Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 732857 - "__libc_res_nquery: Assertion `hp != hp2' failed." crashes many apps on particular failed DNS queries
Summary: "__libc_res_nquery: Assertion `hp != hp2' failed." crashes many apps on parti...
Keywords:
Status: CLOSED DUPLICATE of bug 730856
Alias: None
Product: Fedora
Classification: Fedora
Component: glibc
Version: 16
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: ---
Assignee: Andreas Schwab
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: F16Beta-accepted, F16BetaFreezeExcept F16Blocker, F16FinalBlocker
TreeView+ depends on / blocked
 
Reported: 2011-08-23 23:38 UTC by Adam Williamson
Modified: 2016-11-24 15:36 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-08-23 23:41:26 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
Proposed fix (from Aurelien Jarno, Debian) (deleted)
2011-08-23 23:39 UTC, Adam Williamson 		no flags Details | Diff
View All

Description Adam Williamson 2011-08-23 23:38:27 UTC 
As discussed in various places - devel list, https://bugs.archlinux.org/task/24615 , and http://sourceware.org/bugzilla/show_bug.cgi?id=13013 - current glibc contains a bug which can cause any app to crash if a DNS lookup fails in a particular way (so far as I can tell). Usually the bug is hard to reliably reproduce - just trying to browse to a garbage domain doesn't do it - but https://bugs.archlinux.org/task/24615#comment78282 claims this as a reliable reproducer:

# iptables -A OUTPUT -p udp --dport 53 -j REJECT --reject-with icmp-admin-prohibited
# wget http://google.com/
--2011-06-08 12:13:58-- http://google.com/
Resolving google.com... zsh: segmentation fault (core dumped)

http://sourceware.org/bugzilla/show_bug.cgi?id=13013 has a proposed patch, which I will attach to this report. Kevin Fenzi did a scratch build - http://koji.fedoraproject.org/koji/taskinfo?taskID=3289243 - with the patch, which he says seems to resolve the issue for him. That report also suggests that the condition to cause the crash is "When the first answer is a SERVFAIL, NOTIMP or REFUSED".
Comment 1 Adam Williamson 2011-08-23 23:39:15 UTC 
Created attachment 519536 [details]
Proposed fix (from Aurelien Jarno, Debian)
Comment 2 Adam Williamson 2011-08-23 23:40:05 UTC 
proposing as Beta NTH and final release blocker, this is a bit icky of a bug to ship with.
Comment 3 Adam Williamson 2011-08-23 23:41:26 UTC 
holy cow, it's groundhog day. I already reported this one and promptly forgot. sigh.

*** This bug has been marked as a duplicate of bug 730856 ***
Note You need to log in before you can comment on or make changes to this bug.