[Opendnssec-user] Buffer overflow on ubuntu
Ximon Eighteen
ximon at nlnetlabs.nl
Sat May 3 18:55:24 UTC 2025
Hi Boris,
I also see that the issue you describe looks similar to or might even be the same issue fixed by https://github.com/opendnssec/opendnssec/pull/866. That fix has not yet been included in a release of OpenDNSEC.
If I recall correctly this is also a case that setting _FORTIFY_SOURCE=0 during compilation will workaround.
Ximom
> Op 3 mei 2025 om 19:46 heeft Ximon Eighteen <ximon at nlnetlabs.nl> het volgende geschreven:
>
>
> Hello Boris,
>
> One possible cause could be the stricter checks enforced on newer operating system versions.
>
> You could try disabling these stricter checks, e.g. by defining _FORTIFY_SOURCE=0 when compiling OpenDNSSEC from sources:
>
> ./configure CFLAGS="-D_FORTIFY_SOURCE=0"
>
> See https://opendnssec.readthedocs.io/en/latest/quickstart/ for more complete instructions on building from sources.
>
> Ximon
>
>>> Op 3 mei 2025 om 16:02 heeft Boris Gulay via Opendnssec-user <opendnssec-user at lists.opendnssec.org> het volgende geschreven:
>>>
>>
>> Hello.
>>
>> I'm try to run OpenDNSSEC from repo on Ubuntu 24.04. I'm starting from scratch with single simple zone. No matter what algorithm I'm using for keys I'm getting buffer overflow error when daemon tries to generate KSK. I've past dump from logs below.
>>
>> Is it a known issue? How can I work around it?
>>
>> Similar issue on launchpad: https://bugs.launchpad.net/ubuntu/+source/opendnssec/+bug/2089834
>>
>>
>>
>> May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] zone chubarovo.ru added [policy: default]
>> May 02 23:50:45 main ods-enforcerd[2712313]: INFO: The XML in /var/lib/opendnssec/enforcer/zones.xml.update is valid
>> May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] internal zonelist updated successfully
>> May 02 23:50:45 main ods-enforcerd[2712313]: 1 zone(s) found on policy "default"
>> May 02 23:50:45 main ods-enforcerd[2712313]: [hsm_key_factory_generate] 1 keys needed for 1 zones covering 31536000 seconds, generating 1 keys for policy default
>> May 02 23:50:45 main ods-enforcerd[2712313]: 1 new KSK(s) (2048 bits) need to be created.
>> May 02 23:50:45 main ods-enforcerd[2712313]: *** buffer overflow detected ***: terminated
>> May 02 23:50:45 main ods-enforcerd[2712313]: Aborted:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Aborted
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_kill
>> May 02 23:50:45 main ods-enforcerd[2712313]: gsignal
>> May 02 23:50:45 main ods-enforcerd[2712313]: abort
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: __snprintf_chk
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_generate_rsa_key
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate_policy
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_kill
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: __select
>> May 02 23:50:45 main ods-enforcerd[2712313]: cmdhandler_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: gsignal
>> May 02 23:50:45 main ods-enforcerd[2712313]: abort
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: __snprintf_chk
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_generate_rsa_key
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate
>> May 02 23:50:45 main ods-enforcerd[2712313]: hsm_key_factory_generate_policy
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: pthread_cond_timedwait
>> May 02 23:50:45 main ods-enforcerd[2712313]: ods_thread_wait
>> May 02 23:50:45 main ods-enforcerd[2712313]: schedule_pop_task
>> May 02 23:50:45 main ods-enforcerd[2712313]: worker_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
>> May 02 23:50:45 main ods-enforcerd[2712313]: :
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: __select
>> May 02 23:50:45 main ods-enforcerd[2712313]: cmdhandler_start
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main ods-enforcerd[2712313]: unknown
>> May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Main process exited, code=dumped, status=6/ABRT
>> May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Failed with result 'core-dump'.
>>
>> _______________________________________________
>> Opendnssec-user mailing list
>> Opendnssec-user at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20250503/2cec36a1/attachment.htm>
More information about the Opendnssec-user
mailing list