unbound dies on reboot : buffer overflow detected

Unbound
1

1.8.1
When rebooting, unbound dies:

systemd[1]: Starting Unbound recursive Domain Name Server...
unbound-checkconf[1025]: unbound-checkconf: no errors in
/etc/unbound/unbound.conf
systemd[1]: Started Unbound recursive Domain Name Server.
unbound[1261]: [1261:0] notice: init module 0: ipsecmod
unbound[1261]: [1261:0] notice: init module 1: validator
unbound[1261]: [1261:0] notice: init module 2: iterator
unbound[1261]: [1261:0] info: start of service (unbound 1.8.1).
unbound[1261]: [1261:0] info: generate keytag query _ta-4a5c-4f66. NULL IN
unbound[1261]: [1261:2] info: generate keytag query _ta-4a5c-4f66. NULL IN
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master k.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master k.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master g.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master f.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master e.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master c.root-servers.net
unbound[1261]: [1261:0] error: .: failed lookup, cannot transfer from
master b.root-servers.net
unbound[1261]: *** buffer overflow detected ***: /usr/sbin/unbound terminated
systemd[1]: unbound.service: Main process exited, code=killed, status=6/ABRT
systemd[1]: unbound.service: Failed with result 'signal'.

But no problem if restarted.
systemctl restart unbound

systemd[1]: Starting Unbound recursive Domain Name Server...
unbound-checkconf[2775]: unbound-checkconf: no errors in
/etc/unbound/unbound.conf
systemd[1]: Started Unbound recursive Domain Name Server.
unbound[2778]: [2778:0] warning: did not exit gracefully last time (1261)
unbound[2778]: [2778:0] notice: init module 0: ipsecmod
unbound[2778]: [2778:0] notice: init module 1: validator
unbound[2778]: [2778:0] notice: init module 2: iterator
unbound[2778]: [2778:0] info: start of service (unbound 1.8.1).
unbound[2778]: [2778:0] info: generate keytag query _ta-4a5c-4f66. NULL IN

Any help appreciated.

sean

2

Hi Sean,

This looks like a bug that was fixed in 1.8.1, can you try with 1.8.2,
and then I'd like to be able to replicate this. Could you tell me parts
of config pertinent to the auth-zone (because that is what seems to be
failing here)?

Best regards, Wouter

3

Hi All,
I am truly sorry for spamming the thread like this but is there any way to remove me from the emails list. I haven’t been using unbound for a very long time and I am still getting all of these emails and I do not know how to opt out.

Thanks ,

Nikola

4

Here's the only backtrace with unbound.

sean

cat /var/spool/abrt/Python3-2018-12-07-21:31:47-1302/backtrace
subprocess.py:291:check_call:subprocess.CalledProcessError: Command
'['unbound-control', 'flush_requestlist']' returned non-zero exit
status 1.

Traceback (most recent call last):
  File "/usr/libexec/dnssec-trigger-script", line 748, in <module>
    main()
  File "/usr/libexec/dnssec-trigger-script", line 735, in main
    Application(sys.argv).run()
  File "/usr/libexec/dnssec-trigger-script", line 470, in run
    self.method()
  File "/usr/libexec/dnssec-trigger-script", line 633, in run_update
    self.run_update_connection_zones()
  File "/usr/libexec/dnssec-trigger-script", line 718, in
run_update_connection_zones
    unbound_zones.add(zone, self.global_forwarders, secure=False)
  File "/usr/libexec/dnssec-trigger-script", line 268, in add
    self._commit(zone, set(servers), secure)
  File "/usr/libexec/dnssec-trigger-script", line 299, in _commit
    self._control(["flush_requestlist"])
  File "/usr/libexec/dnssec-trigger-script", line 306, in _control
    subprocess.check_call(["unbound-control"] + args, stdout=DEVNULL,
stderr=DEVNULL)
  File "/usr/lib64/python3.6/subprocess.py", line 291, in check_call
    raise CalledProcessError(retcode, cmd)
subprocess.CalledProcessError: Command '['unbound-control',
'flush_requestlist']' returned non-zero exit status 1.

Local variables in innermost frame:
cmd: ['unbound-control', 'flush_requestlist']
retcode: 1
kwargs: {'stdout': <_io.BufferedWriter name='/dev/null'>, 'stderr':
<_io.BufferedWriter name='/dev/null'>}
popenargs: (['unbound-control', 'flush_requestlist'],)