Commit Graph

6342 Commits

Author SHA1 Message Date
Mark Andrews
df9832fd9e 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:16 +11:00
Tinderbox User
9423b4f701 update copyright notice / whitespace 2016-11-08 23:51:48 +00:00
Mark Andrews
a22b4b9ed9 locks are only need in OpenSSL < 1.1 2016-11-09 10:06:39 +11:00
Mark Andrews
8cb6771585 only call dns_test_begin once
(cherry picked from commit f13c7b01746a07bef87a386ceff93ccb2a7488a9)
(cherry picked from commit 56c6fc0dac)
2016-11-09 10:03:53 +11:00
Mark Andrews
11088c8f65 remove spurious newline [RT #43585]
(cherry picked from commit fed2f7e4c1)
2016-11-09 08:27:32 +11:00
Mark Andrews
a873ad10bd copyrights/whitespace 2016-11-03 12:47:03 +11:00
Tinderbox User
4282468058 update copyright notice / whitespace 2016-11-02 23:49:23 +00:00
Mark Andrews
0fab2ebfb8 add dns_db_getsize, dns_rdataslab_count, dns_zone_getmaxrecords, dns_zone_setmaxrecords
(cherry picked from commit aee76db9e3)
2016-11-03 10:02:18 +11:00
Mark Andrews
1bbcfe2fc8 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 10:01:52 +11:00
Evan Hunt
0f254a61f9 [v9_10] typo 2016-11-02 09:43:16 -07:00
Mark Andrews
58a1bcad5f 4507. [bug] Name could incorrectly log 'allows updates by IP
address, which is insecure' [RT #43432]

(cherry picked from commit 2b2b85c897)
2016-11-02 18:17:39 +11:00
Evan Hunt
398f8c32f3 [v9_10] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:35:44 -07:00
Evan Hunt
a2575e2796 [v9_10] system tests on windows
4487. [test] Make system tests work on Windows. [RT #42931]
2016-11-01 09:50:09 -07:00
Evan Hunt
7aec46a5ef [v9_10] 4496. [func] dig: add +idnout to control whether labels are
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]

(cherry picked from commit 42470b0b87)
(cherry picked from commit 6552f33198)
2016-10-31 22:54:41 -07:00
Mark Andrews
60d267ac10 add more LIBRESSL_VERSION_NUMBER checks
(cherry picked from commit 429b543086)
2016-11-01 12:37:39 +11:00
Mark Andrews
9489afeed3 add more LIBRESSL_VERSION_NUMBER checks
(cherry picked from commit 3d38cfaf8a)
2016-11-01 12:25:09 +11:00
Tinderbox User
de7069b725 update copyright notice / whitespace 2016-10-30 23:48:17 +00:00
Mark Andrews
4bee9dcc78 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
(cherry picked from commit 1fce0951ed)
2016-10-31 10:08:08 +11:00
Mark Andrews
c8f7bbdf12 4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
(cherry picked from commit 3b7cb2c5b1)
2016-10-21 22:44:49 +11:00
Mark Andrews
c1d0599a24 4489. [security] It was possible to trigger assertions when processing
a response. (CVE-2016-8864) [RT #43465]

(cherry picked from commit bd6f27f5c3)
2016-10-21 14:56:26 +11:00
Mark Andrews
e236673170 4482. [bug] Address use before require check and remove extraneous
dns_message_gettsigkey call in dns_tsig_sign.
                        [RT #43374]

(cherry picked from commit 61463ab7a4)
2016-10-11 14:41:41 +11:00
Tinderbox User
aaf8627cee update copyright notice / whitespace 2016-10-05 23:46:45 +00:00
Mark Andrews
31be5b7394 4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
getprotobyname and getservbyname work.  [RT #43197]

(cherry picked from commit 82a50a619a)
2016-10-05 12:30:05 +11:00
Mark Andrews
88e9f0b489 4468. [bug] Address ECS option handling issues. [RT #43191]
(cherry picked from commit df17290113)
2016-09-14 09:06:24 +10:00
Mark Andrews
9dd582167a 4467. [security] It was possible to trigger a assertion when rendering
a message. [RT #43139]

(cherry picked from commit 2bd0922cf9)
2016-09-09 11:32:12 +10:00
Tinderbox User
dfc79e1313 update copyright notice / whitespace 2016-09-07 23:46:16 +00:00
Mark Andrews
69f9ca5830 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]
2016-09-07 14:43:14 +10:00
Mukund Sivaraman
0edca7b6cd Update assertions to be more correct, and also remove use of a reserved word (#43090)
Note: this doesn't actually fix #43090.
(cherry picked from commit becac651e8)
(cherry picked from commit ce78690029)
2016-08-29 18:56:06 +05:30
Mark Andrews
4fba489dbe 4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
(cherry picked from commit c55b572ccf)
2016-08-29 10:16:52 +10:00
Mark Andrews
a33f9a7eff 4453. [bug] Prefetching of DS records failed to update their
RRSIGs. [RT #42865]

(cherry picked from commit f431bf02a6)
2016-08-25 09:55:08 +10:00
Mark Andrews
169546c6ad update copyrights / whitespace 2016-08-23 09:51:39 +10:00
Francis Dupont
92d1b38a81 Merged rt43077 (new RSA verify unit test) 2016-08-22 14:11:08 +02:00
Tinderbox User
9831d2c6e5 update copyright notice / whitespace 2016-08-19 01:23:59 +00:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Evan Hunt
e3fd4a7fc4 [v9_10] check for STALE rdatasets in cache search
4446.	[bug]		The cache_find() and _findrdataset() functions
			could find rdatasets that had been marked stale.
			[RT #42853]

(cherry picked from commit 46e7763d19)
2016-08-17 11:44:46 -07:00
Tinderbox User
5591cf2635 update copyright notice / whitespace 2016-08-16 23:46:14 +00:00
Mukund Sivaraman
418b43028e Fix RPZ CIDR tree insertion bug (#43035)
(cherry picked from commit 131307a70e)
2016-08-15 17:07:06 +05:30
Tinderbox User
4858334554 update copyright notice / whitespace 2016-08-11 23:46:19 +00:00
Francis Dupont
7a4d54f6c6 Merged rt42840_10 (tcp-only backport) 2016-08-11 14:28:22 +02:00
Tinderbox User
7a90fc75f5 update copyright notice / whitespace 2016-07-22 23:48:53 +00:00
Mark Andrews
fc24ea9ac8 add dns_keytable_forall
(cherry picked from commit 6655b7db13)
2016-07-22 20:34:39 +10:00
Mark Andrews
aa1a7e1e58 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:16:59 +10:00
Evan Hunt
f54a8c74c4 [v9_10] add aaaa for b.root-servers.net
4423.	[maint]		Added missing IPv6 address 2001:500:84::b for
			B.ROOT-SERVERS.NET. [RT #42898]

Patch submitted by Xoze Vazquez Perez (xose.vazquez@gmail.com).
2016-07-21 20:02:54 -07:00
Witold Krecicki
4c2fcac334 4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879] 2016-07-21 12:18:37 +02:00
Tinderbox User
d122358d76 update copyright notice / whitespace 2016-07-14 23:52:39 +00:00
Mark Andrews
594b2c2597 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
2016-07-14 15:08:28 +10:00
Tinderbox User
2b0cab5589 update copyright notice / whitespace 2016-07-13 23:47:02 +00:00
Mukund Sivaraman
e7a3b8948f Some general cleanup (#42827)
(cherry picked from commit e65cd99461)
(cherry picked from commit 47ed813864)
2016-07-13 14:33:16 +05:30
Mukund Sivaraman
48ed0dec09 Make fixes for GCC 6 (#42721)
(cherry picked from commit 4116177ac4)
(cherry picked from commit 2d5581de6e)
2016-07-13 14:00:27 +05:30
Tinderbox User
0cb3f2e0a0 update copyright notice / whitespace 2016-07-10 23:47:36 +00:00