Blocky Crashing with SEGV #776

kbrierly · 2022-12-01T14:21:57Z

kbrierly
Dec 1, 2022

Is anyone else having issues with blocky in docker crashing with a SEGV?
this is with the 0.20 version using the docker hub container,
my upstream is DOT to 9.9.9.9,
i have custom domains and conditional forwarding enabled

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0xcbbe38]

goroutine 2728 [running]:
github.com/0xERR0R/blocky/resolver.addExtraReasoning(0xc0000365a0?)
        /go/src/resolver/ede_resolver.go:42 +0x18
github.com/0xERR0R/blocky/resolver.(*EdeResolver).Resolve(0xc00107f920, 0xc000014b48?)
        /go/src/resolver/ede_resolver.go:24 +0x48
github.com/0xERR0R/blocky/resolver.(*ClientNamesResolver).Resolve(0xc0000362d0, 0xc00143c5b0)
        /go/src/resolver/client_names_resolver.go:79 +0x18c
github.com/0xERR0R/blocky/resolver.(*FqdnOnlyResolver).Resolve(0x4?, 0x4?)
        /go/src/resolver/fqdn_only_resolver.go:34 +0xf4
github.com/0xERR0R/blocky/resolver.(*FilteringResolver).Resolve(0xc00107f8f0, 0xc00143c5b0)
        /go/src/resolver/filtering_resolver.go:29 +0x1bc
github.com/0xERR0R/blocky/server.(*Server).OnRequest(0xc0002ac0f0, {0x108b978, 0xc000aa5b00}, 0xc001428ab0)
        /go/src/server/server.go:617 +0xee
github.com/miekg/dns.HandlerFunc.ServeDNS(0xc00012d500?, {0x108b978?, 0xc000aa5b00?}, 0xc00142001c?)
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:37 +0x2f
github.com/miekg/dns.(*ServeMux).ServeDNS(0xc0012ca000?, {0x108b978?, 0xc000aa5b00?}, 0xc001428ab0?)
        /go/pkg/mod/github.com/miekg/[email protected]/serve_mux.go:103 +0x72
github.com/miekg/dns.(*Server).serveDNS(0xc0001785a0, {0xc0012ca000, 0x34, 0xffff}, 0xc000aa5b00)
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:659 +0x462
github.com/miekg/dns.(*Server).serveUDPPacket(0xc0001785a0, 0x0?, {0xc0012ca000, 0x34, 0xffff}, {0x10897f0?, 0xc000504008}, 0xc0013ad4c0, {0x0, 0x0})
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:603 +0x1dc
created by github.com/miekg/dns.(*Server).serveUDP
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:533 +0x485

0xERR0R · 2022-12-01T14:28:39Z

0xERR0R
Dec 1, 2022
Maintainer

Looks like a bug. Can you share your config file please (you can remove or obfuscate any private information)? Do you know which query causes the crash?

2 replies

kbrierly Dec 1, 2022
Author

Just turned on debug soon as it crashes again i'll let you know

kbrierly Dec 1, 2022
Author

Here's the debug log from a SEGV i finally had. obfuscated some bits.

[2022-12-01 15:03:09] DEBUG server: new request
[2022-12-01 15:03:09] DEBUG blacklist_resolver: checking groups for request client_ip=10.0.0.X client_names=pc.home.local groupsToCheck=adaway; adguard; ads; blacklist; dbloisd; nocoin; porn question=A (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG caching_resolver: domain 'ocsp.digicert.com' was requested 1 times, total cache size: 57 client_ip=10.0.0.X client_names=pc.home.local domain=ocsp.digicert.com question=A (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG blacklist_resolver: checking groups for request client_ip=10.0.0.X client_names=pc.home.local groupsToCheck=adaway; adguard; ads; blacklist; dbloisd; nocoin; porn question=AAAA (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG caching_resolver: domain 'ocsp.digicert.com' was requested 1 times, total cache size: 58 client_ip=10.0.0.X client_names=pc.home.local domain=ocsp.digicert.com question=AAAA (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG caching_resolver: not in cache: go to next resolver client_ip=10.0.0.X client_names=pc.home.local domain=ocsp.digicert.com next_resolver=ConditionalUpstreamResolver question=AAAA (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG parallel_best_resolver: delegating to resolver client_ip=10.0.0.X client_names=pc.home.local question=AAAA (ocsp.digicert.com.) resolver=upstream 'tcp-tls:9.9.9.9'
[2022-12-01 15:03:09] DEBUG caching_resolver: not in cache: go to next resolver client_ip=10.0.0.X client_names=pc.home.local domain=ocsp.digicert.com next_resolver=ConditionalUpstreamResolver question=A (ocsp.digicert.com.)
[2022-12-01 15:03:09] DEBUG parallel_best_resolver: delegating to resolver client_ip=10.0.0.X client_names=pc.home.local question=A (ocsp.digicert.com.) resolver=upstream 'tcp-tls:9.9.9.9'
[2022-12-01 15:03:09] DEBUG upstream_resolver: received response from upstream answer=CNAME (cs9.wac.phicdn.net.) client_ip=10.0.0.X client_names=pc.home.local net=tcp-tls protocol=UDP question=AAAA (ocsp.digicert.com.) response_time_ms=17 return_code=NOERROR upstream=tcp-tls:9.9.9.9 upstream_ip=9.9.9.9
[2022-12-01 15:03:09] DEBUG upstream_resolver: received response from upstream answer=CNAME (cs9.wac.phicdn.net.), A (72.21.91.29) client_ip=10.0.0.X client_names=pc.home.local net=tcp-tls protocol=UDP question=A (ocsp.digicert.com.) response_time_ms=18 return_code=NOERROR upstream=tcp-tls:9.9.9.9 upstream_ip=9.9.9.9
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0xcbbe38]

goroutine 336 [running]:
github.com/0xERR0R/blocky/resolver.addExtraReasoning(0xc0001b2500?)
        /go/src/resolver/ede_resolver.go:42 +0x18
github.com/0xERR0R/blocky/resolver.(*EdeResolver).Resolve(0xc000193020, 0xc0006c8b48?)
        /go/src/resolver/ede_resolver.go:24 +0x48
github.com/0xERR0R/blocky/resolver.(*ClientNamesResolver).Resolve(0xc0001200f0, 0xc0012f45b0)
        /go/src/resolver/client_names_resolver.go:79 +0x18c
github.com/0xERR0R/blocky/resolver.(*FqdnOnlyResolver).Resolve(0x4?, 0x4?)
        /go/src/resolver/fqdn_only_resolver.go:34 +0xf4
github.com/0xERR0R/blocky/resolver.(*FilteringResolver).Resolve(0xc000192ff0, 0xc0012f45b0)
        /go/src/resolver/filtering_resolver.go:29 +0x1bc
github.com/0xERR0R/blocky/server.(*Server).OnRequest(0xc0002b20f0, {0x108b978, 0xc000139b80}, 0xc0010c8870)
        /go/src/server/server.go:617 +0xee
github.com/miekg/dns.HandlerFunc.ServeDNS(0xc00012d580?, {0x108b978?, 0xc000139b80?}, 0xc0010c001c?)
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:37 +0x2f
github.com/miekg/dns.(*ServeMux).ServeDNS(0xc000d00000?, {0x108b978?, 0xc000139b80?}, 0xc0010c8870?)
        /go/pkg/mod/github.com/miekg/[email protected]/serve_mux.go:103 +0x72
github.com/miekg/dns.(*Server).serveDNS(0xc0002807e0, {0xc000d00000, 0x28, 0xffff}, 0xc000139b80)
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:659 +0x462
github.com/miekg/dns.(*Server).serveUDPPacket(0xc0002807e0, 0xc0010b2a80?, {0xc000d00000, 0x28, 0xffff}, {0x10897f0?, 0xc0005060b0}, 0xc0010c7160, {0x0, 0x0})
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:603 +0x1dc
created by github.com/miekg/dns.(*Server).serveUDP
        /go/pkg/mod/github.com/miekg/[email protected]/server.go:533 +0x485

kbrierly · 2022-12-01T15:22:57Z

kbrierly
Dec 1, 2022
Author

configuration redacted as much as i can...

upstream:
  default:
    - tcp-tls:9.9.9.9:853
    #    - tcp-tls:149.112.112.112:853

upstreamTimeout: 3s

connectIPVersion: v4

blocking:
  # definition of blacklist groups. Can be external link (http/https) or local file
  blackLists:
    ads:
      - https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt
      - https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
      - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
      - http://sysctl.org/cameleon/hosts
    nocoin:
      - https://justdomains.github.io/blocklists/lists/nocoin-justdomains.txt
    adaway:
      - https://raw.githubusercontent.com/hectorm/hmirror/master/data/adaway.org/list.txt
    adguard:
      - https://raw.githubusercontent.com/hectorm/hmirror/master/data/adguard-simplified/list.txt
    porn:
      - https://github.com/chadmayfield/pihole-blocklists/raw/master/lists/pi_blocklist_porn_all.list
    dbloisd:
      - https://raw.githubusercontent.com/sjhgvr/oisd/main/dbl_full.txt
    blacklist:
      - /lists/blacklist.txt
  whiteLists:
    default:
      - /lists/whitelist.txt
  clientGroupsBlock:
    default:
      - ads
      - porn
      - nocoin
      - adaway
      - adguard
      - dbloisd
      - blacklist
    roku-stick*,roku-ultra*:
      - ads
      - porn
      - nocoin
      - adaway
      - adguard
      - blacklist

  blockType: zeroIp
  blockTTL: 1m
  refreshPeriod: 4h
  downloadTimeout: 4m
  downloadAttempts: 5
  downloadCooldown: 10s
  startStrategy: blocking

caching:
  minTime: 5m
  maxTime: 30m
  maxItemsCount: 0
  prefetching: true
  prefetchExpires: 2h
  prefetchThreshold: 5
  prefetchMaxItemsCount: 0
  cacheTimeNegative: 30m

clientLookup:
  upstream: 10.0.0.XX
  singleNameOrder:
    - 2
    - 1

prometheus:
  enable: true
  path: /metrics

queryLog:
  type: csv
  target: /logs/
  logRetentionDays: 180

port: 10.0.0.AA:53,127.0.0.1:53
tlsPort: 10.0.0.AA:853,127.0.0.1:853
httpPort: 4000
httpsPort: 10.0.0.AA:443,127.0.0.1:443
minTlsServeVersion: 1.3
bootstrapDns: tcp+udp:9.9.9.9

logLevel: debug
logFormat: text
logTimestamp: true
logPrivacy: false

ede:
  enable: true

customDNS:
  customTTL: 1h
  filterUnmappedTypes: true
  mapping:
    # These are for lancache
    assetcdn.101.arenanetworks.com: 10.0.0.YY
    assetcdn.102.arenanetworks.com: 10.0.0.YY
    assetcdn.103.arenanetworks.com: 10.0.0.YY
    blizzard.vo.llnwd.net: 10.0.0.YY
    blzddist1-a.akamaihd.net: 10.0.0.YY
    blzddist2-a.akamaihd.net: 10.0.0.YY
    blzddist3-a.akamaihd.net: 10.0.0.YY
    cdn.blizzard.com: 10.0.0.YY
    dist.blizzard.com: 10.0.0.YY
    dist.blizzard.com.edgesuite.net: 10.0.0.YY
    edge.blizzard.top.comcast.net: 10.0.0.YY
    level3.blizzard.com: 10.0.0.YY
    nydus.battle.net: 10.0.0.YY
    cdn-11.eft-store.com: 10.0.0.YY
    cl-453343cd.gcdn.co: 10.0.0.YY
    cdn-eu1.homecomingservers.com: 10.0.0.YY
    cdn-na1.homecomingservers.com: 10.0.0.YY
    cdn-na2.homecomingservers.com: 10.0.0.YY
    cdn-na3.homecomingservers.com: 10.0.0.YY
    pls.patch.daybreakgames.com: 10.0.0.YY
    cdn1.epicgames.com: 10.0.0.YY
    cdn1.unrealengine.com: 10.0.0.YY
    cdn2.unrealengine.com: 10.0.0.YY
    cdn3.unrealengine.com: 10.0.0.YY
    cdn.unrealengine.com: 10.0.0.YY
    download2.epicgames.com: 10.0.0.YY
    download3.epicgames.com: 10.0.0.YY
    download4.epicgames.com: 10.0.0.YY
    download.epicgames.com: 10.0.0.YY
    epicgames-download1.akamaized.net: 10.0.0.YY
    fastly-download.epicgames.com: 10.0.0.YY
    cdn.zaonce.net: 10.0.0.YY
    filedelivery.nexusmods.com: 10.0.0.YY
    level3.nwhttppatch.crypticstudios.com: 10.0.0.YY
    ccs.cdn.wup.shop.nintendo.net: 10.0.0.YY
    ccs.cdn.wup.shop.nintendo.net.edgesuite.net: 10.0.0.YY
    ecs-lp1.hac.shop.nintendo.net: 10.0.0.YY
    geisha-wup.cdn.nintendo.net: 10.0.0.YY
    geisha-wup.cdn.nintendo.net.edgekey.net: 10.0.0.YY
    hac.lp1.d4c.nintendo.net: 10.0.0.YY
    hac.lp1.eshop.nintendo.net: 10.0.0.YY
    idbe-wup.cdn.nintendo.net: 10.0.0.YY
    idbe-wup.cdn.nintendo.net.edgekey.net: 10.0.0.YY
    receive-lp1.dg.srv.nintendo.net: 10.0.0.YY
    wup.eshop.nintendo.net: 10.0.0.YY
    wup.shop.nintendo.net: 10.0.0.YY
    cdn-patch.swtor.com: 10.0.0.YY
    lvlt.cdn.ea.com: 10.0.0.YY
    origin-a.akamaihd.net: 10.0.0.YY
    patchcdn.pathofexile.com: 10.0.0.YY
    apac-sg.nexusbytes.ren-x.com: 10.0.0.YY
    apac-tyo.nexusbytes.ren-x.com: 10.0.0.YY
    eu-lux.buyvm.ren-x.com: 10.0.0.YY
    eu-nl.nexusbytes.ren-x.com: 10.0.0.YY
    eu-uk.nexusbytes.ren-x.com: 10.0.0.YY
    rxp-de1.ts3-server.ch: 10.0.0.YY
    us-chi2.cncirc.net: 10.0.0.YY
    us-chi.racknerd.ren-x.com: 10.0.0.YY
    us-dal.boomerhost.ren-x.com: 10.0.0.YY
    us-la.cncfps.com: 10.0.0.YY
    us-lv2.cncirc.net: 10.0.0.YY
    us-lv.buyvm.ren-x.com: 10.0.0.YY
    us-mia.buyvm.ren-x.com: 10.0.0.YY
    us-nj.shockhosting.ctgamehosts.uk: 10.0.0.YY
    us-ny.buyvm.ren-x.com: 10.0.0.YY
    us-phx.speedy.ren-x.com: 10.0.0.YY
    us-va.ovh.ctgamehosts.uk: 10.0.0.YY
    dyn.riotcdn.net: 10.0.0.YY
    l3cdn.riotgames.com: 10.0.0.YY
    riotgamespatcher-a.akamaihd.net: 10.0.0.YY
    riotgamespatcher-a.akamaihd.net.edgesuite.net: 10.0.0.YY
    worldwide.l3cdn.riotgames.com: 10.0.0.YY
    patches.rockstargames.com: 10.0.0.YY
    gs2.sonycoment.loris-e.llnwd.net: 10.0.0.YY
    gs2.ww.prod.dl.playstation.net: 10.0.0.YY
    gs2.ww.prod.dl.playstation.net.edgesuite.net: 10.0.0.YY
    gs2-ww-prod.psn.akadns.net: 10.0.0.YY
    gs-sec.ww.np.dl.playstation.net: 10.0.0.YY
    playstation4.sony.akadns.net: 10.0.0.YY
    theia.dl.playstation.net: 10.0.0.YY
    tmdb.np.dl.playstation.net: 10.0.0.YY
    lancache.steamcontent.com: 10.0.0.YY
    cdn.ubi.com: 10.0.0.YY
    live.patcher.elderscrollsonline.com: 10.0.0.YY
    content.warframe.com: 10.0.0.YY
    dl2.wargaming.net: 10.0.0.YY
    dl-wot-ak.wargaming.net: 10.0.0.YY
    dl-wot-cdx.wargaming.net: 10.0.0.YY
    dl-wot-gc.wargaming.net: 10.0.0.YY
    dl-wot-se.wargaming.net: 10.0.0.YY
    dl-wowp-ak.wargaming.net: 10.0.0.YY
    dl-wowp-cdx.wargaming.net: 10.0.0.YY
    dl-wowp-gc.wargaming.net: 10.0.0.YY
    dl-wowp-se.wargaming.net: 10.0.0.YY
    dl-wows-ak.wargaming.net: 10.0.0.YY
    dl-wows-cdx.wargaming.net: 10.0.0.YY
    dl-wows-gc.wargaming.net: 10.0.0.YY
    dl-wows-se.wargaming.net: 10.0.0.YY
    wg.gcdn.co: 10.0.0.YY
    wgus-wotasia.wargaming.net: 10.0.0.YY
    wgus-woteu.wargaming.net: 10.0.0.YY
    amupdatedl2.microsoft.com: 10.0.0.YY
    amupdatedl3.microsoft.com: 10.0.0.YY
    amupdatedl4.microsoft.com: 10.0.0.YY
    amupdatedl5.microsoft.com: 10.0.0.YY
    amupdatedl.microsoft.com: 10.0.0.YY
    dl.delivery.mp.microsoft.com: 10.0.0.YY
    do.dsp.mp.microsoft.com: 10.0.0.YY
    microsoft.com.edgesuite.net: 10.0.0.YY
    update.microsoft.com: 10.0.0.YY
    windowsupdate.com: 10.0.0.YY
    assets1.xboxlive.com: 10.0.0.YY
    assets1.xboxlive.com.nsatc.net: 10.0.0.YY
    assets2.xboxlive.com: 10.0.0.YY
    d1.xboxlive.com: 10.0.0.YY
    xbox-mbr.xboxlive.com: 10.0.0.YY
    xvcf1.xboxlive.com: 10.0.0.YY
    xvcf2.xboxlive.com: 10.0.0.YY

conditional:
  fallbackUpstream: false
  mapping:
# Home redirects
    home.local: 10.0.0.XX
    home.net: 10.0.0.XX
    0.0.10.in-addr.arpa: 10.0.0.XX
# Redirect netflix for AAAA stripping
    netflix.com: 10.0.0.ZZ
    netflix.net: 10.0.0.ZZ
    nflxext.com: 10.0.0.ZZ
    nflximg.net: 10.0.0.ZZ
    nflximg.com: 10.0.0.ZZ
    nflxvideo.net: 10.0.0.ZZ
    nflxso.net: 10.0.0.ZZ
    nflxsearch.net: 10.0.0.ZZ

0 replies

kbrierly · 2022-12-02T00:17:13Z

kbrierly
Dec 2, 2022
Author

disabling ede seems to have made the SEGV's stop for time being. will report in if it still crashes.

0 replies

0xERR0R · 2022-12-02T09:12:48Z

0xERR0R
Dec 2, 2022
Maintainer

The error was in the EDE resolver. This panic occurs if some error (e.g. timeout, network error etc) in the resolution pipeline will be thrown. Was fixed in #778

1 reply

kbrierly Dec 2, 2022
Author

Thanks for fixing it!

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Blocky Crashing with SEGV #776

{{title}}

Replies: 4 comments 3 replies

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Blocky Crashing with SEGV #776

kbrierly Dec 1, 2022

Replies: 4 comments · 3 replies

0xERR0R Dec 1, 2022 Maintainer

kbrierly Dec 1, 2022 Author

kbrierly Dec 1, 2022 Author

kbrierly Dec 1, 2022 Author

kbrierly Dec 2, 2022 Author

0xERR0R Dec 2, 2022 Maintainer

kbrierly Dec 2, 2022 Author

kbrierly
Dec 1, 2022

Replies: 4 comments 3 replies

0xERR0R
Dec 1, 2022
Maintainer

kbrierly Dec 1, 2022
Author

kbrierly Dec 1, 2022
Author

kbrierly
Dec 1, 2022
Author

kbrierly
Dec 2, 2022
Author

0xERR0R
Dec 2, 2022
Maintainer

kbrierly Dec 2, 2022
Author