samba - Jul 2024 - Bind9 9.18.28 crashes after loading AD DNS Zone

Hello lovely samba-people,

this morning all of our DCs (debian bookworm) upgraded their bind9 
packages to 9.18.28 (from 9.18.24). Afterwards the named service would 
not come up successfully and crash after loading the DLZ:

Jul 26 07:32:12 rad-1.ad.ellerhold.lan named[1903]: sizing zone task 
pool based on 64 zones
Jul 26 07:32:12 rad-1.ad.ellerhold.lan named[1903]: Loading 'AD DNS 
Zone' using driver dlopen
Jul 26 07:32:13 rad-1.ad.ellerhold.lan named[1903]: free(): invalid size
Jul 26 07:32:13 rad-1.ad.ellerhold.lan systemd[1]: named.service: Main 
process exited, code=dumped, status=6/ABRT
Jul 26 07:32:13 rad-1.ad.ellerhold.lan systemd[1]: named.service: Failed 
with result 'core-dump'.

This was rather bad, because all of our DC did update at the same time 
and weve lost all DNS abilities... Downgrading to 9.18.24 fixes the 
issue and named works again.

I guess this crash happens because of the Samba DLZ? Were currently at 
Samba version 2:4.20.2+dfsg-7~mjt-deb12 .

Is this issue known? Can I somehow help to diagnose this?

Regards, Matthias K?hne.

-- 
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
LinkedIn: www.linkedin.com/company/ellerhold-gruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold



---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten
Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und
um sofortiges l?schen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier:
http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not
the intended recipient, please notify us and immediately delete this e-mail and
its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/

On Fri, 26 Jul 2024 08:38:58 +0200
Matthias K?hne | Ellerhold Aktiengesellschaft via samba
<samba at lists.samba.org> wrote:
> Hello lovely samba-people,
> 
> this morning all of our DCs (debian bookworm) upgraded their bind9 
> packages to 9.18.28 (from 9.18.24). Afterwards the named service
> would not come up successfully and crash after loading the DLZ:
> 
> Jul 26 07:32:12 rad-1.ad.ellerhold.lan named[1903]: sizing zone task 
> pool based on 64 zones
> Jul 26 07:32:12 rad-1.ad.ellerhold.lan named[1903]: Loading 'AD DNS 
> Zone' using driver dlopen
> Jul 26 07:32:13 rad-1.ad.ellerhold.lan named[1903]: free(): invalid
> size Jul 26 07:32:13 rad-1.ad.ellerhold.lan systemd[1]:
> named.service: Main process exited, code=dumped, status=6/ABRT
> Jul 26 07:32:13 rad-1.ad.ellerhold.lan systemd[1]: named.service:
> Failed with result 'core-dump'.
> 
> This was rather bad, because all of our DC did update at the same
> time and weve lost all DNS abilities... Downgrading to 9.18.24 fixes
> the issue and named works again.
> 
> I guess this crash happens because of the Samba DLZ? Were currently
> at Samba version 2:4.20.2+dfsg-7~mjt-deb12 .
> 
> Is this issue known? 
Yes
> Can I somehow help to diagnose this?
I can tell you how to fix it, never mind diagnose it ;-)

See here:

https://lists.samba.org/archive/samba/2024-July/249371.html

Rowland