Bug 450995

Summary: regression: allow-update now crashes bind
Product: [Fedora] Fedora Reporter: Jeff Garzik <jgarzik>
Component: bindAssignee: Adam Tkac <atkac>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: high    
Version: 9CC: atkac, ovasik, peterm
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 9.5.0-33.P1.fc9 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-07-09 21:45:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jeff Garzik 2008-06-12 06:24:38 UTC
Description of problem:
Fedora 8 original 'bind' works 100% with the following configuration line:

     allow-update { netop_admins; key gtf.org.; };

however recent Fedora updates caused a major regression, whereby named refuses
to run, giving the following error:
     mem.c:918: INSIST(ctx->stats[i].gets == 0U) failed.
     Aborted

Upgrading to Fedora 9, the same regression is present.

Removing the "key gtf.org.;" statement, or commenting out the entire
allow-update statement, fixes the problem and permits named to run.

This is a MAJOR REGRESSION.

This caused all my DNS servers to fail, when Fedora 8 automatic package updates
were applied, upgrading my bind server in Fedora 8 to bind-9.5.0-27.rc1.fc8.  As
noted, upgrading the systems to Fedora 9 did not help, the bug is present there too.

At the moment, my users are denied the ability to update their domains' in DNS
because of this problem.


Version-Release number of selected component (if applicable):
bind-9.5.0-32.rc1.fc9.i386
     and also
bind-9.5.0-27.rc1.fc8

How reproducible:
always

Steps to Reproduce:
1. create TSIG MD5 keys with version of bind previous to 9.5.0.
2. verify that all allow-update statements work as expected
3. upgrade to current bind
4. watch bind refuse to run
  
Actual results:
bind crashes

Expected results:
bind accepts "key gtf.org.;" statement, just like it did in earlier versions.

Additional info:
Full BIND config and zones available upon PRIVATE request.  I cannot give out
that data in bugzilla.

Comment 1 Adam Tkac 2008-06-12 10:11:23 UTC
Would it be possible attach named.conf, please? (or send it to me) Zones are not
needed. I'm not able reproduce your problem on my machine. Thanks

Comment 2 Fedora Update System 2008-07-08 22:55:09 UTC
bind-9.5.0-33.P1.fc9 has been submitted as an update for Fedora 9

Comment 3 Fedora Update System 2008-07-09 21:45:15 UTC
bind-9.5.0-33.P1.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.