Commit Graph
4747 Commits
Author SHA1 Message Date
Evan Hunt 65e144e0de [v9_9] isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]

(cherry picked from commit ddef16e1d9)
2016-08-17 11:37:51 -07:00
Mark Andrews 69d239f1c9 4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
TCP sockets. [RT #42864]

(cherry picked from commit 7872d4d1c0)
2016-08-16 07:45:56 +10:00
Mark Andrews c9fcc2ef9b 4441. [cleanup] Alphabetize host's help output. [RT #43031]
(cherry picked from commit 8a98ea9e94)
2016-08-15 11:24:14 +10:00
Evan Hunt 12d76b1b8f [v9_9] error on bad parameter to 'rndc dumpdb'
4433.	[cleanup]	Report an error when passing an invalid option or
			view name to "rndc dumpdb". [RT #42958]

(cherry picked from commit c38d989fdd)
(cherry picked from commit 17de0f290c)
2016-08-11 16:12:23 -07:00
Evan Hunt 5dec26625f [v9_9] correct [testing] tags to [test] 2016-08-10 09:28:53 -07:00
Mark Andrews 97058daadd 4432. [testing] Hide rndc output on expected failures in logfileconfig
system test. [RT #27996]

(cherry picked from commit 12895c8d6f)
2016-08-10 13:11:38 +10:00
Mark Andrews 39344a5739 4431. [bug] named-checkconf now checks the rate-limit clause.
[RT #42970]

(cherry picked from commit 632e67baa6)
2016-08-09 00:00:20 +10:00
Mark Andrews 9a05362952 4430. [bug] Lwresd died if a search list was not defined.
Found by 0x710DDDD At Alibaba Security. [RT #42895]

(cherry picked from commit 3146be6fd6)
2016-08-08 10:34:48 +10:00
Mark Andrews c49d97b741 4425. [bug] arpaname and dnstap-read were not being installed
into ${prefix}/bin.  Tidy up installation issues
                        with CHANGE 4421. [RT #42910]

(cherry picked from commit 711aff9fa7)
(cherry picked from commit c572930400)
2016-07-26 07:08:47 +10:00
Evan Hunt 211517ce9a [v9_9] add aaaa for b.root-servers.net
4423.	[maint]		Added missing IPv6 address 2001:500:84::b for
			B.ROOT-SERVERS.NET. [RT #42898]

Patch submitted by Xoze Vazquez Perez (xose.vazquez@gmail.com).
2016-07-21 20:02:58 -07:00
Evan Hunt d8eaff0417 [v9_9] silence clang warnings
4422.	[port]		Silence clang warnings in dig.c and dighost.c.
			[RT #42451]
2016-07-21 15:57:55 -07:00
Witold Krecicki 846c2d8235 4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879] 2016-07-21 12:19:55 +02:00
Tinderbox User ca8077627b update copyright notice / whitespace 2016-07-19 23:48:19 +00:00
Evan Hunt c7954358a4 [v9_9] fix isc_atomic_xadd() on MIPS
4414.	[bug]		Corrected a bug in the MIPS implementation of
			isc_atomic_xadd(). [RT #41965]

Submitted by Lamont Jones (lamont@debian.org). Closes Debian issue #406409.
2016-07-19 11:12:19 -07:00
Mark Andrews 456d497196 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
2016-07-14 15:08:36 +10:00
Mark Andrews 03021b1d0c bug -> security 2016-07-14 09:21:07 +10:00
Mukund Sivaraman 01ccf0d480 Make fixes for GCC 6 (#42721)
(cherry picked from commit 4116177ac4)
(cherry picked from commit 2d5581de6e)
(cherry picked from commit 48ed0dec09)
2016-07-13 14:04:23 +05:30
Mark Andrews aee0e51757 spelling/grammar
(cherry picked from commit 1256b0c344)
2016-07-13 10:27:25 +10:00
Mark Andrews d05f0b2479 add CVE-2016-2775 2016-07-12 01:19:20 +10:00
Mark Andrews e92db5f0a0 4409. [bug] DNS64 should exlude mapped addresses by default when
a exclude acl is not defined. [RT #42810]
2016-07-11 14:18:21 +10:00
Mark Andrews 062b04898b 4406. [bug] getrrsetbyname with a non absolute name could
trigger a infinite recursion bug in lwresd
                        and named with lwres configured if when combined
                        with a search list entry the resulting name is
                        too long. [RT #42694]

(cherry picked from commit 38cc2d14e2)
2016-07-07 12:54:02 +10:00
Mark Andrews d9cc1ed8ea 4405. [bug] Change 4342 introduced a regression where you could
not remove a delegation in a NSEC3 signed zone using
                        OPTOUT via nsupdate. [RT #42702]

(cherry picked from commit d811a7d9ef)
2016-07-06 10:26:02 +10:00
Mark Andrews 8c4b590d3c 4404. [misc] Allow krb5-config to be used when configuring gssapi.
[RT #42580]
2016-07-04 15:56:27 +10:00
Mark Andrews 5ccb7b6341 4403. [bug] Rename variables and arguments that shadow: basename,
clone and gai_error.

(cherry picked from commit ecfa005085)
(cherry picked from commit c8f34dbca6)
2016-06-29 11:28:50 +10:00
Mark Andrews 899d7319a5 4397. [bug] Update Windows python support. [RT #42538]
(cherry picked from commit 9f5443280f)
2016-06-24 16:13:50 +10:00
Mark Andrews 1d235ab5a4 4395 [bug] Improve out-of-tree installation of python modules.
[RT #42586]

(cherry picked from commit 4840ef4581)
2016-06-24 12:54:59 +10:00
Mark Andrews aa63052317 4387. [bug] Change 4336 was not complete leading to SERVFAIL
being return as NS records expired. [RT #42683]

(cherry picked from commit b56bd9b59f)
2016-06-22 15:43:05 +10:00
Mark Andrews c3ff4e9f8f 4384. [bug] Change 4256 accidentally disabled logging of the
rndc command. [RT #42654]

(cherry picked from commit 948fe5822b)
2016-06-18 00:32:42 +10:00
Mark Andrews cf195d6467 4379. [bug] An INSIST could be triggered if a zone contains
RRSIG records with expiry fields that loop
                        using serial number arithmetic. [RT #40571]

(cherry picked from commit 9268297baa)
2016-05-27 15:26:48 +10:00
Mark Andrews 94adaadea7 4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
[RT #42525]

(cherry picked from commit d7ab0204e2)
2016-05-27 11:21:05 +10:00
Mark Andrews c3fbf330bc 4377. [bug] Don't reuse zero TTL responses beyond the current
client set (excludes ANY/SIG/RRSIG queries).
                        [RT #42142]

(cherry picked from commit aabcb1fde0)
2016-05-27 10:05:52 +10:00
Mark Andrews 900a63cb04 4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
probability of reference counting errors as seen
                        in 4365. [RT #42405]

(cherry picked from commit ac11084829)
2016-05-26 13:37:43 +10:00
Mark Andrews 59300548a7 4373. [bug] Address undefined behaviour in getaddrinfo. [RT #42479]
(cherry picked from commit ede52ba98d)
2016-05-26 12:06:09 +10:00
Mark Andrews b413f4e54d 4372. [bug] Address undefined behaviour in libt_api. [RT #42480]
(cherry picked from commit a0f5a5e3c5)
2016-05-26 11:58:20 +10:00
Mark Andrews b8735615e1 4369. [bug] Fix 'make' and 'make install' out-of-tree python
support. [RT #42484]

(cherry picked from commit d3600bb89d)
2016-05-24 10:06:47 +10:00
Mark Andrews f2a4962927 spelling 2016-05-22 07:57:09 +10:00
Mark Andrews 6deae303e1 update 4363 description 2016-05-20 11:52:38 +10:00
Mark Andrews 2bf3a4d271 4366. [bug] Address race condition when updating rbtnode bit
fields. [RT #42379]

(cherry picked from commit e2047969de)
2016-05-17 13:16:41 +10:00
Mark Andrews af0af7e3fd 4363. [port] Turn off triggering UAC when running BINDInstall
temporarily.

(cherry picked from commit 8090ceb932)
2016-05-09 19:08:29 +10:00
Evan Hunt a1f4c3c55c [v9_9] nanosecond-accurate file modification times
4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]
2016-05-05 12:22:55 -07:00
Mark Andrews 091afd6fdc 4360. [bug] Silence spurious 'bad key type' message when there is
a existing TSIG key. [RT #42195]

(cherry picked from commit 5ac427050f)
(cherry picked from commit 525dc475ee)
2016-05-05 22:44:58 +10:00
Mark Andrews a6238a920b 4359. [bug] Inherited 'also-notify' lists were not being checked
by named-checkconf. [RT #42174]

(cherry picked from commit 594d15df25)
2016-05-05 22:01:57 +10:00
Mark Andrews ab16ccd7fc add reported by
(cherry picked from commit b0ffe32862)
2016-05-05 14:30:57 +10:00
Mark Andrews 6d2a695001 4354. [bug] Check that the received HMAC length matches the
expected length prior to check the contents on the
                        control channel.  This prevents a OOB read error.
                        [RT #42215]

(cherry picked from commit 402c63495c)
2016-05-05 14:29:56 +10:00
Evan Hunt 4ed8ffeab7 [v9_9] update pkcs11 headers
4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]
2016-05-04 16:27:26 -07:00
Evan Hunt d5ebc757a6 [v9_9] log message when using ISC DLV
4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]
2016-05-04 14:40:17 -07:00
Evan Hunt ddc71a7c38 [v9_9] refactor python tools
4348.	[cleanup]	Refactor dnssec-coverage and dnssec-checkds
                        functionality into an "isc" python module. [RT #39211]
2016-04-28 19:46:07 -07:00
Mark Andrews 8e0abe93b8 4351. [bug] 'dig +noignore' didn't work. [RT #42273] 2016-04-29 12:42:39 +10:00
Evan Hunt 84c835b1f8 [v9_9] prep 9.9.9 2016-04-20 10:28:09 -07:00
Mark Andrews 7f9a31319d fix changes
(cherry picked from commit 16591ba9ae)
2016-04-16 12:04:45 +10:00