Commit Graph

4078 Commits

Author SHA1 Message Date
Mark Andrews
71efd2bdcc 3742. [port] linux: libcap support: curval was used before it
was declared. [RT #35387]

(cherry picked from commit 5114325978)
2014-02-18 00:28:54 +11:00
Evan Hunt
e503509a2f [v9_8] fixed some dlz configure options
3740.	[contrib]	Minor fixes to configure --with-dlz-bdb,
			--with-dlz-postgres and --with-dlz-odbc. [RT #35340]

(cherry picked from commit 14bf4702f3)
(cherry picked from commit 5c66e4954a)
2014-02-15 21:11:48 -08:00
Evan Hunt
3581743f86 [v9_8] try multiple addresses per server name in nsupdate
3736.	[bug]		nsupdate: When specifying a server by name,
			fall back to alternate addresses if the first
			address for that name is not reachable. [RT #25784]

(cherry picked from commit 842a3e6d0e)
(cherry picked from commit 1a58baf293)
2014-02-11 21:30:24 -08:00
Mark Andrews
b54c25af21 3734. [bug] Improve building with libtool. [RT #35314]
(cherry picked from commit 61eea10d81)
2014-02-10 15:25:07 +11:00
Evan Hunt
08f5a1f53c [v9_8] spelling 2014-02-07 08:03:18 -08:00
Evan Hunt
2c01712503 [v9_8] type mismatch in ODBC DLZ driver
3732.	[contrib]	Fixed a type mismatch causing the ODBC DLZ
			driver to dump core on 64-bit systems. [RT #35324]

(cherry picked from commit 41e55d0403)
2014-02-06 20:05:53 -08:00
Evan Hunt
31bed7e679 [v9_8] add no-case-compress
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]

(cherry picked from commit 166341d554)
(cherry picked from commit c2d3d0eda5)
2014-02-06 19:44:27 -08:00
Evan Hunt
643722c884 [v9_8] testcrypto.sh in system tests
3714.  [test]          System tests that need to test for cryptography
                       support before running can now use a common
                       "testcrypto.sh" script to do so. [RT #35213]
2014-02-06 16:17:10 -08:00
Evan Hunt
648eec5167 [v9_8] dnssec-keygen fixes
3730.	[cleanup]	Added "never" as a synonym for "none" when
			configuring key event dates in the dnssec tools.
			[RT #35277]

3729.	[bug]		dnssec-kegeyn could set the publication date
			incorrectly when only the activation date was
			specified on the command line. [RT #35278]

(cherry picked from commit 5f06c523186be56c5b0cd9b1c230ea7a53960c53)
(cherry picked from commit ec146546f4)
2014-02-06 15:58:14 -08:00
Evan Hunt
4883d26f0d [v9_8] fixed win32 dig problem
3724.   [bug]           win32: Fixed a bug that prevented dig and
                        host from exiting properly after completing
                        a UDP query. [RT #35288]

(cherry picked from commit a8cdf2a2e7)
(cherry picked from commit b603c50553)
2014-02-04 12:03:09 -08:00
Mark Andrews
4f13f6df27 3720. [bug] Address compiler warnings. [RT #35261]
(cherry picked from commit 63add83a26)
2014-01-30 10:33:57 +11:00
Mark Andrews
e15a1d7a3f 3719. [bug] Address memory leak in in peer.c. [RT #35255]
(cherry picked from commit 75d747e1c5)
2014-01-30 07:55:32 +11:00
Mark Andrews
d836927853 3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
(cherry picked from commit fbc0e37e0c)

Conflicts:
	CHANGES
2014-01-30 07:46:16 +11:00
Evan Hunt
231d741842 [v9_8] prep 9.8.7 2014-01-27 10:59:48 -08:00
Evan Hunt
1e7e935d2a [v9_8] prep 9.8.7rc2 2014-01-16 18:59:52 -08:00
Mark Andrews
a50e0baf52 3710. [bug] Address double dns_zone_detach when switching to
using automatic empty zones from regular zones.
                        [RT #35177]

(cherry picked from commit db8938c993)
2014-01-17 10:08:09 +11:00
Evan Hunt
62a6130562 [v9_8] typo 2014-01-14 21:10:37 -08:00
Mark Andrews
0c22a52b82 3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
on a missing resolv.conf file and initializes the
                        structure as if it had been configured with:

                                nameserver ::1
                                nameserver 127.0.0.1

                        Note: Callers will need to be updated to treat
                        ISC_R_FILENOTFOUND as a qualified success or else
                        they will leak memory. The following code fragment
                        will work with both only and new versions without
                        changing the behaviour of the existing code.

                        resconf = NULL;
                        result = irs_resconf_load(mctx, "/etc/resolv.conf",
                                                  &resconf);
                        if (result != ISC_SUCCESS) {
                                if (resconf != NULL)
                                        irs_resconf_destroy(&resconf);
                                ....
                        }

                        [RT #35194]

(cherry picked from commit cd7f8d18f8)
2014-01-15 15:25:25 +11:00
Evan Hunt
7afd8cd9ae [v9_8] fix queryperf integer overflow
3706.	[contrib]	queryperf: Fixed a possible integer overflow when
			printing results. [RT #35182]
2014-01-14 16:59:10 -08:00
Mark Andrews
30917721c6 3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185] 2014-01-14 16:07:27 +11:00
Evan Hunt
c3c079103a [v9_8] add CVE details; marked 3656 as [security] 2014-01-13 14:57:31 -08:00
Evan Hunt
4785004e3e [v9_8] prep 9.8.7rc1 2014-01-10 09:20:06 -08:00
Mark Andrews
484af89506 3701. [func] named-checkconf can now suppress the printing of
shared secrets by specifying '-x'. [RT #34465]

(cherry picked from commit ff6de396a9)
2014-01-10 17:45:38 +11:00
Evan Hunt
d19bf3def7 [v9_8] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]

(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
(cherry picked from commit 9b950c70f1a6406c0f3dff604822329d06fc4837)
2014-01-08 16:40:19 -08:00
Mark Andrews
12962b4b54 3697. [bug] Handle "." as a search list element when IDN support
is enabled. [RT #35133]

(cherry picked from commit d0e3216c21)
2014-01-06 12:35:06 +11:00
Mark Andrews
c2a9bd9932 3696. [bug] dig failed to handle AXFR style IXFR responses which
span multiple messages. [RT #35137]

(cherry picked from commit e9649ece3b)
2014-01-06 06:31:14 +11:00
Evan Hunt
0cb89656c2 [v9_8] dispatch.c race
3695.	[bug]		Address a possible race in dispatch.c. [RT #35107]

(cherry picked from commit 2b258a1f5b)
2013-12-23 09:53:08 -08:00
Evan Hunt
f7d451ed9a typo 2013-12-20 17:12:57 -08:00
Evan Hunt
2e2ec6d974 [v9_8] warn if key-directory doesn't exist
3694.	[bug]		Warn when a key-directory is configured for a zone,
			but does not exist or is not a directory. [RT #35109]

(cherry picked from commit c14ba71070)
(cherry picked from commit 2354181226)
2013-12-20 14:58:31 -08:00
Mark Andrews
16c46bb785 3693. [security] memcpy was incorrectly called with overlapping
ranges resulting in malformed names being generated
                        on some platforms.  This could cause INSIST failures
                        when serving NSEC3 signed zones.  [RT #35120]

(cherry picked from commit fa467e60c5)
2013-12-20 11:00:30 +11:00
Mark Andrews
80df76ba64 3693. [security] memcpy was incorrectly called with overlapping
ranges resulting a malformed names being generated
                        on some platforms.  This was subsequently detected
                        resulting in INSIST failures when serving NSEC3
                        signed zones.  [RT #35120]

(cherry picked from commit b93ef543ab)
2013-12-20 10:26:59 +11:00
Mark Andrews
4e4715265e 3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
was no data at the node. [RT #35080]

(cherry picked from commit 161e803a56)
2013-12-17 09:11:30 +11:00
Evan Hunt
087c966374 [v9_8] fix insecure delegation across static-stub zones
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]

(cherry picked from commit 9b895f30f1)
(cherry picked from commit 0c0ce5f9a4)
2013-12-12 22:26:18 -08:00
Evan Hunt
c9c07bb5d6 [v9_8] bump 9.8.7b1 release tag 2013-12-11 22:00:37 -08:00
Mark Andrews
640ca0e048 3688. [bug] loadnode could return a freed node on out of memory.
[RT #35106]
2013-12-12 12:50:37 +11:00
Evan Hunt
8904a32bdf [v9_8] prep 9.8.7b1 2013-12-10 17:36:33 -08:00
Evan Hunt
f436de08b5 [master] clearer "not found" message for rndc commands
3683.	[cleanup]	Add a more detailed "not found" message to rndc
			commands which specify a zone name. [RT #35059]

(cherry picked from commit bee9a28af0)
(cherry picked from commit 98a3bd57ca)
2013-12-04 13:11:45 -08:00
Mark Andrews
7c0b7f6847 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]

(cherry picked from commit c3c8823fed)

Conflicts:
	CHANGES
	bin/check/win32/checktool.dsp.in
	bin/dnssec/win32/dnssectool.dsp.in
	bin/dnssec/win32/importkey.dsp.in
	bin/dnssec/win32/importkey.mak.in
	bin/named/geoip.c
	bin/named/include/named/geoip.h
	bin/tools/win32/rrchecker.dsp.in
	bin/tools/win32/rrchecker.mak.in
	config.h.win32
	lib/dns/geoip.c
	lib/dns/master.c
	lib/dns/win32/libdns.dsp.in
	lib/dns/win32/libdns.mak.in
	lib/isc/mem.c
	lib/isc/stats.c
	lib/isc/win32/file.c
	lib/isc/win32/libisc.def.in
	lib/isc/win32/libisc.mak.in
	lib/isc/win32/stdio.c
	lib/isccc/cc.c
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/makeversion.pl
	win32utils/setpk11provider.pl
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt

Conflicts:
	bin/dnssec/win32/verify.dsp.in
	bin/dnssec/win32/verify.mak.in
	bin/named/server.c
	bin/python/dnssec-checkds.py.in
	bin/python/dnssec-coverage.py.in
	lib/dns/nsec.c
	lib/dns/nsec3.c
	lib/dns/win32/libdns.mak.in
	lib/dns/zone.c
	lib/isc/win32/libisc.mak.in
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt
2013-12-04 14:08:17 +11:00
Evan Hunt
eb15ab667b [v9_8] dig could miss tcp connections when cleaning up
3679.	[bug]		dig could fail to clean up TCP sockets still
			waiting on connect(). [RT #35074]

(cherry picked from commit fb507315d4)
2013-12-02 13:38:03 -08:00
Mark Andrews
5af1ed0f95 3678. [port] Update config.guess and config.sub. [RT #35060]
(cherry picked from commit ae871ebb28)
2013-12-02 10:56:03 +11:00
Mark Andrews
101ed52ff5 3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
times.  [RT #35073]

(cherry picked from commit 49ae04f6ee)
2013-11-28 06:46:48 +11:00
Evan Hunt
4ed930b4f8 [v9_8] check hint files in named-checkconf -z
3676.	[bug]		"named-checkconf -z" now checks zones of type
			hint and redirect as well as master. [RT #35046]

(cherry picked from commit d999ca28d4)
(cherry picked from commit 2254826e4c)
2013-11-25 13:24:16 -08:00
Mark Andrews
1a57f37900 3675. [misc] Provide a place for third parties to add version
information for their extensions in the version
                        file by setting the EXTENSIONS variable.

(cherry picked from commit fd63f3110f)
2013-11-22 13:28:49 +11:00
Mark Andrews
1eecc4e5c1 3667. [func] dig: add support to keep the TCP socket open between
successive queries (+[no]keepopen).  [RT #34918]

(cherry picked from commit 2048955015)
2013-11-13 11:08:05 +11:00
Mark Andrews
369ccd68ca 3670. [bug] Address read after free in server side of
lwres_getrrsetbyname. [RT #29075]

(cherry picked from commit eb5e0b8dec)
2013-11-12 15:00:32 +11:00
Mark Andrews
a5be0bbbe4 3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
(cherry picked from commit b564c8503d4377f6b423fcd67a5ce60798d8123e)
2013-11-12 11:38:48 +11:00
Mark Andrews
ba70172144 3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
[RT #34993]

(cherry picked from commit 0a47bc90af)
2013-11-11 10:53:13 +11:00
Francis Dupont
8ce64683fd Update OpenSSL PKCS#11 patches. [RT #34855] 2013-10-25 17:55:36 +02:00
Mark Andrews
32de039875 3663. [bug] Address bugs in dns_rdata_fromstruct and
dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
2013-10-25 13:06:34 +11:00
Mark Andrews
50147f3333 UPD -> UDP
(cherry picked from commit 11e9195ad1)
2013-10-25 12:58:59 +11:00