bind-pkcs11-9.9.4-51.el7.x86_64 using bind-dyndb-ldap in CentOS it triggering an assertion failure

Fri Oct 13 09:46:45 UTC 2017

The SELinux is in passive mode so I can get the AVC denied messeges, but 
named-pkcs11 still crashes sometimes when systemctl reload named-pkcs11 
is triggered manually or by logrotate with the detailed back trace 
listed in the initial email.

On 13/10/17 10:42, Alberto Colosi wrote:
>
> SELinux in passive ? , you can put SETEnforce         OFF             
> in conf
>
>
>
>
>
> ------------------------------------------------------------------------
> *From:* bind-users <bind-users-bounces at lists.isc.org> on behalf of 
> Radu Pantiru <radu.pantiru at devinfotech.co.uk>
> *Sent:* Friday, October 13, 2017 10:49 AM
> *To:* bind-users at lists.isc.org
> *Subject:* Re: bind-pkcs11-9.9.4-51.el7.x86_64 using bind-dyndb-ldap 
> in CentOS it triggering an assertion failure
> I also want to add that SELinux is in permissive mode.
>
> On 10/10/17 14:14, Radu Pantiru wrote:
>>
>> I did request help with CentOS but my feeling is that you may be able 
>> to give me some information what happens at the code level.
>>
>> It is not happening every time when reloading the named-pkcs11 service.
>>
>> The backtrace:
>>
>> (gdb) thread apply all bt
>>
>> Thread 8 (Thread 0x7f4083cbc700 (LWP 21357)):
>> #0 pthread_cond_wait@@GLIBC_2.3.2 () at 
>> ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
>> #1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
>> #2 run (uap=0x7f4089aa9010) at task.c:1286
>> #3 0x00007f4087227e25 in start_thread (arg=0x7f4083cbc700) at 
>> pthread_create.c:308
>> #4 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 7 (Thread 0x7f40844bd700 (LWP 21356)):
>> #0 pthread_cond_wait@@GLIBC_2.3.2 () at 
>> ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
>> #1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
>> #2 run (uap=0x7f4089aa9010) at task.c:1286
>> #3 0x00007f4087227e25 in start_thread (arg=0x7f40844bd700) at 
>> pthread_create.c:308
>> #4 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 6 (Thread 0x7f40824b9700 (LWP 21360)):
>> #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at 
>> ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
>> #1 0x00007f40890d6e48 in isc_condition_waituntil (c=c at entry 
>> <mailto:c=c at entry>=0x7f4089aaa078, m=m at entry 
>> <mailto:m=m at entry>=0x7f4089aaa028, t=t at entry 
>> <mailto:t=t at entry>=0x7f4089aaa06c) at condition.c:66
>> #2 0x00007f40890c1ef3 in run (uap=0x7f4089aaa010) at timer.c:825
>> #3 0x00007f4087227e25 in start_thread (arg=0x7f40824b9700) at 
>> pthread_create.c:308
>> #4 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 5 (Thread 0x7f40786d7700 (LWP 21875)):
>> #0 0x00007f4086294a3d in poll () at ../sysdeps/unix/syscall-template.S:81
>> #1 0x00007f407bbcebdb in poll (__timeout=<optimized out>, 
>> __nfds=<optimized out>, __fds=<optimized out>) at 
>> /usr/include/bits/poll2.h:46
>> #2 ldap_int_select (ld=<optimized out>, timeout=<optimized out>) at 
>> os-ip.c:1138
>> #3 0x00007f407bbb90bd in wait4msg (result=0x7f40786d6558, 
>> timeout=<optimized out>, all=2, msgid=4, ld=0x7f4070002b40) at 
>> result.c:312
>> #4 ldap_result (ld=0x7f4070002b40, msgid=4, all=all at entry 
>> <mailto:all=all at entry>=2, timeout=<optimized out>, 
>> result=result at entry <mailto:result=result at entry>=0x7f40786d65b8) at 
>> result.c:117
>> #5 0x00007f407bbe555c in ldap_sync_poll (ls=ls at entry 
>> <mailto:ls=ls at entry>=0x7f407000d720) at ldap_sync.c:879
>> #6 0x00007f4080124362 in ldap_sync_doit (inst=inst at entry 
>> <mailto:inst=inst at entry>=0x7f4089aacf40, conn=<optimized out>, 
>> filter_objcs=filter_objcs at entry 
>> <mailto:filter_objcs=filter_objcs at entry>=0x7f408013a550 
>> "(|(objectClass=idnsZone) (objectClass=idnsForwardZone) 
>> (objectClass=idnsRecord))",
>> mode=mode at entry <mailto:mode=mode at entry>=3) at ldap_helper.c:4651
>> #7 0x00007f408012485f in ldap_syncrepl_watcher (arg=0x7f4089aacf40) 
>> at ldap_helper.c:4727
>> #8 0x00007f4087227e25 in start_thread (arg=0x7f40786d7700) at 
>> pthread_create.c:308
>> #9 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 4 (Thread 0x7f4081cb8700 (LWP 21361)):
>> #0 0x00007f408629f923 in epoll_wait () at 
>> ../sysdeps/unix/syscall-template.S:81
>> #1 0x00007f40890ce916 in watcher (uap=0x7f4089aac010) at socket.c:3913
>> #2 0x00007f4087227e25 in start_thread (arg=0x7f4081cb8700) at 
>> pthread_create.c:308
>> #3 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 3 (Thread 0x7f40834bb700 (LWP 21358)):
>> #0 pthread_cond_wait@@GLIBC_2.3.2 () at 
>> ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
>> #1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
>> #2 run (uap=0x7f4089aa9010) at task.c:1286
>> #3 0x00007f4087227e25 in start_thread (arg=0x7f40834bb700) at 
>> pthread_create.c:308
>> #4 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> Thread 2 (Thread 0x7f4089ae5840 (LWP 21355)):
>> #0 0x00007f40861dc572 in do_sigsuspend (set=0x7ffe7ce76400) at 
>> ../sysdeps/unix/sysv/linux/sigsuspend.c:32
>> ---Type <return> to continue, or q <return> to quit---
>> #1 __GI___sigsuspend (set=set at entry 
>> <mailto:set=set at entry>=0x7ffe7ce76400) at 
>> ../sysdeps/unix/sysv/linux/sigsuspend.c:46
>> #2 0x00007f40890c475c in isc__app_ctxrun (ctx0=ctx0 at entry 
>> <mailto:ctx0=ctx0 at entry>=0x7f40892efd20 <isc_g_appctx>) at app.c:695
>> #3 0x00007f40890c4b4c in isc__app_run () at app.c:722
>> #4 0x0000563558d91595 in main (argc=<optimized out>, argv=<optimized 
>> out>) at ./main.c:1118
>>
>> Thread 1 (Thread 0x7f4082cba700 (LWP 21359)):
>> #0 0x00007f40861dc1f7 in __GI_raise (sig=sig at entry 
>> <mailto:sig=sig at entry>=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
>> #1 0x00007f40861dd8e8 in __GI_abort () at abort.c:90
>> #2 0x0000563558da1e7e in assertion_failed (file=<optimized out>, 
>> line=<optimized out>, type=<optimized out>, cond=<optimized out>) at 
>> ./main.c:222
>> #3 0x00007f408909d29a in isc_assertion_failed (file=file at entry 
>> <mailto:file=file at entry>=0x7f408948a2d4 "rdataset.c", line=line at entry 
>> <mailto:line=line at entry>=266, type=type at entry 
>> <mailto:type=type at entry>=isc_assertiontype_require, cond=cond at entry 
>> <mailto:cond=cond at entry>=0x7f408948a3a8 "rdataset->methods != ((void 
>> *)0)")
>>     at assertions.c:57
>> #4 0x00007f40893df828 in dns_rdataset_first (rdataset=<optimized 
>> out>) at rdataset.c:266
>> #5 0x00007f40893f155c in fctx_getaddresses (fctx=fctx at entry 
>> <mailto:fctx=fctx at entry>=0x7f4068192670, badcache=badcache at entry 
>> <mailto:badcache=badcache at entry>=isc_boolean_false) at resolver.c:2727
>> #6 0x00007f40893f20fd in fctx_try (fctx=fctx at entry 
>> <mailto:fctx=fctx at entry>=0x7f4068192670, retrying=retrying at entry 
>> <mailto:retrying=retrying at entry>=isc_boolean_false, 
>> badcache=badcache at entry 
>> <mailto:badcache=badcache at entry>=isc_boolean_false) at resolver.c:3062
>> #7 0x00007f40893f290c in fctx_start (task=<optimized out>, 
>> event=<optimized out>) at resolver.c:3444
>> #8 0x00007f40890bd6a6 in dispatch (manager=0x7f4089aa9010) at task.c:1116
>> #9 run (uap=0x7f4089aa9010) at task.c:1286
>> #10 0x00007f4087227e25 in start_thread (arg=0x7f4082cba700) at 
>> pthread_create.c:308
>> #11 0x00007f408629f34d in clone () at 
>> ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
>>
>> (gdb) frame 5
>>
>> #5 0x00007f7adb9c255c in fctx_getaddresses 
>> (fctx=fctx at entry=0x7f7ac103e6e0, 
>> badcache=badcache at entry=isc_boolean_false) at resolver.c:2727
>>
>> 2727 for (result = dns_rdataset_first(&fctx->nameservers);
>>
>> (gdb) list +
>>
>> 2722 isc_stdtime_get(&now);
>>
>> 2723
>>
>> 2724 INSIST(ISC_LIST_EMPTY(fctx->finds));
>>
>> 2725 INSIST(ISC_LIST_EMPTY(fctx->altfinds));
>>
>> 2726
>>
>> 2727 for (result = dns_rdataset_first(&fctx->nameservers);
>>
>> 2728      result == ISC_R_SUCCESS;
>>
>> 2729      result = dns_rdataset_next(&fctx->nameservers))
>>
>> 2730 {
>>
>> 2731 dns_rdataset_current(&fctx->nameservers, &rdata);
>>
>> (gdb) frame 4
>>
>> #4 0x00007f7adb9b0828 in dns_rdataset_first (rdataset=<optimized 
>> out>) at rdataset.c:266
>>
>> 266 REQUIRE(rdataset->methods != NULL);
>>
>> thank you for your help!
>>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20171013/26cf205a/attachment-0001.html>