Commit Graph
28708 Commits
Author SHA1 Message Date
Michał KępieńandMark Andrews 74a738428c Silence PyYAML warning
Make yaml.load_all() use yaml.SafeLoader to address a warning currently
emitted when bin/tests/system/dnstap/ydump.py is run:

    ydump.py:28: YAMLLoadWarning: calling yaml.load_all() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
      for l in yaml.load_all(f.stdout):

(cherry picked from commit 62f631f798)
2020-06-30 11:43:35 +10:00
Mark Andrews 66c9390775 Merge branch 'u/fanf2/dnstap-roll-v9_11' into 'v9_11'
U/fanf2/dnstap roll v9 11

See merge request isc-projects/bind9!3755
2020-06-30 00:16:01 +00:00
Mark Andrews 686ee5bd12 Check that 'rndc dnstap -roll <value>' works
(cherry picked from commit a289a57c7f)
2020-06-30 08:39:19 +10:00
Michał Kępień e2ff063c8c Merge branch 'mnowak/add-new-releases-v9_11' into 'v9_11'
[v9_11] Add Ubuntu 20.04, Fedora 32, Alpine 3.12, OpenBSD 6.7, and FreeBSD 11.4

See merge request isc-projects/bind9!3763
2020-06-29 11:08:26 +00:00
Michał Kępień e5a72ed3a5 Fix build-time GSSAPI detection on Tumbleweed
The "krb5-devel" package on openSUSE Tumbleweed installs the
"krb5-config" binary into a custom prefix, which prevents BIND's
"configure" script from autodetecting it.  Fix by specifying the path to
the "krb5-config" binary using --with-gssapi.

(cherry picked from commit 1be15f5900)
2020-06-29 12:49:35 +02:00
Michal NowakandMichał Kępień 5a60bff4c8 Update FreeBSD 11 to 11.4
(cherry picked from commit 18f97b9af2)
2020-06-29 12:49:07 +02:00
Michal NowakandMichał Kępień be8524cea6 Update to Alpine Linux 3.12
(cherry picked from commit eff79ab20c)
2020-06-29 12:49:00 +02:00
Michal NowakandMichał Kępień b5012b000c Update to OpenBSD 6.7
(cherry picked from commit 374660fd37)
2020-06-29 12:48:52 +02:00
Michal NowakandMichał Kępień eb1f193ba3 Drop Bionic
(cherry picked from commit 27c8bc1750)
2020-06-29 12:48:44 +02:00
Michal NowakandMichał Kępień 1520d48112 Add Ubuntu 20.04 Focal Fossa, update Fedora to 32
(cherry picked from commit c3e259a8c9)
2020-06-29 12:48:43 +02:00
Mark Andrews 1632ef0a92 Merge branch '1935-v9_11-resolver-test-broken-on-windows-after-3586' into 'v9_11'
Resolve "[v9_11] "resolver" test broken on Windows after !3586"

See merge request isc-projects/bind9!3691
2020-06-26 14:17:44 +00:00
Mark Andrews d958d51797 Just test for the two possible values rather than testing for ipv6.
testsock6 can return a false negative when testing under Windows.
2020-06-26 08:55:39 +00:00
Evan Hunt 5da2fedf9d Merge branch '1952-yaml-ipv6-v9_11' into 'v9_11'
append "0" to IPv6 addresses ending in "::" when printing YAML

See merge request isc-projects/bind9!3753
2020-06-26 03:59:10 +00:00
Evan Hunt 8d52602daf append "0" to IPv6 addresses ending in "::" when printing YAML
such addresses broke some YAML parsers.

(cherry picked from commit a8baf79e33)
2020-06-25 19:35:31 -07:00
Mark Andrews bb7d2bb044 Merge branch '1689-bind-stops-dnskey-lookup-in-get_dst_key-when-a-key-with-unsupported-algorithm-is-found-first-v9_11' into 'v9_11'
Resolve "BIND stops DNSKEY lookup in get_dst_key() when a key with unsupported algorithm is found first"

See merge request isc-projects/bind9!3749
2020-06-25 14:07:50 +00:00
Matthijs MekkingandMark Andrews 7e3777c28a Add todo in dnssec system test for [GL #1689]
Add a note why we don't have a test case for the issue.

It is tricky to write a good test case for this if our tools are
not allowed to create signatures for unsupported algorithms.

(cherry picked from commit c6345fffe9)
2020-06-25 22:49:38 +10:00
Mark Andrews a5b61ec1c9 Add Release Note for [GL #1689]
(cherry picked from commit e195d4608a)
2020-06-25 22:49:36 +10:00
Mark Andrews 1c14833c01 Add CHANGES for [GL #1689]
(cherry picked from commit b733bd6555)
2020-06-25 22:47:18 +10:00
Mark Andrews 145b7f0b26 The validator could fail when select_signing_key/get_dst_key failed
to select the signing key because the algorithm was not supported
and the loop was prematurely aborted.

(cherry picked from commit d475f3aeed)
2020-06-25 22:46:41 +10:00
Mark Andrews 2ce8aa6b8c Merge branch '1969-silence-cppcheck-warnings-v9_11' into 'v9_11'
Resolve "Silence CPPCHECK warnings"

See merge request isc-projects/bind9!3747
2020-06-25 12:37:10 +00:00
Mark Andrews a878e8d4bc Address potential thread issues:
Assign and then check node for NULL to address another thread
changing radix->head in the meantime.

Move 'node != NULL' check into while loop test to silence cppcheck
false positive.

Fix pointer != NULL style.

(cherry picked from commit 51f08d2095)
2020-06-25 21:18:45 +10:00
Mark Andrews ba420d50c8 Merge branch '1965-bin-named-unix-os-c-warning-s-directive-output-may-be-truncated-on-openindiana-v9_11' into 'v9_11'
Resize unamebuf[] to avoid warnings about snprintf() not having

See merge request isc-projects/bind9!3745
2020-06-24 23:52:03 +00:00
Mark Andrews 003d9d55ca Resize unamebuf[] to avoid warnings about snprintf() not having
enough buffer space.  Also change named_os_uname() prototype so
that it is now returning (const char *) rather than (char *).  If
uname() is not supported on a UNIX build prepopulate unamebuf[]
with "unknown architecture".

(cherry picked from commit 4bc3de070f)
2020-06-25 09:32:02 +10:00
Ondřej Surý b8fbd0a1ae Merge branch '1627-address-race-in-zone-maintenance-v9_11' into 'v9_11'
Address race between zone_maintenance and dns_zone_setview_helper

See merge request isc-projects/bind9!3730
2020-06-22 12:00:02 +00:00
Mark AndrewsandOndřej Surý 915d94643f Address race between zone_maintenance and dns_zone_setview_helper
There was a possible NULL dereference due to data race between accessing
zone->view and zone->view->adb.

(cherry picked from commit 67c8f7329d)
2020-06-22 12:28:41 +02:00
Michał Kępień 7dd9f979b5 Merge branch 'v9_11_20-release' into 'v9_11'
[CVE-2020-8619] Merge 9.11.20 release branch

See merge request isc-projects/bind9!3713
2020-06-18 08:58:28 +00:00
Michał Kępień 72e55cf9f4 Set up release notes for BIND 9.11.21 2020-06-18 10:43:44 +02:00
Michał Kępień 9451cd2d6a Bump BIND_BASELINE_VERSION for ABI checks 2020-06-18 10:43:44 +02:00
Tinderbox UserandMichał Kępień 25013e5bc3 Merge branch 'prep-release' into v9_11 2020-06-18 10:37:48 +02:00
Tinderbox UserandMichał Kępień fc8107adca prep 9.11.20 2020-06-18 10:37:47 +02:00
Michał Kępień c947769913 Merge branch 'security-v9_11-docs' into 'security-v9_11'
Prepare documentation for BIND 9.11.20

See merge request isc-private/bind9!174
2020-06-18 10:37:36 +02:00
Michał Kępień 2aa29c1264 Tweak and reword release notes 2020-06-18 10:37:36 +02:00
Michał Kępień ed73a7215e Add release note for #1842 2020-06-18 10:37:36 +02:00
Michał Kępień 48804d31fd Add release note for #1834 2020-06-18 10:37:36 +02:00
Michał Kępień 7d8c09d05f Add release note for #1812 2020-06-18 10:37:36 +02:00
Michał Kępień 23371b85fc Add release note for #1714 2020-06-18 10:37:36 +02:00
Michał Kępień 7b28fcbb23 Tweak and reword recent CHANGES entries 2020-06-18 10:37:35 +02:00
Michał Kępień 8f5fa2572a Merge branch 'security-new_reference-insist-v9_11' into security-v9_11 2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 1ec39e73f8 Add CHANGES entry for #1718
(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 0ab902b4b2 Add release note for #1718
(cherry picked from commit 2f9d6d4f7eb624986db914a2825bbcc4e6d378b1)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 90a7416d15 Remove INSIST from from new_reference
RBTDB node can now appear on the deadnodes lists following the changes
to decrement_reference in 4db29f1f7d to
defer checking of node->down when the tree write lock is not held.  The
node should be unlinked instead.

(cherry picked from commit 569cc155b8680d8ed12db1fabbe20947db24a0f9)
2020-06-18 10:37:16 +02:00
Ondřej Surý a0231294ef Merge branch '1950-properly-handle-missing-kyua-v9_11' into 'v9_11'
Resolve "Build option for no unittest"

See merge request isc-projects/bind9!3709
2020-06-17 13:42:15 +00:00
Ondřej Surý 279b2eaa7e Add CHANGES and release note for #1950
(cherry picked from commit 4ab9e79e6f)
2020-06-17 15:37:13 +02:00
Ondřej Surý b9c6932793 Skip the unit tests when kyua is not available
The unittest.sh script tried to execute the unit tests when cmocka
development libraries was available, but kyua, the execution engine,
was not.  Now, both need to be installed in the system.

(cherry picked from commit 762a3c866e)
2020-06-17 15:31:44 +02:00
Ondřej Surý 9605a1ba79 Merge branch 'ondrej/switch-the-default-branch-name-to-main-v9_11' into 'v9_11'
Adjust the GitLab CI scripts for new default branch name

See merge request isc-projects/bind9!3708
2020-06-17 12:19:26 +00:00
Ondřej Surý 280720b151 Adjust the GitLab CI scripts for new default branch name
(cherry picked from commit b36cd06a0b)
2020-06-17 14:17:37 +02:00
Ondřej Surý c722ece5ea Merge branch '1945-system-clang-tsan-has-bad-symbolizer-v9_11' into 'v9_11'
Set the TSAN symbolizer path directly, the indirection via env doesn't work

See merge request isc-projects/bind9!3699
2020-06-16 08:55:00 +00:00
Ondřej Surý a4837430c0 Set the TSAN symbolizer path directly, the indirection via env doesn't work
(cherry picked from commit 39107365a7)
2020-06-16 10:52:44 +02:00
Mark Andrews 565709d377 Merge branch '1929-v9_11-drop-define-activeemtpynode-activeemtpynode64-from-lib-dns-rbtdb-c' into 'v9_11'
Resolve "[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.c"

See merge request isc-projects/bind9!3690
2020-06-12 06:21:24 +00:00
Mark Andrews dcf3941f17 Fix #define of activeemptynode for rbtdb64 2020-06-12 11:41:06 +10:00