Package: bind9-dnsutils
Version: 1:9.20.15-1~deb13u1
Severity: normal

Dear Maintainer,

nslookup (interactive) aborts with an assertion failure in libisc
after receiving an HINFO response (e.g. from dnscrypt-proxy
AAAA-blocking).
The same response is handled correctly by dig.

nslookup
> server 127.0.0.1
Default server: 127.0.0.1
Address: 127.0.0.1#53
> set port=5053
> google
Server: 127.0.0.1
Address: 127.0.0.1#5053
Non-authoritative answer:
google hinfo = "AAAA queries have been locally blocked by
dnscrypt-proxy" "Set block_ipv6 to false to disable that feature"

> google.com
> Server: 127.0.0.1
Address: 127.0.0.1#5053
Non-authoritative answer:
Name: google.com
Address: 142.251.36.14
google.com hinfo = "AAAA queries have been locally blocked by
dnscrypt-proxy" "Set block_ipv6 to false to disable that feature"

>
signal.c:97: REQUIRE(((signal) != ((void *)0) && ((const isc__magic_t
*)(signal))->magic == ((('S') << 24 | ('I') << 16 | ('G') << 8 | ('
'))))) failed, back trace
/lib/x86_64-linux-gnu/libisc-9.20.15-1~deb13u1-Debian.so(+0x3568f)
[0x7648119af68f]
/lib/x86_64-linux-gnu/libisc-9.20.15-1~deb13u1-Debian.so(isc_assertion_failed+0x10)
[0x7648119af5d0]
/lib/x86_64-linux-gnu/libisc-9.20.15-1~deb13u1-Debian.so(isc_signal_start+0x4e)
[0x7648119d251e]
/lib/x86_64-linux-gnu/libisc-9.20.15-1~deb13u1-Debian.so(isc_loopmgr_nonblocking+0x1e)
[0x7648119c4a4e]
nslookup(+0x7591) [0x5adfb03a3591]
/lib/x86_64-linux-gnu/libisc-9.20.15-1~deb13u1-Debian.so(+0x61c94)
[0x7648119dbc94]
/lib/x86_64-linux-gnu/libuv.so.1(+0xb7e5) [0x7648110ca7e5]
/lib/x86_64-linux-gnu/libc.so.6(+0x92b7b) [0x76481150ab7b]
/lib/x86_64-linux-gnu/libc.so.6(+0x1107b8) [0x7648115887b8]
Aborted

After the second query, the > prompt does NOT appear until hitting enter.
Hitting enter a second time after this > prompt does appear results in
the crash.
Running a single lookup and exiting nslookup works normally.

dig @127.0.0.1 -p 5053 google.com AAAA +noall +answer +ttlunits
google.com.             1d      IN      HINFO   "AAAA queries have
been locally blocked by dnscrypt-proxy" "Set block_ipv6 to false to
disable that feature"

-- System Information:
Debian Release: 13.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.17.4-1-pve (SMP w/1 CPU thread; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages bind9-dnsutils depends on:
ii  bind9-host [host]  1:9.20.15-1~deb13u1
ii  bind9-libs         1:9.20.15-1~deb13u1
ii  libc6              2.41-12
ii  libedit2           3.1-20250104-1
ii  libidn2-0          2.3.8-2
ii  libjemalloc2       5.3.0-3
ii  libkrb5-3          1.21.3-5
ii  libprotobuf-c1     1.5.1-1

bind9-dnsutils recommends no packages.

bind9-dnsutils suggests no packages.

-- no debconf information

Reply via email to