auth-zone leads to segfaults

Simon Deziel simon+unbound at
Tue Aug 14 21:59:04 UTC 2018

Hi *,

When using the auth-zone feature, unbound 1.7.3 crashes when trying to
XFR one of my private zone. Other zones are OK. I've attached the
aggregated config, the gdb full backtrace and the verb 4 logs. If
needed, I could also share the private zone via direct email.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: gdb-bt-full.log
Type: text/x-log
Size: 8142 bytes
Desc: not available
URL: <>
-------------- next part --------------
# Unbound configuration file for Debian.
# See the unbound.conf(5) man page.
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
include: "/etc/unbound/unbound.conf.d/*.conf"
    # Send minimum amount of information to upstream servers to enhance
    # privacy. Only sends minimum required labels of the QNAME and sets
    # QTYPE to NS when possible.

    # See RFC 7816 "DNS Query Name Minimisation to Improve Privacy" for
    # details.

    qname-minimisation: yes
    # The following line will configure unbound to perform cryptographic
    # DNSSEC validation using the root trust anchor.
    auto-trust-anchor-file: "/var/lib/unbound/root.key"
    verbosity: 4

    # disable the subnet module
    module-config: "validator iterator"


    # Allow to resolve AS112 zones
    local-zone: "" nodefault

    trust-anchor: " IN DS 52954 8 2 4250E2716D37A6674E4793AD3FDEA1440936728B2A1D09B126C692D59F51254B"

    name: ""
    zonefile: /var/lib/unbound/
    for-downstream: no
    master: 2001:470:b1c3:7941::53

-------------- next part --------------
A non-text attachment was scrubbed...
Name: unbound-verb-4.log
Type: text/x-log
Size: 5469 bytes
Desc: not available
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the Unbound-users mailing list