Package: bind9
Version: 1:9.3.2-1bpo1
Severity: critical
Justification: breaks the whole system


Hi

I just found and could reproduce a very strange problem.

We use bind for a DNS RBL. We store additional information like a timestamp 
inside a TXT record of an entry...

Usually bind uses about 200MB Memory and has no problem at all with zone files 
of the size of about 100MB.

Now we had a situation where 20000 TXT entries were generated on a single 
hostname within one of the zonefiles.

If you then tryed to delete all those entries in one go:

nsupdate
> update delete host.example.com.
>

This caused bind to use up to 3GB of memory, stopping answering queries or 
accepting updates for several minutes up to hours...

This could be reproduced several times.

After manualy deleting the entries from the zone file. Operation resumed to 
normal.

Any idea? Sounds like a severe bug to me.

-Benoit-

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.16.11
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages bind9 depends on:
ii  adduser               3.63               Add and remove users and groups
ii  libbind9-0            1:9.3.2-1bpo1      BIND9 Shared Library used by BIND
ii  libc6                 2.3.2.ds1-22sarge3 GNU C Library: Shared libraries an
ii  libdns21              1:9.3.2-1bpo1      DNS Shared Library used by BIND
ii  libisc11              1:9.3.2-1bpo1      ISC Shared Library used by BIND
ii  libisccc0             1:9.3.2-1bpo1      Command Channel Library used by BI
ii  libisccfg1            1:9.3.2-1bpo1      Config File Handling Library used 
ii  liblwres9             1:9.3.2-1bpo1      Lightweight Resolver Library used 
ii  libssl0.9.7           0.9.7e-3sarge1     SSL shared libraries
ii  lsb-base              3.1-4bpo1          Linux Standard Base 3.1 init scrip
ii  netbase               4.21               Basic TCP/IP networking system

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to