Commit Graph

683 Commits

Author SHA1 Message Date
Mark Andrews
fb4529baa2 bracket mismatch; window openssl version check 2015-12-06 23:08:14 +11:00
Mark Andrews
9168a21871 4270. [security] Update allowed OpenSSL versions as named is
potentially vulnerable to CVE-2015-3193.

(cherry picked from commit 10d7ab44cc)
2015-12-04 10:29:13 +11:00
Evan Hunt
5faabe4b61 [v9_10] mention --enable-full-report in config summary output 2015-12-02 14:03:18 -08:00
Evan Hunt
fbf5b36b69 [v9_10] fix python script versions
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
2015-11-08 21:36:27 -08:00
Evan Hunt
db67a07ab8 [v9_10] isc_atomic_storeq()/stats improvements
4248.	[func]		Add an isc_atomic_storeq() function, use it in
			stats counters to improve performance.
			[RT #39972] [RT #39979]
2015-10-28 22:19:58 -07:00
Evan Hunt
ed3f67b837 [v9_10] fix statschannel with no libjson
4246.	[test]		Ensure the statschannel system test runs when BIND
			is not built with libjson. [RT #40944]

(cherry picked from commit aa9b64060f)
2015-10-28 21:07:46 -07:00
Mark Andrews
c791d1ca39 use /usr/local/share/xsl/docbook-ns on freebsd 2015-10-07 15:05:10 +11:00
Evan Hunt
cb2b92bcd0 [v9_10] upgrade doc toolchain
4237.	[doc]		Upgraded documentation toolchain to use DocBook 5
			and dblatex. [RT #40766]
2015-10-05 22:00:42 -07:00
Mark Andrews
2927965e50 address linking issues
(cherry picked from commit 1a0e5b0504)
2015-09-30 12:40:59 +10:00
Mar Andrews
e53155e038 4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
shared libraries. [RT #39557]

(cherry picked from commit 87e7d08a8b)
2015-09-30 01:58:16 +10:00
Evan Hunt
e62bd7e975 [v9_10] add debian/ubuntu path for docbook-xsl to configure 2015-09-14 20:20:15 -07:00
Mark Andrews
dad0cbeed4 check for libxml2 2015-08-18 22:20:28 +10:00
Evan Hunt
cbfa8eddc5 [v9_10] better reporting of xml/json unavailability
- error if "configure --with-libxml2" but the library isn't available
- log a warning on startup if only JSON or only XML can be served
2015-08-12 21:59:36 -07:00
Evan Hunt
83d0b1ab69 [v9_10] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:55:31 -07:00
Mukund Sivaraman
f69f188b90 Fix a bug printing zone names with '/' character in XML and JSON stats (#39873)
(cherry picked from commit 08f0129732)

Conflicts:
	bin/tests/system/statistics/clean.sh
2015-06-29 18:46:36 +05:30
Mark Andrews
9cc1d6b878 4133. [port] Update how various json libraries are handled.
[RT #39646]

(cherry picked from commit 8a9bac8dec)
2015-06-05 10:17:10 +10:00
Mark Andrews
c35424ca79 all of NEED*PRINT are needed if %z is not supported
(cherry picked from commit 7507c1826f)
2015-05-22 22:14:01 +10:00
Mark Andrews
129559e747 add print.o/print.c forn ISC_PLATFORM_NEEDPRINTF abd ISC_PLATFORM_NEEDFPRINTF
(cherry picked from commit 83a938d0f9)
2015-05-22 13:33:06 +10:00
Evan Hunt
54b00a777b [v9_10] add %z format options to printf
4123.	[port]		Added %z (size_t) format options to the portable
			internal printf/sprintf implementation. [RT #39586]

(cherry picked from commit cadf8d687b)
2015-05-21 14:55:38 -07:00
Evan Hunt
83de958f8f [v9_10] improve readline support
4106.	[port]		Improve readline support. [RT #38938]
2015-04-17 15:32:51 -07:00
Francis Dupont
1648365e62 fixed test == bugs for PYTHON 2015-04-17 05:06:06 +02:00
Mark Andrews
d48dec46f2 4099. [port] clang: make unknown commandline options hard errors
when determining what options are supported.
                        [RT #39273]

(cherry picked from commit e840f92bfb)
2015-04-15 12:40:17 +10:00
Mark Andrews
715f98823b 4095. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
[RT #38828]

(cherry picked from commit 77b179cbbe)
2015-03-09 23:07:49 +11:00
Mukund Sivaraman
5ec24730f9 Update win32 configure for --enable-querytrace (#37520)
Also enable querytrace when --enable-developer is specified.

(cherry picked from commit 84f95ddb25)
2015-03-02 12:59:13 +05:30
Evan Hunt
53fa9f3ff4 [v9_10] include dso.h when testing DSO_METHOD_dlfcn 2015-02-27 09:05:21 -08:00
Mukund Sivaraman
b83c20df65 Add a --enable-querytrace configure switch for very verbose query tracelogging (#37520)
(cherry picked from commit 1783676a64)
2015-02-26 16:52:38 +05:30
Evan Hunt
1ef4faabd5 [v9_10] clean up gcc -Wshadow warnings
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
2015-01-20 13:43:35 -08:00
Evan Hunt
ffd802e3e6 [v9_10] backport gperftools
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
2015-01-10 00:17:46 -08:00
Tinderbox User
167beb6aa5 update copyright notice / whitespace 2015-01-08 23:45:50 +00:00
Evan Hunt
b21229de09 [v9_10] clean up release note stylesheets 2015-01-07 17:29:11 -08:00
Mark Andrews
af0cbd44b3 4025. [port] bsdi: failed to build. [RT #38047]
(cherry picked from commit 00bb9b88cecf7e2c365c9f008c049da3802ac415)
2014-12-19 11:56:02 +11:00
Evan Hunt
75edd46095 [v9_10] fix a problem with autoheader 2.69 2014-12-17 14:19:28 -08:00
Francis Dupont
d8ee3303a9 Hardened OpenSSL digest/HMAC calls [RT #37944] 2014-12-02 12:42:49 +01:00
Evan Hunt
3b8f8012eb [v9_10] [rt37398] version string in ARM page footers
3986.	[doc]		Add the BIND version number to page footers
			in the ARM. [RT #37398]

(cherry picked from commit dd66b77417)
2014-10-20 23:34:58 -07:00
Evan Hunt
4186404ffc [v9_10] include relnotes in doc
3982.	[doc]		Include release notes in product documentation.
			[RT #37272]

(cherry picked from commit 90e0af6bc6)
2014-10-20 12:50:35 -07:00
Evan Hunt
aa430f55f4 [v9_10] [rt36786] use INSTALL_PROGRAM for shared libs
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]

(cherry picked from commit f687e639f0)
2014-09-05 10:24:54 -07:00
Evan Hunt
213d0a9473 [v9_10] improve python probing
3946.	[cleanup]	Improved "configure" search for a python interpreter.
			[RT #36992]

(cherry picked from commit 523f3d6302)
2014-09-05 10:20:52 -07:00
Evan Hunt
9f6a6d24dc [v9_10] [rt37057] server-id tests
3944.	[test]		Added a regression test for "server-id". [RT #37057]

(cherry picked from commit c9e976dc43)
2014-09-05 09:59:56 -07:00
Evan Hunt
77f18b86f0 [v9_10] Revert "[v9_10] correct libgeoip check in configure"
This reverts commit 7500162962.

(Not needed since this branch doesn't have ECS support.)
2014-09-03 21:42:18 -07:00
Evan Hunt
7500162962 [v9_10] correct libgeoip check in configure 2014-09-03 21:37:45 -07:00
Mark Andrews
488fd78cd0 3923. [bug] Sanity check the xml2-config output. [RT #22246]
(cherry picked from commit 53f91cbd80)
2014-08-22 16:11:03 +10:00
Mark Andrews
136fd1daf9 [rt36039]
3902.   bug]            liblwres wasn't handling link-local addresses in
                        nameserver clauses in resolv.conf. [RT #36039]

(cherry picked from commit 70be388974)
2014-07-30 23:33:02 +10:00
Mark Andrews
9ecfad05e1 allow -Werror to be enabled; turn on -Werror by default with --enable-developer
(cherry picked from commit 2be0f12aaf)
2014-07-08 15:57:36 +10:00
Mark Andrews
15ccca1fdb 3889. [port] hurd: configure fixes as per:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540

(cherry picked from commit 89119e3caf)
2014-06-26 11:47:41 +10:00
Evan Hunt
06ad948626 [v9_10] enable libseccomp system call filtering
3851.	[func]		Allow libseccomp based system-call filtering
			on Linux; use "configure --enable-seccomp" to
			turn it on.  Thanks to Loganaden Velvindron for
			the contribution. [RT #35347]
2014-06-19 15:48:28 -07:00
Evan Hunt
a71b8efb04 [v9_10] update gitignore files; use rev-parse to get srcid
(cherry picked from commit a4e76a630e)
2014-06-17 13:49:44 -07:00
Mark Andrews
a4b09947f6 3858. [bug] Disable GCC 4.9 "delete null pointer check".
[RT #35968]

(cherry picked from commit 603a787083)
2014-05-23 11:26:29 +10:00
Mark Andrews
779885fc06 3856. [bug] Configuring libjson without also configuring libxml
resulting in a REQUIRE assertion when retrieving
                        statistics using json. [RT #36009]
2014-05-21 12:06:31 +10:00
Evan Hunt
177afac612 [v9_10] report unrecognized configure options
3854.	[cleanup]	Report unrecognized options, if any, in the final
                        configure summary. [RT #36014]
2014-05-20 15:31:34 -07:00
Evan Hunt
b674db54ca [v9_10] check for arc4random_addrandom()
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]

(cherry picked from commit 1ea6e09c37)
2014-05-07 08:58:47 -07:00