ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,876 Commits 589 Branches 805 Tags
6ac1507f4f65271ef32264e8dc181ce3efaa6a96
Commit Graph
10986 Commits
Author SHA1 Message Date
Mark Andrews 6ac1507f4f test dns_acl_isinsecure with geoip element 
(cherry picked from commit fb8bb4e306)
 2018-08-02 09:55:13 +10:00
Mark Andrews 06bfd671b5 use tlsa and smime structs to set common values 
(cherry picked from commit 63c9ec367f)
 2018-08-02 08:52:17 +10:00
Ondřej Surý 38a6d1d44d Change isc_buffer_reallocate() into a static functions as it is not used outside of isc_buffer_reserve() 
(cherry picked from commit 20faf4652a)
 2018-08-01 08:41:25 +02:00
Ondřej Surý 56117f9799 Remove illogical condition from isc_buffer_reallocate that would return ISC_R_NOSPACE when requested size is less than available size 
(cherry picked from commit 7785f644c3)
 2018-08-01 08:41:25 +02:00
Ondřej Surý 7d2c0859d5 Forbid isc_buffer_printf from growing the buffer unless auto reallocation is enabled 
(cherry picked from commit 519bfe4c97)
 2018-08-01 08:41:25 +02:00
Mark Andrews 3a06cea708 refcount errors on error paths 
(cherry picked from commit 4093efc900)
 2018-07-31 18:42:38 +10:00
Ondřej Surý 0b93c77024 Replace the last missed usage of USE_ENGINE with OPENSSL_NO_ENGINE 2018-07-12 06:33:54 -04:00
Mark Andrews 26a2ab4152 remove re-initalisation of common structure 
(cherry picked from commit 6e06d3e7c6)
 2018-07-12 09:48:03 +10:00
Mark AndrewsandEvan Hunt 85d7298387 remove redundant test 
(cherry picked from commit 6eec7fe092)
 2018-07-10 19:05:01 -07:00
Mark AndrewsandEvan Hunt d1539d991a fix spelling of 'telemetry' 
(cherry picked from commit 4f18b6a09a)
 2018-07-10 18:28:51 -07:00
Mark AndrewsandEvan Hunt 0ed6214375 use extracted netaddr rather than client->destaddr 
(cherry picked from commit 69fd3f5ba4)
 2018-07-10 18:28:50 -07:00
Mark AndrewsandWitold Kręcicki 687ca4412a the presence of a DNAME record proves that the name does not exist in the zone but as we don't want to use that for NXDMOMAIN return DNS_R_DNAME from dns_nsec_noexistnodata 
(cherry picked from commit 8ef23f9fb0)
 2018-07-10 09:50:35 +02:00
Witold Kręcicki e263fe91c0 Don't synthesize NXDOMAIN from NSEC for records under a DNAME 
(cherry picked from commit 7f60bb39df)
 2018-07-10 09:50:30 +02:00
Tinderbox User bbf35634c0 prep 9.12.2rc2 2018-06-28 04:42:37 +00:00
Witold KręcickiandEvan Hunt cbb73df1f9 Fallback to normal procedure if creating of ixfr-from-differences fails 
(cherry picked from commit b1254430df)
 2018-06-27 18:25:14 -07:00
Witold KręcickiandEvan Hunt 1a5cba631e Fix some issues with large journal entries 
(cherry picked from commit 0db7130f2b)
 2018-06-27 18:25:13 -07:00
Mark Andrews df6951a2bb cfg_parse_boolean's REQUIRE test for ret was incomplete. 
(cherry picked from commit f1ee5e4a16)
 2018-06-27 17:37:00 +10:00
Ondřej SurýandEvan Hunt a7c5fad628 Un-deprecate the answer-cookie option 2018-06-26 15:16:40 -07:00
Mukund SivaramanandEvan Hunt ed29b84e16 return FORMERR when question section is empty if COOKIE is not present 
(cherry picked from commit 06d3106002)
 2018-06-26 14:36:34 -07:00
Witold Kręcicki 4007a9d020 Use completely static-sized buffers 
(cherry picked from commit 49f90025a0)
 2018-06-26 20:18:59 +02:00
Witold Kręcicki da63e95612 Fix socket cmsg buffer usage 
(cherry picked from commit d79be7dd5e)
 2018-06-26 20:12:58 +02:00
Mark AndrewsandEvan Hunt 7f31e67c16 CHANGES, copyright 
(cherry picked from commit f7d346357e)
 2018-06-26 09:04:48 -07:00
Mark AndrewsandEvan Hunt 665f9093d2 construct a symtab of valid in-view targets then check that the target exists 
(cherry picked from commit e01a4bcb20)
 2018-06-26 09:03:47 -07:00
Mukund SivaramanandMark Andrews 82d5a44dfd Patch in trailing nul character to print just the length label (for various cases below) 
(cherry picked from commit 6a756ab654)
 2018-06-25 17:33:15 +10:00
Mark Andrews 537e3a0a14 fix casecompare return type for ninfo, tkey, txt 
(cherry picked from commit 3ba1d1e43b)
 2018-06-25 13:08:47 +10:00
Mark Andrews 77496f0b88 the client cookie was being hashed twice when computing the server cookie for sha1 and sha256 
(cherry picked from commit 4795f0ca89)
 2018-06-22 17:45:02 +10:00
Evan HuntandOndřej Surý 87344e3493 prepare 9.12.1rc1 2018-06-21 18:46:32 +02:00
Mark AndrewsandMichał Kępień d4c55dae8e Declare the 'rdata' argument for dns_rdata_tostruct() to be const 
(cherry picked from commit abb2fd1027)
 2018-06-15 08:52:28 +02:00
Evan HuntandOndřej Surý be145bc8b6 add a regression test for default allow-recursion settings 2018-06-14 14:45:56 +02:00
Michał Kępień b39edab59b Reimplement all zone logging functions using dns_zone_logv() 
In order to decrease code duplication, express the logic contained in
all zone logging functions using dns_zone_logv() calls.

(cherry picked from commit 5c03cd339e)
 2018-06-11 12:50:11 +02:00
Michał Kępień 75959cb369 Add dns_zone_logv() 
Add a new libdns function, dns_zone_logv(), which takes a single va_list
argument rather than a variable number of arguments and can be used as a
base for implementing more specific zone logging functions.

(cherry picked from commit bb2dfb3f49)
 2018-06-11 12:50:11 +02:00
Evan Hunt f7f20b1202 improve readability of radix code 
- use RADIX_V4, RADIX_V6, RADIX_V4_ECS, and RADIX_V6_ECS as array
  indices instead of 0 through 3.
- remove some unused macros
 2018-06-08 11:55:53 -07:00
Evan Hunt 86787d0ad1 ensure that we attempt to validate glue if it's signed 
- incidentally fixed a bug in the dnssec system test where TTLs in the
  answer section rather than the additional section were being checked

(cherry picked from commit 8d923a05a9)
 2018-06-08 11:49:34 -07:00
Mark Andrews 323a2edfc2 add cfg_parse_buffer4 
(cherry picked from commit b313084af2)
 2018-06-08 17:40:16 +10:00
Mukund SivaramanandMark Andrews 2930507357 Add a answer-cookie named config option 2018-06-08 16:34:29 +10:00
Mark Andrews 60a703550e Add support for marking a option as deprecated. 
(cherry picked from commit befff9452c)
 2018-06-08 15:55:56 +10:00
Witold Kręcicki 2e1a704378 Don't fetch DNSKEY when fuzzing resolver 
(cherry picked from commit cb3208aa43)
 2018-06-06 15:50:33 +02:00
Mark Andrews 69340b5ac5 add support -T sigvalinsecs 
(cherry picked from commit 87a3dc8ab9)
 2018-06-06 17:05:43 +10:00
Mark Andrews c1e342cedb only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm 
(cherry picked from commit 0667bf7ae7)
 2018-06-06 16:54:03 +10:00
Mukund SivaramanandMark Andrews 8af1d5916f Add NSEC3 fromtext/totext unittests 
(cherry picked from commit b0d9198e03)
 2018-06-04 13:01:18 +10:00
Mukund SivaramanandMark Andrews ac7c74425e Don't insert 2nd space between NSEC3 nexthash and typemap fields 
(cherry picked from commit d4ea1edd2c)
 2018-06-04 13:01:18 +10:00
Tony FinchandEvan Hunt c4494458ae Move serve-stale logging to its own category, so that its verbosity can be curtailed. 
(cherry picked from commit 4b442c309d)
 2018-05-28 17:25:38 -07:00
Mark Andrews 3bbcba405b work around cppcheck false positive 
(cherry picked from commit cb5802e854)
 2018-05-29 09:44:02 +10:00
Evan Hunt 61de568197 copyrights 2018-05-23 09:52:09 -07:00
Evan Hunt 3de0910bc7 Detect recursion loops during query processing 
Interrupt query processing when query_recurse() attempts to ask the same
name servers for the same QNAME/QTYPE tuple for two times in a row as
this indicates that query processing may be stuck for an indeterminate
period of time, e.g. due to interactions between features able to
restart query_lookup().

(cherry picked from commit d1de99bc587480eb51a38b23c8aaf4d34c0c92d2)
 2018-05-21 09:59:41 -07:00
Evan Hunt f6884e0ca5 Prevent check_stale_header() from leaking rdataset headers 
check_stale_header() fails to update the pointer to the previous header
while processing rdataset headers eligible for serve-stale, thus
enabling rdataset headers to be leaked (i.e. disassociated from a node
and left on the relevant TTL heap) while iterating through a node.  This
can lead to several different assertion failures.  Add the missing
pointer update.

(cherry picked from commit cf9cb7cd0013610c8978808aab9d6bae9fe57a4b)
 2018-05-21 09:58:44 -07:00
Mark Andrews 24bb79f9fc ISC_SOCKEVENTATTR_TRUNC was not be set 
(cherry picked from commit 6bff1768cf)
 2018-05-18 15:59:14 +10:00
Mukund SivaramanandEvan Hunt 84640d2e04 Fix ARM about min-update-interval default for RPZ zones 
Also, use variable names consistent with catz for rpz configuration functions

(cherry picked from commit 975afc508d)
 2018-05-17 20:23:08 -07:00
Mark Andrews d03a81c265 look for '\0' 2018-05-18 12:17:31 +10:00
Mark Andrews f5233ba5de add some %f format tests 2018-05-18 12:17:31 +10:00