[Pdns-users] empty allow-from causes signal 11 in 4.6.0, works in 4.5.9 and earlier

Fri Apr 22 05:37:18 UTC 2022

On Thu, Apr 21, 2022 at 10:34:04PM +0200, Roger Hammerstein via Pdns-users wrote:

This has been fixed in master, should be backported so next release of
4.6.x (4.6.3) has the fix.

	-Otto

> <html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>an empty allow-from in the powerdns recursor conf seems to cause a signal 11 and<br/>
> corefile in 4.6.0, but works in 4.5.9 and earlier.   adding 127.0.0.1 to the allow-from stops</div>
> 
> <div>the signal 11s.</div>
> 
> <div><br/>
> freebsd 13/amd64</div>
> 
> <div><br/>
> % ./configure --sysconfdir=/usr/local/etc/pdns --with-libsodium=no --without-net-snmp --without-systemd</div>
> 
> <div> </div>
> 
> <div>pdns_recursor[98111]: PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.<br/>
> pdns_recursor[98111]: Enabling IPv4 transport for outgoing queries<br/>
> pdns_recursor[98111]: NOT using IPv6 for outgoing queries - add an IPv6 address (like '::') to query-local-address to enable<br/>
> kernel: pid 98111 (pdns_recursor), jid 0, uid 0: exited on signal 11 (core dumped)</div>
> 
> <div> </div>
> 
> <div> </div>
> 
> <div>the 'WARNING: Allowing queries from all IP addresses - this can be a security risk!' message is not printed.</div>
> 
> <div> </div>
> 
> <div>access controls are via packet filter.</div>
> 
> <div> </div>
> 
> <div> </div>
> 
> <div>gdp shows the parseacl function</div>
> 
> <div> </div>
> 
> <div> </div>
> 
> <div>/usr/local/bin/gdb /usr/local/sbin/pdns_recursor ./pdns_recursor.core</div>
> 
> <div>Core was generated by `/usr/local/sbin/pdns_recursor --daemon=no --write-pid=no'.<br/>
> Program terminated with signal SIGSEGV, Segmentation fault.<br/>
> Address not mapped to object.<br/>
> #0  parseACLs () at pdns_recursor.cc:4847<br/>
> 4847      if(allowFrom->size() == 0) {<br/>
> (gdb)<br/>
> ~</div>
> 
> <div> </div></div></body></html>

> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users