<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hello. Thanx for the fast answer. So you mean I have to build it from source? There is no way to fix prebuild package?</p>
<p><br /></p>
<p id="reply-intro">Ximon Eighteen писал(а) 03.05.2025 21:55:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div id="replybody1" dir="auto">
<div dir="ltr"> </div>
<div dir="ltr">Hi Boris,</div>
<div dir="ltr"> </div>
<div dir="ltr">I also see that the issue you describe looks similar to or might even be the same issue fixed by <a href="https://github.com/opendnssec/opendnssec/pull/866" target="_blank" rel="noopener noreferrer">https://github.com/opendnssec/opendnssec/pull/866</a>. That fix has not yet been included in a release of OpenDNSEC.</div>
<div dir="ltr"> </div>
<div dir="ltr">If I recall correctly this is also a case that setting _FORTIFY_SOURCE=0 during compilation will workaround.</div>
<div dir="ltr"> </div>
<div dir="ltr">Ximom</div>
<div dir="ltr"><br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">Op 3 mei 2025 om 19:46 heeft Ximon Eighteen <ximon@nlnetlabs.nl> het volgende geschreven:<br /><br /></blockquote>
</div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr"> </div>
<div dir="ltr">Hello Boris,</div>
<div dir="ltr"> </div>
<div dir="ltr">One possible cause could be the stricter checks enforced on newer operating system versions.</div>
<div dir="ltr"> </div>
<div dir="ltr">You could try disabling these stricter checks, e.g. by defining _FORTIFY_SOURCE=0 when compiling OpenDNSSEC from sources:</div>
<div dir="ltr"><span style="-webkit-text-size-adjust: auto;"> </span></div>
<div dir="ltr"><span style="-webkit-text-size-adjust: auto;">./configure CFLAGS="-D_FORTIFY_SOURCE=0"</span></div>
<div dir="ltr"> </div>
<div dir="ltr"><span style="-webkit-text-size-adjust: auto;">See </span><a href="https://opendnssec.readthedocs.io/en/latest/quickstart/" target="_blank" rel="noopener noreferrer">https://opendnssec.readthedocs.io/en/latest/quickstart/</a> for more complete instructions on building from sources.</div>
<div dir="ltr"> </div>
<div dir="ltr">Ximon</div>
<div dir="ltr"><br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">Op 3 mei 2025 om 16:02 heeft Boris Gulay via Opendnssec-user <opendnssec-user@lists.opendnssec.org> het volgende geschreven:<br /><br /></blockquote>
</div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div dir="ltr">
<p>Hello.</p>
<p>I'm try to run OpenDNSSEC from repo on Ubuntu 24.04. I'm starting from scratch with single simple zone. No matter what algorithm I'm using for keys I'm getting buffer overflow error when daemon tries to generate KSK. I've past dump from logs below.</p>
<p>Is it a known issue? How can I work around it?</p>
<p>Similar issue on launchpad: <a href="https://bugs.launchpad.net/ubuntu/+source/opendnssec/+bug/2089834" target="_blank" rel="noopener noreferrer">https://bugs.launchpad.net/ubuntu/+source/opendnssec/+bug/2089834</a></p>
<p><br /></p>
<p>May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] zone chubarovo.ru added [policy: default]<br />May 02 23:50:45 main ods-enforcerd[2712313]: INFO: The XML in /var/lib/opendnssec/enforcer/zones.xml.update is valid<br />May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] internal zonelist updated successfully<br />May 02 23:50:45 main ods-enforcerd[2712313]: 1 zone(s) found on policy "default"<br />May 02 23:50:45 main ods-enforcerd[2712313]: [hsm_key_factory_generate] 1 keys needed for 1 zones covering 31536000 seconds, generating 1 keys for policy default<br />May 02 23:50:45 main ods-enforcerd[2712313]: 1 new KSK(s) (2048 bits) need to be created.<br />May 02 23:50:45 main ods-enforcerd[2712313]: *** buffer overflow detected ***: terminated<br />May 02 23:50:45 main ods-enforcerd[2712313]: Aborted:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Aborted<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_kill<br />May 02 23:50:45 main ods-enforcerd[2712313]: gsignal<br />May 02 23:50:45 main ods-enforcerd[2712313]: abort<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: __snprintf_chk<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_generate_rsa_key<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate_policy<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_kill<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: __select<br />May 02 23:50:45 main ods-enforcerd[2712313]: cmdhandler_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: gsignal<br />May 02 23:50:45 main ods-enforcerd[2712313]: abort<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: __snprintf_chk<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_generate_rsa_key<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate<br />May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate_policy<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait<br />May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait<br />May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task<br />May 02 23:50:45 main ods-enforcerd[2712313]: worker_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump<br />May 02 23:50:45 main ods-enforcerd[2712313]: :<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: __select<br />May 02 23:50:45 main ods-enforcerd[2712313]: cmdhandler_start<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main ods-enforcerd[2712313]: unknown<br />May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Main process exited, code=dumped, status=6/ABRT<br />May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Failed with result 'core-dump'.</p>
<span>_______________________________________________</span><br /><span>Opendnssec-user mailing list</span><br /><span>Opendnssec-user@lists.opendnssec.org</span><br /><span>https://lists.opendnssec.org/mailman/listinfo/opendnssec-user</span></div>
</blockquote>
</div>
<span>_______________________________________________</span><br /><span>Opendnssec-user mailing list</span><br /><span>Opendnssec-user@lists.opendnssec.org</span><br /><span>https://lists.opendnssec.org/mailman/listinfo/opendnssec-user</span></div>
</blockquote>
</div>
</blockquote>
<p><br /></p>
</body></html>