Commit Graph

7781 Commits

Author SHA1 Message Date
Evan Hunt
34f649fa22 [v9_11] auto-generate named.conf.docbook
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
2017-04-21 16:30:51 -07:00
Evan Hunt
32ceffe2d8 [v9_11] typo in rndc doc
(cherry picked from commit b9e736f4f6)
2017-04-21 13:16:51 -07:00
Mukund Sivaraman
fec9247b8f Validate glue before adding it to the additional section (#45062)
(cherry picked from commit b0dbcba2d2)
2017-04-21 15:46:07 +05:30
Tinderbox User
c32570b319 regen v9_11 2017-04-21 01:09:10 +00:00
Evan Hunt
62a6147e51 [v9_11] python 3 compatibility
4591.	[port]		Addressed some python 3 compatibility issues.
			Thanks to Ville Skytta. [RT #44955] [RT #44956]

(cherry picked from commit 6d19d975c6)
2017-04-20 17:30:58 -07:00
Tinderbox User
d63ae51ba3 update copyright notice / whitespace 2017-04-20 23:46:08 +00:00
Evan Hunt
bf053e878c [v9_11] correct a mistake in nsupdate help
(cherry picked from commit bdbdc69a75)
2017-04-20 16:17:36 -07:00
Evan Hunt
9115769563 [v9_11] nsupdate: send tkey queries to the right server
4588.	[bug]		nsupdate could send queries for TKEY to the wrong
			server when using GSSAPI. Thanks to Tomas Hozza.
			[RT #39893]

(cherry picked from commit 66b71679b7)
2017-04-20 09:29:33 -07:00
Mark Andrews
7863128078 fix 'minimal-any yes;' to force TCP / UDP
(cherry picked from commit 706c6ac5e2)
2017-04-20 21:06:02 +10:00
Mark Andrews
fd0d60b3a0 4587. [bug] named-checkzone failed to handle occulted data below
DNAMEs correctly. [RT #44877]

(cherry picked from commit 600b027731)
2017-04-20 13:29:53 +10:00
Mark Andrews
3001a1b4e6 4586. [func] dig, host and nslookup now use TCP for ANY queries.
[RT #44687]

(cherry picked from commit 033a59090c)
2017-04-20 13:24:26 +10:00
Mark Andrews
1bce43adcc 4585. [port] win32: Set CompileAS value. [RT #42474]
(cherry picked from commit 3742338a7b)
2017-04-20 12:42:39 +10:00
Mark Andrews
52cae869e0 4574. [bug] Dig leaked memory with multiple +subnet options.
[RT #44683]

(cherry picked from commit af2b20ee3f)
2017-04-20 10:29:25 +10:00
Tinderbox User
c52dde9229 regen v9_11 2017-04-12 01:09:13 +00:00
Tinderbox User
5a0fe4f483 update copyright notice / whitespace 2017-04-11 23:46:04 +00:00
Evan Hunt
672c06580e [v9_11] correct -M in synopsis
(cherry picked from commit a477a025d5)
2017-04-11 12:24:36 -07:00
Tinderbox User
48900a8f62 regen v9_11 2017-03-26 01:09:12 +00:00
Tinderbox User
7d169212b4 update copyright notice / whitespace 2017-03-25 23:46:04 +00:00
Evan Hunt
cf710c81ae [v9_11] document that delv should be used instead of sigchase
(cherry picked from commit db93f3d4b3)
2017-03-25 12:23:14 -07:00
Tinderbox User
003e956a96 update copyright notice / whitespace 2017-03-24 23:46:02 +00:00
Mark Andrews
8c31a25f3f 4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
2017-03-25 02:01:10 +11:00
Tinderbox User
3be4330b77 update copyright notice / whitespace 2017-03-16 23:47:44 +00:00
Mark Andrews
8bcd80824c 4581. [port] Linux: Add getpid and getrandom to the list of system
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
2017-03-16 11:23:36 +11:00
Mark Andrews
d81a3ca82c adjust range
(cherry picked from commit 9301c35ae6)
2017-03-02 12:34:17 +11:00
Mark Andrews
0e5fbd523a allow more time for the IPv6 transfer attemt to timeout and fall over to IPv4
(cherry picked from commit d411448ceb)
2017-03-02 12:19:55 +11:00
Tinderbox User
f9ecaf8a4a regen v9_11 2017-03-01 02:43:28 +00:00
Tinderbox User
d1bc66f4df update copyright notice / whitespace 2017-03-01 01:54:03 +00:00
Mark Andrews
c006cfc5a2 Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
2017-03-01 12:02:39 +11:00
Tinderbox User
cb9582623e update copyright notice / whitespace 2017-02-28 23:45:56 +00:00
Mark Andrews
cfeb569d54 fix nsupdate reference
(cherry picked from commit 02fa49a4d8)
2017-03-01 08:34:26 +11:00
Mark Andrews
b81977ae70 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:22:53 +11:00
Mark Andrews
9ecedaea58 4571. [bug] Out-of-tree builds of backtrace_test failed.
(cherry picked from commit 3e48466e0a)
2017-02-06 13:46:30 +11:00
Tinderbox User
1617002c78 update copyright notice / whitespace 2017-02-04 23:46:08 +00:00
Evan Hunt
fc8c8966c9 [v9_11] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:43:32 -08:00
Evan Hunt
07b7a3eade [v9_11] store local and remote addresses in dnstap
4569.	[func]		Store both local and remote addresses in dnstap
			logging, and modify dnstap-read output format to
			print them. [RT #43595]

(cherry picked from commit 650b5e7592)
2017-02-03 17:11:06 -08:00
Tinderbox User
48ba8af30c update copyright notice / whitespace 2017-02-03 23:46:00 +00:00
Mark Andrews
a4240242cd remove outdated cvs $Id strings 2017-02-03 18:39:57 +11:00
Mark Andrews
4ed920490a wait longer for the transfer to complete
(cherry picked from commit 04ed4dd4db)
2017-02-03 17:52:05 +11:00
Evan Hunt
6ec6741fe7 [v9_11] Revert "fixed build failure when building without LMDB"
This reverts commit d9788e03ad.
2017-02-02 11:28:53 -08:00
Evan Hunt
d9788e03ad [v9_11] fixed build failure when building without LMDB
(cherry picked from commit 8acbf7e4de99bbc4867b02ed87dbbc3761a57ca5)
2017-02-02 11:24:57 -08:00
Tinderbox User
4269c36906 update copyright notice / whitespace 2017-01-31 23:46:16 +00:00
Evan Hunt
781f6daa74 [v9_11] change 4558 was incomplete
(cherry picked from commit cd668ea57f)
2017-01-30 14:11:17 -08:00
Tinderbox User
adabefa84c regen v9_11 2017-01-25 01:08:40 +00:00
Tinderbox User
5688a47c15 update copyright notice / whitespace 2017-01-24 23:45:58 +00:00
Mark Andrews
832f5803f6 4560. [bug] mdig: add -m option to enable memory debugging rather
than have in on all the time. [RT #44509]

4559.   [bug]           Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
                        was turned off.  [RT #44509]

(cherry picked from commit 25da687db7)
2017-01-24 17:49:08 +11:00
Mark Andrews
22e3ffcf2c 4556. [security] Combining dns64 and rpz can result in dereferencing
a NULL pointer (read).  (CVE-2017-3135) [RT#44434]

(cherry picked from commit 5abe80ef13)
2017-01-24 09:54:54 +11:00
Tinderbox User
2f4e3e45d6 update copyright notice / whitespace 2017-01-19 23:46:07 +00:00
Mark Andrews
eb032a17ef whitespace
(cherry picked from commit bf0b649993)
2017-01-19 13:16:35 +11:00
Tinderbox User
00860eece0 update copyright notice / whitespace 2017-01-13 23:46:05 +00:00
Mark Andrews
88840c01be remove false negatives (add eol to grep patterns; add missing ret=0)
(cherry picked from commit bcfaac260a)
2017-01-13 16:00:17 +11:00