ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,440 Commits 589 Branches 805 Tags
5fa73dbdf03aeb2bcb751dd06a56f034b5cbe759
Commit Graph

26440 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan Hunt
5fa73dbdf0 CHANGES, release note 
(cherry picked from commit 9c492aba65c178f30baafeb5502013f95a9d5b9a)
(cherry picked from commit ecb90158b6)
 2018-07-13 13:33:29 -07:00
Evan Hunt
71779a7427 test case 
(cherry picked from commit 73486c13f743407a50d5bbadde90c949a696506f)
(cherry picked from commit 584a1cff8b)
 2018-07-13 13:33:11 -07:00
Evan Hunt
6185e8360b explicit DNAME query could trigger a crash if deny-answer-aliases was set 
(cherry picked from commit a21c3810d3453548cc05ae19995125dabea9ca9c)
(cherry picked from commit 6e187b8656)
 2018-07-13 13:33:09 -07:00
Evan Hunt
2fe4344de4 Merge branch 'prep-release-v9_11_4' into 'v9_11' 
prep 9.11.4

See merge request isc-projects/bind9!471
v9.11.4 		2018-07-03 02:56:55 -04:00
Tinderbox User
20f8b9a91f prep 9.11.4 2018-07-03 06:50:01 +00:00
Evan Hunt
644915b508 Merge branch 'fix-readme-v9_11' into 'v9_11' 
Fix README typo

See merge request isc-projects/bind9!464
 2018-07-02 20:18:08 -04:00
Evan Hunt
a4717005b1 9.11.4 was incorrectly referred to as 9.11.3 2018-07-02 17:14:25 -07:00
Evan Hunt
0de0733307 Merge branch 'prep-release-v9_11_4rc2' into 'v9_11' 
prep 9.11.4rc2

See merge request isc-projects/bind9!451
v9.11.4rc2 		2018-06-28 01:25:28 -04:00
Tinderbox User
3bbd725a2c prep 9.11.4rc2 2018-06-28 05:07:42 +00:00
Evan Hunt
2d46759916 Merge branch '339-issues-with-large-journal-entries-v9_11' into 'v9_11' 
Fix handling of large journal entries.

See merge request isc-projects/bind9!445
 2018-06-27 21:46:57 -04:00
Evan Hunt
470b8612b2 CHANGES, release note 
(cherry picked from commit 2aee33f412)
 2018-06-27 18:40:24 -07:00
Evan Hunt
65bf99c85a use ISC_INT32_MAX as maximum 2018-06-27 18:40:24 -07:00
Witold Kręcicki
e92d5421c3 Fallback to normal procedure if creating of ixfr-from-differences fails 
(cherry picked from commit b1254430df)
 2018-06-27 18:33:33 -07:00
Witold Kręcicki
1919f5c937 Fix some issues with large journal entries 
(cherry picked from commit 0db7130f2b)
 2018-06-27 18:33:32 -07:00
Mark Andrews
b5c16a8758 Merge branch '366-missing-dereference-in-require-statement-v9_11' into 'v9_11' 
Resolve "Missing dereference in REQUIRE statement?"

See merge request isc-projects/bind9!441
 2018-06-27 03:43:54 -04:00
Mark Andrews
6a52c54af6 cfg_parse_boolean's REQUIRE test for ret was incomplete. 
(cherry picked from commit f1ee5e4a16)
 2018-06-27 17:37:17 +10:00
Evan Hunt
06c0d3943c Merge branch '275-add-permanent-option-to-disable-server-side-cookies-v9_11' into 'v9_11' 
[v9_11]: Resolve "Provide a mechanism (build or runtime) to turn off server-side support for RFC7873"

See merge request isc-projects/bind9!414
 2018-06-26 18:25:19 -04:00
Ondřej Surý
a6887424ca Un-deprecate the answer-cookie option 2018-06-26 15:18:36 -07:00
Evan Hunt
19f4d8400b Merge branch '260-queries-with-empty-question-section-return-noerror-v9_12-v9_11' into 'v9_11' 
Resolve "Queries with empty question section (and otherwise query message of undetermined RDCLASS) return NOERROR instead of FORMERR"

See merge request isc-projects/bind9!436
 2018-06-26 17:50:32 -04:00
Evan Hunt
f07560a5be CHANGES 
(cherry picked from commit 2b075c2881)
(cherry picked from commit 07a0638c94)
 2018-06-26 14:44:18 -07:00
Mukund Sivaraman
49cd7552be return FORMERR when question section is empty if COOKIE is not present 
(cherry picked from commit 06d3106002)
(cherry picked from commit ed29b84e16)
 2018-06-26 14:44:18 -07:00
Ondřej Surý
7cf351710a Merge branch '180-fix-cmsgbuf-usage-v9_12-v9_11' into 'v9_11' 
Resolve "Intermittent recursive resolver issues [socket.c:2135]"

See merge request isc-projects/bind9!430
 2018-06-26 15:29:29 -04:00
Witold Kręcicki
5e375f8b52 Use completely static-sized buffers 
(cherry picked from commit 49f90025a0)
(cherry picked from commit 4007a9d020)
 2018-06-26 15:23:28 -04:00
Witold Kręcicki
cd7bf90a54 Fix socket cmsg buffer usage 
(cherry picked from commit d79be7dd5e)
(cherry picked from commit da63e95612)
 2018-06-26 15:23:28 -04:00
Ondřej Surý
b0bce3b530 Merge branch 'add-git-replay-merge-v9_11' into 'v9_11' 
Add git replay merge to v9 11

See merge request isc-projects/bind9!428
 2018-06-26 14:30:38 -04:00
Ondřej Surý
02a698bea7 Add git-replay-merge.sh script to v9_11 2018-06-26 20:24:03 +02:00
Evan Hunt
f01a2d9dc3 Merge branch '288-named-checkconf-does-not-recognize-errors-related-to-in-view-zones-v9_11' into 'v9_11' 
Resolve "named-checkconf does not recognize errors related to in-view zones"

See merge request isc-projects/bind9!425
 2018-06-26 14:01:57 -04:00
Mark Andrews
c45fb6d92a CHANGES, copyright 
(cherry picked from commit f7d346357e)
 2018-06-26 10:55:44 -07:00
Mark Andrews
316eebb699 construct a symtab of valid in-view targets then check that the target exists 
(cherry picked from commit e01a4bcb20)
 2018-06-26 10:53:59 -07:00
Michał Kępień
cb4861a8c4 Merge branch '321-only-request-permitted-capabilities-in-non-libcap-builds-v9_11' into 'v9_11' 
[v9_11] Only request permitted capabilities in non-libcap builds

See merge request isc-projects/bind9!418
 2018-06-26 08:03:28 -04:00
Michał Kępień
dec8ba34f7 Add CHANGES entry 
4979.	[bug]		Non-libcap builds were not checking whether all
			requested capabilities are present in the permitted
			capability set. [GL #321]

(cherry picked from commit 731b003854)
 2018-06-26 13:20:18 +02:00
Michał Kępień
4b0129f34b Only request permitted capabilities in non-libcap builds 
While libcap-enabled builds check whether any capability named requests
is within the permitted capability set, non-libcap builds just try
requesting them, which potentially causes a misleading error message to
be output ("Operation not permitted: please ensure that the capset
kernel module is loaded").  Ensure non-libcap builds also check whether
any requested capability is within the permitted capability set.

(cherry picked from commit 8c66f32e53)
 2018-06-26 13:19:58 +02:00
Evan Hunt
94d8ec0b21 Merge branch '247-log-the-remaining-v-info-at-startup' into 'v9_11' 
Resolve "Log the remaining -V info at startup"

Closes #247

See merge request isc-projects/bind9!249
 2018-06-25 15:18:23 -07:00
Mark Andrews
ffc58bede6 log the remaining -V info at startup 2018-06-25 15:18:18 -07:00
Mark Andrews
e49ab47924 Merge branch '343-casecompare-of-ninfo-tkey-txt-have-wrong-return-type-v9_11' into 'v9_11' 
Resolve "casecompare of NINFO, TKEY, TXT have wrong return type"

See merge request isc-projects/bind9!405
 2018-06-24 23:20:04 -04:00
Mark Andrews
236ab4c453 fix casecompare return type for ninfo, tkey, txt 
(cherry picked from commit 3ba1d1e43b)
 2018-06-25 13:10:06 +10:00
Mark Andrews
1d0bf01a90 Merge branch '356-client-cookie-is-being-hashed-twice-when-computing-the-dns-server-cookie-v9_11' into 'v9_11' 
Resolve "Client cookie is being hashed twice when computing the DNS server cookie."

See merge request isc-projects/bind9!402
 2018-06-22 03:52:40 -04:00
Mark Andrews
c61b0cbc65 4975. [bug] The server cookie computation for sha1 and sha256 did 
not match the method described in RFC 7873. [GL #356]

(cherry picked from commit 8755a249bc)
 2018-06-22 17:46:06 +10:00
Mark Andrews
d3982afe5c the client cookie was being hashed twice when computing the server cookie for sha1 and sha256 
(cherry picked from commit 4795f0ca89)
 2018-06-22 17:45:32 +10:00
Ondřej Surý
9fa93f8642 Merge branch 'release-v9_11_4rc1' into 'v9_11' 
Merge 9.11.4rc1 release into v9_11 branch

See merge request isc-projects/bind9!396
 2018-06-21 13:13:15 -04:00
Evan Hunt
a1690b24bc prepare 9.11.4rc1 2018-06-21 18:54:43 +02:00
Michał Kępień
ddafea197c Merge branch '341-constify-dns_rdata_tostruct-v9_11' into 'v9_11' 
[v9_11] constify dns_rdata_tostruct

See merge request isc-projects/bind9!381
 2018-06-15 03:34:50 -04:00
Mark Andrews
09776e3e54 Declare the 'rdata' argument for dns_rdata_tostruct() to be const 
(cherry picked from commit abb2fd1027)
 2018-06-15 08:52:41 +02:00
Ondřej Surý
c9203e48e2 Merge branch '309-fix-default-recursion-v9_11' into 'v9_11' 
Resolve "Recursion improperly allowed by default"

See merge request isc-projects/bind9!374
 2018-06-14 08:54:16 -04:00
Evan Hunt
b330bcb8a1 add a regression test for default allow-recursion settings 2018-06-14 14:47:11 +02:00
Evan Hunt
3d71785ef1 allow-recursion could incorrectly inherit from the default allow-query 2018-06-14 14:47:11 +02:00
Michał Kępień
cbed2a4602 Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_11' into 'v9_11' 
[v9_11] Fix DNAME handling in DNSSEC tools

See merge request isc-projects/bind9!364
 2018-06-13 07:29:24 -04:00
Michał Kępień
28b8ab8891 Add CHANGES entry 
4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

(cherry picked from commit f9637ae0e5)
 2018-06-13 12:59:03 +02:00
Mark Andrews
0c3ddaafb5 Pull out the saving of the zone cut into a separate function 
(cherry picked from commit 899e56068e)
 2018-06-13 12:58:57 +02:00
Michał Kępień
6d8a514ecb Treat records below a DNAME as out-of-zone data 
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit ff7015a0f8)
 2018-06-13 12:58:27 +02:00