ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,812 Commits 589 Branches 805 Tags
77929046ecc9d822d84c9b47f5bb1e4a59ea5876
Commit Graph
26812 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michał Kępień 77929046ec Do not use Net::DNS::Nameserver in the "serve-stale" system test 
Net::DNS versions older than 0.67 respond to queries sent to a
Net::DNS::Nameserver even if its ReplyHandler returns undef.  This makes
the "serve-stale" system test fail as it takes advantage of the newer
behavior.  Since the latest Net::DNS version available with stock
RHEL/CentOS 6 packages is 0.65 and we officially support that operating
system, bin/tests/system/serve-stale/ans2/ans.pl should behave
consistently for various Net::DNS versions.  Ensure that by reworking it
so that it does not use Net::DNS::Nameserver.

(cherry picked from commit c4209418a5)
 2018-07-10 15:15:18 +02:00
Michał Kępień a20495b8bf Merge branch '393-fix-a-net-dns-version-quirk-in-the-resolver-system-test-v9_12' into 'v9_12' 
[v9_12] Fix a Net::DNS version quirk in the "resolver" system test

See merge request isc-projects/bind9!492
 2018-07-10 09:14:41 -04:00
Michał Kępień 655dccf4ea Fix a Net::DNS version quirk in the "resolver" system test 
Net::DNS versions older than 0.68 insert a ./ANY RR into the QUESTION
section if the latter is empty.  Since the latest Net::DNS version
available with stock RHEL/CentOS 6 packages is 0.65 and we officially
support that operating system, bin/tests/system/resolver/ans8/ans.pl
should behave consistently for various Net::DNS versions.  Ensure that
by making handleUDP() return the query ID and flags generated by
Net::DNS with 8 zero bytes appended.

(cherry picked from commit 6c3c6aea37)
 2018-07-10 15:07:38 +02:00
Witold Krecicki df69b89f21 Merge branch 'fix-synth-from-dnssec-dname-handling-v9_12' into 'v9_12' 
Don't synthesize NXDOMAIN from NSEC for records under a DNAME.

See merge request isc-projects/bind9!491
 2018-07-10 04:04:29 -04:00
Mark AndrewsandWitold Kręcicki 687ca4412a the presence of a DNAME record proves that the name does not exist in the zone but as we don't want to use that for NXDMOMAIN return DNS_R_DNAME from dns_nsec_noexistnodata 
(cherry picked from commit 8ef23f9fb0)
 2018-07-10 09:50:35 +02:00
Witold Kręcicki e263fe91c0 Don't synthesize NXDOMAIN from NSEC for records under a DNAME 
(cherry picked from commit 7f60bb39df)
 2018-07-10 09:50:30 +02:00
Mark Andrews 8561c61013 Merge branch '402-memory-leak-found-in-file-fuzz-c-in-bind-9-12-1-p2-v9_12' into 'v9_12' 
Resolve "Memory Leak found in file 'fuzz.c' in BIND-9.12.1-P2"

See merge request isc-projects/bind9!489
 2018-07-10 01:14:12 -04:00
Mark Andrews 22327b4cdf free rbuf 
(cherry picked from commit ecb2f20324)
 2018-07-10 14:37:52 +10:00
Evan Hunt 3631aeb070 Merge branch 'prep-release-v9_12_2' into 'v9_12' 
prep 9.12.2

See merge request isc-projects/bind9!472
v9.12.2 		2018-07-03 03:08:14 -04:00
Tinderbox User 355c8f0e55 prep 9.12.2 2018-07-03 06:57:10 +00:00
Evan Hunt 3a84d617bf Merge branch 'fix-readme-v9_12' into 'v9_12' 
Fix README

See merge request isc-projects/bind9!465
 2018-07-02 20:23:13 -04:00
Evan Hunt ec9e85260f fix version ordering 2018-07-02 17:19:05 -07:00
Evan Hunt 56cf466766 Merge branch 'prep-release-v9_12_2rc2' into 'v9_12' 
prep 9.12.2rc2

See merge request isc-projects/bind9!450
v9.12.2rc2 		2018-06-28 00:55:59 -04:00
Tinderbox User bbf35634c0 prep 9.12.2rc2 2018-06-28 04:42:37 +00:00
Evan Hunt 17b51354f1 Merge branch '339-issues-with-large-journal-entries-v9_12' into 'v9_12' 
Fix handling of large journal entries.

See merge request isc-projects/bind9!444
 2018-06-27 21:33:46 -04:00
Evan Hunt ded4119b36 CHANGES, release note 
(cherry picked from commit 2aee33f412)
 2018-06-27 18:26:53 -07:00
Witold KręcickiandEvan Hunt cbb73df1f9 Fallback to normal procedure if creating of ixfr-from-differences fails 
(cherry picked from commit b1254430df)
 2018-06-27 18:25:14 -07:00
Witold KręcickiandEvan Hunt 1a5cba631e Fix some issues with large journal entries 
(cherry picked from commit 0db7130f2b)
 2018-06-27 18:25:13 -07:00
Mark Andrews cebcdadad1 Merge branch '366-missing-dereference-in-require-statement-v9_12' into 'v9_12' 
Resolve "Missing dereference in REQUIRE statement?"

See merge request isc-projects/bind9!440
 2018-06-27 03:43:57 -04:00
Mark Andrews df6951a2bb cfg_parse_boolean's REQUIRE test for ret was incomplete. 
(cherry picked from commit f1ee5e4a16)
 2018-06-27 17:37:00 +10:00
Evan Hunt 89f7c7230d Merge branch '275-add-permanent-option-to-disable-server-side-cookies-v9_12' into 'v9_12' 
[v9_12]: Resolve "Provide a mechanism (build or runtime) to turn off server-side support for RFC7873"

See merge request isc-projects/bind9!415
 2018-06-26 18:23:39 -04:00
Ondřej SurýandEvan Hunt a7c5fad628 Un-deprecate the answer-cookie option 2018-06-26 15:16:40 -07:00
Evan Hunt 41e2423d37 Merge branch '260-queries-with-empty-question-section-return-noerror-v9_12' into 'v9_12' 
Resolve "Queries with empty question section (and otherwise query message of undetermined RDCLASS) return NOERROR instead of FORMERR"

See merge request isc-projects/bind9!435
 2018-06-26 17:43:09 -04:00
Evan Hunt 07a0638c94 CHANGES 
(cherry picked from commit 2b075c2881)
 2018-06-26 14:36:36 -07:00
Mukund SivaramanandEvan Hunt ed29b84e16 return FORMERR when question section is empty if COOKIE is not present 
(cherry picked from commit 06d3106002)
 2018-06-26 14:36:34 -07:00
Ondřej Surý fbd85297eb Merge branch 'add-git-replay-merge-v9_12' into 'v9_12' 
Add git replay merge to v9_12

See merge request isc-projects/bind9!429
 2018-06-26 15:19:37 -04:00
Ondřej Surý 65144c4bf7 Add git-replay-merge.sh script to v9_12 2018-06-26 20:29:07 +02:00
Witold Krecicki 0d2172eeba Merge branch '180-fix-cmsgbuf-usage-v9_12' into 'v9_12' 
Resolve "Intermittent recursive resolver issues [socket.c:2135]"

See merge request isc-projects/bind9!427
 2018-06-26 14:25:39 -04:00
Witold Kręcicki 4007a9d020 Use completely static-sized buffers 
(cherry picked from commit 49f90025a0)
 2018-06-26 20:18:59 +02:00
Witold Kręcicki da63e95612 Fix socket cmsg buffer usage 
(cherry picked from commit d79be7dd5e)
 2018-06-26 20:12:58 +02:00
Evan Hunt 9e85d16004 Merge branch '288-named-checkconf-does-not-recognize-errors-related-to-in-view-zones-v9_12' into 'v9_12' 
Resolve "named-checkconf does not recognize errors related to in-view zones"

See merge request isc-projects/bind9!423
 2018-06-26 12:53:55 -04:00
Mark AndrewsandEvan Hunt 7f31e67c16 CHANGES, copyright 
(cherry picked from commit f7d346357e)
 2018-06-26 09:04:48 -07:00
Mark AndrewsandEvan Hunt 665f9093d2 construct a symtab of valid in-view targets then check that the target exists 
(cherry picked from commit e01a4bcb20)
 2018-06-26 09:03:47 -07:00
Michał Kępień 7d993ffb0b Merge branch '321-only-request-permitted-capabilities-in-non-libcap-builds-v9_12' into 'v9_12' 
[v9_12] Only request permitted capabilities in non-libcap builds

See merge request isc-projects/bind9!417
 2018-06-26 08:03:26 -04:00
Michał Kępień 731b003854 Add CHANGES entry 
4979.	[bug]		Non-libcap builds were not checking whether all
			requested capabilities are present in the permitted
			capability set. [GL #321]
 2018-06-26 13:18:00 +02:00
Michał Kępień 8c66f32e53 Only request permitted capabilities in non-libcap builds 
While libcap-enabled builds check whether any capability named requests
is within the permitted capability set, non-libcap builds just try
requesting them, which potentially causes a misleading error message to
be output ("Operation not permitted: please ensure that the capset
kernel module is loaded").  Ensure non-libcap builds also check whether
any requested capability is within the permitted capability set.
 2018-06-26 13:18:00 +02:00
Michał Kępień b7200143f4 Merge branch '312-fix-rpz-system-test-v9_12' into 'v9_12' 
[v9_12] Fix rpz system test

See merge request isc-projects/bind9!416
 2018-06-26 06:52:06 -04:00
Michał Kępień 80e8f4c366 Add CHANGES entry 
4978.	[test]		Fix error handling and resolver configuration in the
			"rpz" system test. [GL #312]

(cherry picked from commit 51522a2b84)
 2018-06-26 12:43:47 +02:00
Michał Kępień 6a2c606690 Do not use IANA DNSSEC keys in the "rpz" system test 
With "dnssec-validation" now defaulting to "auto", it needs to be
explicitly set to "yes" (the previous default value) for all validating
resolvers used in system tests.  Ensure that requirement is satisfied by
the resolvers used in the "rpz" system test.

(cherry picked from commit ff6b717955)
 2018-06-26 12:43:47 +02:00
Michał Kępień cee0c23d0a Determine "rpz" system test mode based on $mode rather than $DNSRPS_TEST_MODE 
Change 4897 modified the way the $DNSRPS_TEST_MODE variable is used in
bin/tests/system/rpz/tests.sh without updating all references to it,
which i.a. causes the $native and $dnsrps variables to not be set in the
default testing mode, effectively preventing failed checks from being
propagated to the final result of the test.  Use $mode instead of
$DNSRPS_TEST_MODE where appropriate to fix error handling in the "rpz"
system test.

(cherry picked from commit 730c6651a0)
 2018-06-26 12:43:47 +02:00
Evan Hunt 90e762a1cf Merge branch '247-log-the-remaining-v-info-at-startup' into 'v9_12' 
Resolve "Log the remaining -V info at startup"

Closes #247

See merge request isc-projects/bind9!249
 2018-06-25 15:02:33 -07:00
Mark AndrewsandEvan Hunt 74bfd11a5f log the remaining -V info at startup 
(cherry picked from commit 33ff03db58)
 2018-06-25 15:02:31 -07:00
Mark Andrews 9eb2ff6367 Merge branch '254-invalid-rpz-prefix-length-log-message-improperly-displays-the-prefix-labels-not-length-v9_12' into 'v9_12' 
Resolve ""invalid RPZ prefix length" log message improperly displays the prefix labels, not length"

See merge request isc-projects/bind9!408
 2018-06-25 03:39:54 -04:00
Mukund SivaramanandMark Andrews a769e80796 Add CHANGES entry 
(cherry picked from commit 90e886cfc0)
 2018-06-25 17:33:15 +10:00
Mukund SivaramanandMark Andrews 19bad5a7f3 Add system test 
(cherry picked from commit 2bf388a31b)
 2018-06-25 17:33:15 +10:00
Mukund SivaramanandMark Andrews 82d5a44dfd Patch in trailing nul character to print just the length label (for various cases below) 
(cherry picked from commit 6a756ab654)
 2018-06-25 17:33:15 +10:00
Mark Andrews e9f7ef733d Merge branch '343-casecompare-of-ninfo-tkey-txt-have-wrong-return-type-v9_12' into 'v9_12' 
Resolve "casecompare of NINFO, TKEY, TXT have wrong return type"

See merge request isc-projects/bind9!404
 2018-06-24 23:19:40 -04:00
Mark Andrews 537e3a0a14 fix casecompare return type for ninfo, tkey, txt 
(cherry picked from commit 3ba1d1e43b)
 2018-06-25 13:08:47 +10:00
Mark Andrews 393b974ed3 Merge branch '356-client-cookie-is-being-hashed-twice-when-computing-the-dns-server-cookie-v9_12' into 'v9_12' 
Resolve "Client cookie is being hashed twice when computing the DNS server cookie."

See merge request isc-projects/bind9!401
 2018-06-22 03:51:53 -04:00
Mark Andrews cd1169b605 4975. [bug] The server cookie computation for sha1 and sha256 did 
not match the method described in RFC 7873. [GL #356]

(cherry picked from commit 8755a249bc)
 2018-06-22 17:45:02 +10:00