3 in ??
Neúspěšně ukončen (SIGABRT) (core dumped [obraz paměti uložen])
What is the expected correct behavior?
...
Launch a query to find a RRset of type DNSKEY for zone: isc.org.
;; DNSKEYset:
isc.org. 4442 IN DNSKEY 257 3 5 BEAAAAOhHQDBrhQbtphgq2wQUpEQ5t4DtUHxoMVFu2hWLDMvoOMRXjGr hhCeFvAZih7yJHf8ZGfW6hd38hXG/xylYCO6Krpbdojwx8YMXLA5/kA+ u50WIL8ZR1R6KTbsYVMf/Qx5RiNbPClw+vT+U8eXEJmO20jIS1ULgqy3 47cBB1zMnnz/4LJpA0da9CbKj3A254T515sNIMcwsB8/2+2E63/zZrQz Bkj0BrN/9Bexjpiks3jRhZatEsXn3dTy47R09Uix5WcJt+xzqZ7+ysyL KOOedS39Z7SDmsn2eA0FKtQpwA6LXeG2w+jxmw3oA8lVUgEf/rzeC/bB yBNsO70aEFTd
isc.org. 4442 IN DNSKEY 256 3 5 AwEAAcdkaRUlsRD4gcF63PpPJJ1E6kOIb3yn/UHptVsPEQtEbgJ2y20O eix4unpwoQkz+bIAd2rrOU/95wgV530x0/qqKwBLWoGkxdcnNcvVT4hl 3SOTZy1VjwkAfyayHPU8VisXqJGbB3KWevBZlb6AtrXzFu8AHuBeeAAe /fOgreCh
;; RRSIG of the DNSKEYset:
isc.org. 4442 IN RRSIG DNSKEY 5 2 7200 20190220230201 20190121230201 12892 isc.org. kg4I/5Woyl+mOdx1O8vZxL17+UHF+61TDCj3022q1ygE1yI3X6sXgQh8 2KYMOi9GKBR00sb5jzp7CRpg8zMWsRlulLiIuRCpF5EWYiO8ACM247UT +y9HLbgHtlcom714O7xO7h3DeE9qNetfA8WRGSo+O8j5CZDJxqNWsLh6 5HoQmzB5rZ2YxYNYaGUUXhtHI/5us4FS2dX8zPph/J/eFiha0yEX8gBy aNFVT5q5qtmVmUs+rldetckN4gI8x4K0JUyVZjrDJJB+BYf2muYoBCAy XTmQLMO+EEhGe750tT3N7QQ1Cj5ZHCch48DldULMIpAmPqSxrZWlrgdt KVyiew==
isc.org. 4442 IN RRSIG DNSKEY 5 2 7200 20190220230201 20190121230201 19923 isc.org. K/ToeohKjrdYqUUWNxG6d4FAqJCuSt6S3zO3X68WhkuB5ZN+XRlO4k7f 2uY3LHa0WGrd7OApHQe9+RiZqoJD7xhUC9fnR9lCNfKf8XONHejMOfbG EEOwJwXHYYeaVCpwQS9UO+P3Qqv7L8OwKyB84nJoKwvZOlHdODoLUrui HeU=
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for isc.org. with DNSKEY:12892: success
;; VERIFYING A RRset for isc.org. with DNSKEY:19923: success
;; The Answer:
isc.org. 29 IN A 149.20.64.69
;; FINISH : we have validate the DNSSEC chain of trust: SUCCESS
;; cleanandgo
I admit I do not get Grand Father Problem completely, not sure how it should behave. I am confident it should not say org is not subdomain of . when it is. Also it should not crash.
Relevant configuration files
Just have trust anchor and caching resolver
Relevant logs and/or screenshots
(Paste any relevant logs - please use code blocks (```) to format console output, logs, and code, as it's very hard to read otherwise.)
Possible fixes
(If you can, link to the line of code that might be responsible for the problem.) child_of_zone in dighost(https://gitlab.isc.org/isc-projects/bind9/blob/v9_11/bin/dig/dighost.c#L5384) has I think wrong negation. Also error returned by this function is not cached anywhere, leaving it to crash on empty name.