Created attachment 829312 [details]
core.20545.gz

Description of problem:
nsupdate terminates with assertion failure while attempting to update records in GSS-TSIG mode with certain input:

The gdb backtrace of the core is:

#0  0x00007f5d2887c979 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007f5d2887e088 in __GI_abort () at abort.c:90
#2  0x00007f5d2a7fc1cf in isc_assertion_failed (file=file@entry=0x7f5d2a838358 "mem.c", line=line@entry=1102, type=type@entry=isc_assertiontype_insist, cond=cond@entry=0x7f5d2a838447 "ctx->stats[i].gets == 0U") at assertions.c:58
#3  0x00007f5d2a80b361 in destroy (ctx=ctx@entry=0x74f030) at mem.c:1102
#4  0x00007f5d2a80b7cc in isc__mem_destroy (ctxp=ctxp@entry=0x60f0e0 <mctx>) at mem.c:1253
#5  0x0000000000404ef7 in cleanup () at ./nsupdate.c:2961
#6  main (argc=2, argv=0x7fff40cd7378) at ./nsupdate.c:3013

Version-Release number of selected component (if applicable):
bind-utils-9.9.4-5.el7.x86_64

How reproducible:
Always

Steps to Reproduce:
Ensure that a Kerberos ticket appropriate for the update is acquired and execute the following, possibly modifying names and addresses:

nsupdate -g <<<'
realm EXAMPLE.COM
update delete dyndns-refresh.example.com. in A
send
realm EXAMPLE.COM
update delete 17.122.168.192.in-addr.arpa. in PTR
send
'

Actual results:
Output:
mem.c:1102: INSIST(ctx->stats[i].gets == 0U) failed, back trace
#0 0x7f4a5c8e6264 in ??
#1 0x7f4a5c8e61ca in ??
#2 0x7f4a5c8f5361 in ??
#3 0x7f4a5c8f57cc in ??
#4 0x404ef7 in ??
#5 0x7f4a5a952af5 in ??
#6 0x405085 in ??
Aborted (core dumped)

Exit status: 134

Expected results:
No output.
Exit status: 0