Description of problem:
Bind segfaults when receiving updates.  Last working version of bind was 
bind-9.4.2-4.fc8.

Error:
named[9945]: segfault at 00000000 eip 0015b187 esp b7e980a0 error 4

Version-Release number of selected component (if applicable):
bind-debuginfo-9.5.0-28.P1.fc8
bind-libs-9.5.0-28.P1.fc8
bind-devel-9.5.0-28.P1.fc8
bind-9.5.0-28.P1.fc8
bind-utils-9.5.0-28.P1.fc8
bind-chroot-9.5.0-28.P1.fc8


How reproducible:
Always (within seconds of restarting named)

Steps to Reproduce:
1. Start bind
2. Update received
3. segfault
  
Actual results:


Expected results:


Additional info:
GNU gdb Red Hat Linux (6.6-45.fc8rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu".
Reading symbols from /usr/lib/debug/usr/sbin/named.debug...done.
Using host libthread_db library "/lib/libthread_db.so.1".

warning: Can't read pathname for load map: Input/output error.
Loaded symbols for /usr/sbin/named
Reading symbols from /usr/lib/liblwres.so.40.0.0...Reading symbols from /usr/
lib/debug/usr/lib/liblwres.so.40.0.0.debug...done.
done.
Loaded symbols for /usr/lib/liblwres.so.40.0.0
Reading symbols from /usr/lib/libdns.so.43.0.0...Reading symbols from /usr/lib/
debug/usr/lib/libdns.so.43.0.0.debug...done.
done.
Loaded symbols for /usr/lib/libdns.so.43.0.0
Reading symbols from /usr/lib/libbind9.so.40.0.3...Reading symbols from /usr/
lib/debug/usr/lib/libbind9.so.40.0.3.debug...done.
done.
Loaded symbols for /usr/lib/libbind9.so.40.0.3
Reading symbols from /usr/lib/libisccfg.so.40.0.3...Reading symbols from /usr/
lib/debug/usr/lib/libisccfg.so.40.0.3.debug...done.
done.
Loaded symbols for /usr/lib/libisccfg.so.40.0.3
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /lib/libcrypto.so.6...done.
Loaded symbols for /lib/libcrypto.so.6
Reading symbols from /usr/lib/libisccc.so.40.0.0...Reading symbols from /usr/
lib/debug/usr/lib/libisccc.so.40.0.0.debug...done.
done.
Loaded symbols for /usr/lib/libisccc.so.40.0.0
Reading symbols from /usr/lib/libisc.so.41.1.0...Reading symbols from /usr/lib/
debug/usr/lib/libisc.so.41.1.0.debug...done.
done.
Loaded symbols for /usr/lib/libisc.so.41.1.0
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libpthread.so.0...done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libkrb5support.so.0...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libkeyutils.so.1...done.
Loaded symbols for /lib/libkeyutils.so.1
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libz.so.1...done.
Loaded symbols for /lib/libz.so.1
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libselinux.so.1...done.
Loaded symbols for /lib/libselinux.so.1
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Core was generated by `/usr/sbin/named -u named -t /var/named/chroot'.
Program terminated with signal 11, Segmentation fault.
#0  0x0015b187 in dns_acl_match (reqaddr=0xb7ec21b4, reqsigner=0x0, 
    acl=0xb60a61e8, env=0xb7ed00a8, match=0xb7ec21b0, matchelt=0x0)
    at acl.c:226
226			if (*(isc_boolean_t *) node->data[ISC_IS6(family)] == 
ISC_TRUE)
(gdb) t a a bt

Thread 4 (process 22725):
#0  0x0012d402 in __kernel_vsyscall ()
#1  0x004ccc07 in sigsuspend () from /lib/libc.so.6
#2  0x0044f2d2 in isc_app_run () at app.c:533
#3  0xb7f45d2a in main (argc=0, argv=0xbf8a8134) at ./main.c:879

Thread 3 (process 22727):
#0  0x0012d402 in __kernel_vsyscall ()
#1  0x00493902 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/libpthread.so.0
#2  0x00460fac in isc_condition_waituntil (c=0xb7ecc040, m=0xb7ecc010, 
    t=0xb7ecc038) at condition.c:59
#3  0x0044d930 in run (uap=0xb7ecc008) at timer.c:719
#4  0x0048f50b in start_thread () from /lib/libpthread.so.0
#5  0x00576b2e in clone () from /lib/libc.so.6

Thread 2 (process 22728):
#0  0x0012d402 in __kernel_vsyscall ()
#1  0x0056f5f1 in select () from /lib/libc.so.6
#2  0x0045e26d in watcher (uap=0xb8212130) at socket.c:2513
#3  0x0048f50b in start_thread () from /lib/libpthread.so.0
#4  0x00576b2e in clone () from /lib/libc.so.6

Thread 1 (process 22726):
#0  0x0015b187 in dns_acl_match (reqaddr=0xb7ec21b4, reqsigner=0x0, 
    acl=0xb60a61e8, env=0xb7ed00a8, match=0xb7ec21b0, matchelt=0x0)
    at acl.c:226
#1  0xb7f35dc9 in ns_client_checkaclsilent (client=0xb5eba008, sockaddr=0x0, 
    acl=0xb60a61e8, default_allow=isc_boolean_true) at client.c:2604
#2  0xb7f472b7 in query_validatezonedb (client=0xb5eba008, name=0xb5ec1008, 
    qtype=1, options=0, zone=0xb8375390, db=0xb5be9008, versionp=0xb7ec29ec)
    at query.c:655
#3  0xb7f477fe in query_getzonedb (client=0xb5eba008, name=0xb5ec1008, 
    qtype=1, options=0, zonep=0xb7ec29e8, dbp=0xb7ec2a24, versionp=0xb7ec29ec)
    at query.c:754
#4  0xb7f47867 in query_getdb (client=0xb5eba008, name=0xb5ec1008, 
    qtype=<value optimized out>, options=0, zonep=0xb7ec29e8, dbp=0xb7ec2a24, 
    versionp=0xb7ec29ec, is_zonep=0xb7ec29f8) at query.c:952
#5  0xb7f4b883 in query_find (client=0xb5eba008, event=0x0, qtype=1)
    at query.c:3479
#6  0xb7f4ee3a in ns_query_start (client=0xb5eba008) at query.c:4649
#7  0xb7f3ba09 in client_request (task=0xb7edb8f8, event=0xb5ebe0f8)
    at client.c:1887
#8  0x0044b192 in run (uap=0xb7eca008) at task.c:862
#9  0x0048f50b in start_thread () from /lib/libpthread.so.0
#10 0x00576b2e in clone () from /lib/libc.so.6
Missing separate debuginfos, use: debuginfo-install e2fsprogs.i386 glibc.i686 
keyutils.i386 krb5.i386 libselinux.i386 openssl.i686 zli
b.i386
(gdb) quit