[Pkg-dns-devel] Bug#596334: dnsutils: Still happens in Stretch

[Sascha Silbe]

Package: dnsutils
Version: 1:9.10.3.dfsg.P4-12.3+deb9u3
Followup-For: Bug #596334
Control: found 596334 1:9.10.3.dfsg.P4-12.3+deb9u3

Dear Maintainer,

I'm not the original reporter but I can still reproduce this bug in
Stretch:

sascha at vorratskeller3:~$ dig +sigchase +dnssec +topdown -t MX silbe.org 

Launch a query to find a RRset of type MX for zone: silbe.org with
nameservers:
.                       54683   IN      NS      a.root-servers.net.
.                       54683   IN      NS      b.root-servers.net.
[...]

;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success

;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658

;; ERROR : silbe.org. is not a subdomain of: org. FAILED

../../../lib/dns/name.c:2183: REQUIRE(source->length > 0) failed.
Aborted

Sascha

-- System Information:
Debian Release: 9.2
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable'), (100, 'testing')
Architecture: armhf (armv7l)

Kernel: Linux 4.4.54-ti-r93 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dnsutils depends on:
ii  bind9-host [host]  1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libbind9-140       1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libc6              2.24-11+deb9u1
ii  libcap2            1:2.25-1
ii  libcomerr2         1.43.4-2
ii  libdns162          1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libgeoip1          1.6.9-4
ii  libgssapi-krb5-2   1.15-1+deb9u1
ii  libisc160          1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libisccfg140       1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libk5crypto3       1.15-1+deb9u1
ii  libkrb5-3          1.15-1+deb9u1
ii  liblwres141        1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libssl1.0.2        1.0.2l-2
ii  libxml2            2.9.4+dfsg1-2.2+deb9u1

dnsutils recommends no packages.

Versions of packages dnsutils suggests:
pn  rblcheck  <none>

-- no debconf information