[Opendnssec-user] AXFR of signed zone - failed

Matthijs Mekking matthijs at nlnetlabs.nl
Tue May 15 13:22:14 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Daniel,

Does this still occur in trunk, revision r6336?

I committed a fix today, that checks if the query overflows. I
encountered an assertion error when doing a large outbound zone
transfer, no TSIG. I guess you use TSIG, and hit a similar problem
already when adding the TSIG RR.

Best regards,
Matthijs

On 05/15/2012 01:29 PM, Daniel Salzman wrote:
> Hi, when downloading signed zone from OpenDNSSEC (1.4.0a1, 
> 1.4.0-trunk), the ods-signerd breaks. The zone is uploaded and 
> signed successfully .
> 
> May 15 12:48:04 nic ods-signerd: [socket] handle incoming tcp 
> connection May 15 12:48:04 nic ods-signerd: [netio] handler added 
> May 15 12:48:04 nic ods-signerd: [dnshandler] netio dispatch May
> 15 12:48:04 nic ods-signerd: [socket] incoming tcp message May 15 
> 12:48:04 nic ods-signerd: [socket] TCP_READ: reset query May 15 
> 12:48:04 nic ods-signerd: [socket] TCP_READ: bytes transmitted 0 
> May 15 12:48:04 nic ods-signerd: [socket] TCP_READ: bytes 
> transmitted 2 (received 2) May 15 12:48:04 nic ods-signerd: 
> [socket] TCP_READ: bytes transmitted 112 (received 110) May 15 
> 12:48:04 nic ods-signerd: [query] tsig ok May 15 12:48:04 nic 
> ods-signerd: [query] incoming query qtype=AXFR for zone test.cz
> May 15 12:48:04 nic ods-signerd: [query] refused May 15 12:48:04
> nic ods-signerd: [socket] query processed qstate=0 May 15 12:48:04
> nic ods-signerd: [socket] TCP_READ: clear buffer: tcplen 110 May
> 15 12:48:04 nic ods-signerd: [dnshandler] netio dispatch May 15 
> 12:48:04 nic ods-signerd: [socket] TCP_WRITE: bytes transmitted 2 
> (sent 2) May 15 12:48:04 nic ods-signerd: [socket] TCP_WRITE:
> bytes transmitted 112 May 15 12:48:04 nic ods-signerd: [socket] 
> TCP_WRITE: tcplen 110 May 15 12:48:04 nic ods-signerd: [socket] 
> TCP_WRITE: sizeof tcplen 2 May 15 12:48:04 nic ods-signerd: 
> [dnshandler] netio dispatch May 15 12:48:04 nic ods-signerd: 
> [socket] incoming tcp message May 15 12:48:04 nic ods-signerd: 
> [socket] TCP_READ: reset query May 15 12:48:04 nic ods-signerd: 
> [socket] TCP_READ: bytes transmitted 0 May 15 12:48:04 nic 
> ods-signerd: [netio] handler removed May 15 12:48:04 nic 
> ods-signerd: [dnshandler] netio dispatch May 15 12:48:21 nic 
> ods-signerd: [socket] handle incoming tcp connection May 15 
> 12:48:21 nic ods-signerd: [netio] handler added May 15 12:48:21
> nic ods-signerd: [dnshandler] netio dispatch May 15 12:48:21 nic 
> ods-signerd: [socket] incoming tcp message May 15 12:48:21 nic 
> ods-signerd: [socket] TCP_READ: reset query May 15 12:48:21 nic 
> ods-signerd: [socket] TCP_READ: bytes transmitted 0 May 15
> 12:48:21 nic ods-signerd: [socket] TCP_READ: bytes transmitted 2
> (received 2) May 15 12:48:21 nic ods-signerd: [socket] TCP_READ:
> bytes transmitted 112 (received 110) May 15 12:48:21 nic
> ods-signerd: [query] tsig ok May 15 12:48:21 nic ods-signerd:
> [query] incoming query qtype=AXFR for zone test.cz May 15 12:48:21
> nic ods-signerd: [acl] match 10.10.10.31 May 15 12:48:21 nic
> ods-signerd: [query] incoming axfr request for zone test.cz May 15
> 12:48:21 nic ods-signerd: [file] open file  file=test.cz.axfr
> mode=reading May 15 12:48:21 nic ods-signerd: [axfr] set soa in
> axfr zone test.cz May 15 12:48:21 nic ods-signerd: [axfr] read rr
> at line 2 May 15 12:48:21 nic ods-signerd: [axfr] add rr at line 2
> May 15 12:48:21 nic ods-signerd: [axfr] read rr at line 3 May 15
> 12:48:21 nic ods-signerd: [axfr] add rr at line 3 . . May 15
> 12:48:22 nic ods-signerd: [axfr] read rr at line 999 May 15
> 12:48:22 nic ods-signerd: [axfr] add rr at line 999 May 15 12:48:22
> nic ods-signerd: [axfr] read rr at line 1000 May 15 12:48:22 nic 
> ods-signerd: [axfr] rr at line 1000 does not fit May 15 12:48:22 
> nic ods-signerd: [axfr] return part axfr zone test.cz May 15 
> 12:48:22 nic ods-signerd: [socket] query processed qstate=2 May 15 
> 12:48:22 nic ods-signerd: wire/buffer.c:567: buffer_write_u32_at: 
> assertion buffer_available_at(buffer, at, sizeof(data)) failed
> 
> Dan
> 
> _______________________________________________ Opendnssec-user 
> mailing list Opendnssec-user at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPsliFAAoJEA8yVCPsQCW546UH/iu5aj7Y1i4QusyDw43pMHZM
eRbqM+IccxKVvCluYusQmJUEjB73r+z2f238WB9MHQa53RPDsyz7BUrU5M2RvQpH
SzLkjKykrrjjo+TFUYIH/66sgp0IkwKfGU1F4BdgYJSHyZ4t72W7jZFChvPWM8Y1
OjKMjZpCcAb6WTn9nrkYyczIbBRi6vdM982oWyQ/Y2RJzpX+HLP/24Io1ubi4M//
FD/0Gior2ioaGo7hWWgvtwyAgKowjClPHIxjL+5Pd4sEJ2z7EWdHJ2qOGVpX23CV
hke1L2TDKVzceulvUyASVkzWuAoDiIP3ljlinjN5ex9XtKW6z+C58HXdNorT08w=
=SXZZ
-----END PGP SIGNATURE-----



More information about the Opendnssec-user mailing list