bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed
Phil Mayers
p.mayers at imperial.ac.uk
Wed Nov 16 13:14:42 UTC 2011
On 16/11/11 13:07, Warren Kumari wrote:
> It was (very convincingly!) explained to me that INSISTS() are only
> used for the "this should not happen" cases, and if the INSISTS()
> were not there, many of the recent attacks may have led to much worse
> things like buffer overflows / more worrying security issues (and
> that the push for INSIST() was directly from this sort of thing in
> 8.x…).
I tend to agree with this kind of reasoning.
It might be good if bind were able to re-start itself, rather than dying
outright (e.g. re-exec the process) but that is dangerous too; it's
better done by an unrelated supervising process.
More information about the bind-users
mailing list