Commit Graph
28829 Commits
Author SHA1 Message Date
Evan Hunt 15d57a425e Merge tag 'v9_11_22' into v9_11
BIND 9.11.22
2020-08-20 12:10:47 -07:00
Ondřej Surý 2c6693c73f Merge branch 'marka-fuzz-consolidated-v9_16-v9_11' into 'v9_11'
Consolidated fuzz fixes (v9.11)

See merge request isc-projects/bind9!3979
2020-08-18 10:31:07 +00:00
Mark AndrewsandOndřej Surý 4236972de4 A6: return FORMERR in fromwire if bits are non zero.
oss_fuzz: Issue 24864: bind9:dns_rdata_fromwire_text_fuzzer: Overwrites-const-input in dns_rdata_fromwire_text_fuzzer

(cherry picked from commit 8452404bd7)
(cherry picked from commit d8a57d32b1)
2020-08-18 11:36:06 +02:00
Mark AndrewsandOndřej Surý 80bc4fc1ea RRSIG: reject records with empty SIG section
(cherry picked from commit f6d7b8c20d)
(cherry picked from commit 6b1675a62c)
2020-08-18 11:33:32 +02:00
Michal Nowak 3a057967c5 Merge branch 'mnowak/add-missing-only-schedules-v9_11' into 'v9_11'
[v9_11] Add missing 'only:schedules' to tarball-create job

See merge request isc-projects/bind9!3977
2020-08-18 09:28:52 +00:00
Michal Nowak b3c80fafe0 Add missing 'only:schedules' to tarball-create job
Missing 'only:schedules' prevents schedule jobs to run.
Regressed in 2b5007ef1a.
2020-08-18 11:21:32 +02:00
Michal Nowak 365575b5cb Merge branch 'mnowak/gcovr-v9_11' into 'v9_11'
[v9_11] Report coverage with gcovr

See merge request isc-projects/bind9!3974
2020-08-17 15:30:34 +00:00
Michal Nowak 5a6e2bc26e Report coverage with gcovr 2020-08-17 17:09:16 +02:00
Michal Nowak 0b1025912b Merge branch 'mnowak/broaden-abi-check-scope-v9_11' into 'v9_11'
[v9_11] Broaden scope of abi-check

See merge request isc-projects/bind9!3972
2020-08-17 13:17:37 +00:00
Michal Nowak f9cb545cce Broaden scope of abi-check
For abi-check we should use as broad 'configure' options as possible.

(cherry picked from commit 8e43f5e860)
2020-08-17 15:15:04 +02:00
Mark Andrews a0d1680ae0 Merge branch 'marka-fuzz-fixes-v9_11' into 'v9_11'
Marka fuzz fixes v9 11

See merge request isc-projects/bind9!3958
2020-08-13 15:11:46 +00:00
Mark Andrews a0ec8cfc93 Add CHANGES note
(cherry picked from commit 80d69ba04c)
2020-08-14 00:30:09 +10:00
Mark Andrews 9d4feae236 X25: Check that record is all ASCII digits
(cherry picked from commit 7e49689746)
2020-08-14 00:27:24 +10:00
Mark Andrews 73602718f9 WKS: reject records with zero octets at the end of the bitmap
(cherry picked from commit 9d446142d8)
2020-08-14 00:26:42 +10:00
Mark Andrews 6cabbdae97 TLSA: fix fromwire length checks
(cherry picked from commit 3429c35f52)
2020-08-14 00:25:41 +10:00
Mark Andrews 0bc76daaf0 SIG: reject records with a zero length signature
(cherry picked from commit 9b93e5d684)
2020-08-14 00:25:08 +10:00
Mark Andrews f266bb2f61 NXT: fix fromwire bitmap checks
(cherry picked from commit 73dd849655)
2020-08-14 00:25:04 +10:00
Mark Andrews 712d3a50df NSEC3PARAM: check that saltlen is consistent with the rdata length
(cherry picked from commit 7dc8e720ff)
2020-08-14 00:24:25 +10:00
Mark Andrews 26f036cccc NSEC3: reject records with a zero length hash field
(cherry picked from commit 031ee9e279)
2020-08-14 00:23:47 +10:00
Mark Andrews 73341adc34 IPSECKEY: require non-zero length public keys
(cherry picked from commit d7f7014803)
2020-08-14 00:23:07 +10:00
Mark Andrews 1ca878708f CERT: reject records with a empty certificate field
(cherry picked from commit a238f37239)
2020-08-14 00:22:04 +10:00
Mark Andrews 74ee0ed911 Get rid of type 'RESERVED0'.
(cherry picked from commit 3c492b3ef1)
2020-08-14 00:21:23 +10:00
Mark Andrews af4dd77a44 base32_decode*() could incorrectly decode a input.
base32_decode_char() added a extra zero octet to the output
if the fifth character was a pad character.  The length
of octets to copy to the output was set to 3 instead of 2.

(cherry picked from commit 6c7e50c267)
2020-08-14 00:16:45 +10:00
Michal Nowak 6f1851dd56 Merge branch 'mnowak/fix-core-dumps-were-found-line-v9_11' into 'v9_11'
[v9_11] Make sure .txt files are not identified as crashed test

See merge request isc-projects/bind9!3948
2020-08-12 10:54:57 +00:00
Michal Nowak d79c96da01 Make sure .txt files are not identified as crashed test
Previously .txt files with full backtrace may be identified as a
crashed test:

    I:Core dumps were found for the following system tests:
    I:	 core.19948-backtrace.txt
    I:   shutdown

Now .txt files are removed from the list.

Change 'run.sh.in' to match the core matching pattern in
'testsummary.sh'.

(cherry picked from commit c2dcd95966)
(cherry picked from commit 01119ac4f9)
2020-08-12 09:56:16 +02:00
Mark Andrews e0e2083659 Merge branch '2045-readline-rltypedefs-h-35-22-error-this-function-declaration-is-not-a-prototype-on-netbsd-9-v9_11' into 'v9_11'
Resolve "readline/rltypedefs.h:35:22: error: this function declaration is not a prototype on NetBSD 9"

See merge request isc-projects/bind9!3946
2020-08-12 00:27:41 +00:00
Mark Andrews 1cc06636fc Ensure rl_message() gets prototype.
(cherry picked from commit fd126553d4)
2020-08-12 09:46:31 +10:00
Mark Andrews fd370a250d Stop deprecated functions being defined
(cherry picked from commit 1532a34658)
2020-08-12 09:42:34 +10:00
Michal Nowak a1efb14ac5 Merge branch 'mnowak/run-tarball-tests-in-schedule-v9_11' into 'v9_11'
[v9_11] Run unit and system tarball tests on schedules

See merge request isc-projects/bind9!3944
2020-08-11 15:06:56 +00:00
Michal Nowak 2b5007ef1a Run unit and system tarball tests on schedules
To prevent problems with unit and system tarball tests being revealed
during release process, run these tests on schedules.

(cherry picked from commit 439fe9bc3c)
2020-08-11 17:03:21 +02:00
Mark Andrews 35fd455956 Merge branch '2067-nta-related-crash-in-checkbogus-after-an-rndc-reload-v9_11' into 'v9_11'
Address use after free between view, resolver and nta.

See merge request isc-projects/bind9!3941
2020-08-11 05:29:20 +00:00
Mark Andrews a3c2ad2ee5 Address use after free between view, resolver and nta.
Hold a weak reference to the view so that it can't go away while
nta is performing its lookups.  Cancel nta timers once all external
references to the view have gone to prevent them triggering new work.

(cherry picked from commit 0b2555e8cf)
2020-08-11 14:52:15 +10:00
Mark Andrews f58d2312e8 Merge branch '2046-check-isc_mutex_init' into 'v9_11'
Resolve "lib/isc/nothreads/include/isc/mutex.h:20:12: error: right-hand operand of comma expression has no effect"

See merge request isc-projects/bind9!3925
2020-08-11 01:46:46 +00:00
Mark Andrews 3783de2ed0 Don't use isc_thread_key_* when threads are disabled. 2020-08-11 01:19:02 +00:00
Mark Andrews f155ff75e4 Check isc_mutex_init() return values 2020-08-11 01:19:02 +00:00
Mark Andrews 10736891e8 Merge branch '2068-spnego-c-1430-2-error-len-may-be-used-uninitialized-in-this-function-on-arm-v9_11' into 'v9_11'
Silence 'may be used uninitialized'

See merge request isc-projects/bind9!3933
2020-08-08 08:01:02 +00:00
Mark Andrews 389c121597 Silence 'may be used uninitialized'
(cherry picked from commit 8a4dd25562)
2020-08-08 17:25:20 +10:00
Tinderbox User 6a05a966f3 Merge branch 'prep-release' into v9_11_22-release v9.11.22 2020-08-06 10:05:20 +00:00
Tinderbox User 7427b1f31c prep 9.11.22 2020-08-06 10:05:20 +00:00
Michał Kępień 9455337c1d Merge branch 'michal/prepare-release-notes-for-bind-9.11.22' into 'security-v9_11'
Prepare release notes for BIND 9.11.22

See merge request isc-private/bind9!203
2020-08-06 08:56:06 +00:00
Michał Kępień 64ef82a03c Prepare release notes for BIND 9.11.22 2020-08-06 10:46:53 +02:00
Michał Kępień 98e3fd1966 Add release note for #1976 2020-08-06 10:46:53 +02:00
Michał Kępień d418cf91b9 Add release note for #1619 2020-08-06 10:46:53 +02:00
Michał Kępień 61d217cc0d Tweak and reword recent CHANGES entries 2020-08-06 10:46:53 +02:00
Michał Kępień 8e919cf6e4 Merge branch '2055-grant-subdomain-fix-v9_11' into 'security-v9_11'
[CVE-2020-8624] Fix processing of "update-policy" rules of type "subdomain" (v9.11)

See merge request isc-private/bind9!198
2020-08-05 13:58:01 +00:00
Mark AndrewsandMichał Kępień 1338fda1d8 Add CHANGES and release note for GL #2055 2020-08-05 15:55:14 +02:00
Mark AndrewsandMichał Kępień 58e560beb5 Add a test for update-policy 'zonesub'
The new test checks that 'update-policy zonesub' is properly enforced.
2020-08-05 15:55:14 +02:00
Mark AndrewsandMichał Kępień 393e8f643c Add a test for update-policy 'subdomain'
The new test checks that 'update-policy subdomain' is properly enforced.
2020-08-05 15:55:14 +02:00
Mark AndrewsandMichał Kępień e4cccf9668 Update-policy 'subdomain' was incorrectly treated as 'zonesub'
resulting in names outside the specified subdomain having the wrong
restrictions for the given key.
2020-08-05 15:55:14 +02:00
Michał Kępień 0660b022fc Merge branch '2037-confidential-issue-v9_11' into 'security-v9_11'
[CVE-2020-8623]: Fix crash in pk11_numbits() with crafted packet when native-pkcs11 is used (v9.11)

See merge request isc-private/bind9!200
2020-08-05 13:54:19 +00:00