Hello Boris,

One possible cause could be the stricter checks enforced on newer operating 
system versions.

You could try disabling these stricter checks, e.g. by defining 
_FORTIFY_SOURCE=0 when compiling OpenDNSSEC from sources:

./configure CFLAGS="-D_FORTIFY_SOURCE=0"

See https://opendnssec.readthedocs.io/en/latest/quickstart/ for more complete 
instructions on building from sources.

Ximon

> Op 3 mei 2025 om 16:02 heeft Boris Gulay via Opendnssec-user 
> <[email protected]> het volgende geschreven:
> 
> Hello.
> 
> I'm try to run OpenDNSSEC from repo on Ubuntu 24.04. I'm starting from 
> scratch with single simple zone. No matter what algorithm I'm using for keys 
> I'm getting buffer overflow error when daemon tries to generate KSK. I've 
> past dump from logs below.
> 
> Is it a known issue? How can I work around it?
> 
> Similar issue on launchpad: 
> https://bugs.launchpad.net/ubuntu/+source/opendnssec/+bug/2089834
> 
> 
> 
> May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] zone chubarovo.ru 
> added [policy: default]
> May 02 23:50:45 main ods-enforcerd[2712313]: INFO: The XML in 
> /var/lib/opendnssec/enforcer/zones.xml.update is valid
> May 02 23:50:45 main ods-enforcerd[2712313]: [zone_add_cmd] internal zonelist 
> updated successfully
> May 02 23:50:45 main ods-enforcerd[2712313]: 1 zone(s) found on policy 
> "default"
> May 02 23:50:45 main ods-enforcerd[2712313]: [hsm_key_factory_generate] 1 
> keys needed for 1 zones covering 31536000 seconds, generating 1 keys for 
> policy default
> May 02 23:50:45 main ods-enforcerd[2712313]: 1 new KSK(s) (2048 bits) need to 
> be created.
> May 02 23:50:45 main ods-enforcerd[2712313]: *** buffer overflow detected 
> ***: terminated
> May 02 23:50:45 main ods-enforcerd[2712313]: Aborted:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Aborted
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_kill
> May 02 23:50:45 main ods-enforcerd[2712313]:   gsignal
> May 02 23:50:45 main ods-enforcerd[2712313]:   abort
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   __snprintf_chk
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_generate_rsa_key
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_key_factory_generate
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_key_factory_generate_policy
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_kill
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump:
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   __select
> May 02 23:50:45 main ods-enforcerd[2712313]:   cmdhandler_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   gsignal
> May 02 23:50:45 main ods-enforcerd[2712313]:   abort
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   __snprintf_chk
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_generate_rsa_key
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_key_factory_generate
> May 02 23:50:45 main ods-enforcerd[2712313]:   hsm_key_factory_generate_policy
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   pthread_cond_timedwait
> May 02 23:50:45 main ods-enforcerd[2712313]:   ods_thread_wait
> May 02 23:50:45 main ods-enforcerd[2712313]:   schedule_pop_task
> May 02 23:50:45 main ods-enforcerd[2712313]:   worker_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]: Threaddump
> May 02 23:50:45 main ods-enforcerd[2712313]: :
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   __select
> May 02 23:50:45 main ods-enforcerd[2712313]:   cmdhandler_start
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main ods-enforcerd[2712313]:   unknown
> May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Main process 
> exited, code=dumped, status=6/ABRT
> May 02 23:50:45 main systemd[1]: opendnssec-enforcer.service: Failed with 
> result 'core-dump'.
> 
> _______________________________________________
> Opendnssec-user mailing list
> [email protected]
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to