Commit Graph

7947 Commits

Author SHA1 Message Date
Mark Andrews
77db93e68c silence VC compiler warning
(cherry picked from commit e09b9e7a91)
2017-10-07 14:04:57 +11:00
Tinderbox User
8a99b24dbe update copyright notice / whitespace 2017-10-06 23:46:41 +00:00
Evan Hunt
f592d2f76c [v9_11] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:43:18 -07:00
Michał Kępień
4ee1fbe056 [v9_11] Add support for DOA
4761.	[protocol]	Add support for DOA. [RT #45612]

(cherry picked from commit 417218837e)
2017-10-06 12:56:41 +02:00
Mark Andrews
1cd67567f7 add trust-anchor-telemetry to bring into sync with bin/named/log.c 2017-10-06 16:43:43 +11:00
Mark Andrews
94deea78f4 fix merge error 2017-10-06 14:12:14 +11:00
Mark Andrews
1c8aa38b53 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)
2017-10-06 13:53:50 +11:00
Tinderbox User
a0fb6a0980 regen v9_11 2017-10-06 01:15:42 +00:00
Tinderbox User
649482995b update copyright notice / whitespace 2017-10-05 23:46:27 +00:00
Evan Hunt
197903220d [v9_11] remove no-longer-needed check for nonexistence 2017-10-05 11:35:40 -07:00
Michał Kępień
b1ce9b3d54 [v9_11] Prevent dig INSIST failures and hangs in some failure modes
4756.	[bug]		Interrupting dig could lead to an INSIST failure after
			certain errors were encountered while querying a host
			whose name resolved to more than one address.  Change
			4537 increased the odds of triggering this issue by
			causing dig to hang indefinitely when certain error
			paths were evaluated.  dig now also retries TCP queries
			(once) if the server gracefully closes the connection
			before sending a response. [RT #42832, #45159]

(cherry picked from commit 14afc8425b)
2017-10-05 09:45:34 +02:00
Evan Hunt
5fa4be41a3 [v9_11] don't log when NZF file doesn't exist
4755.	[cleanup]	Silence unnecessary log message when NZF file doesn't
			exist. [RT #46186]

(cherry picked from commit d7ee3ed488)
2017-10-05 00:13:36 -07:00
Mark Andrews
2732d4922c 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]
2017-10-05 13:41:49 +11:00
Evan Hunt
e7d68fc4b6 [v9_11] copy the color-coded test functions to conf.sh.win32 2017-10-04 09:28:37 -07:00
Mark Andrews
834b5e1e7e add L for wide
(cherry picked from commit 055d310e54)
2017-10-04 20:45:00 +11:00
Mark Andrews
e77f7b404a stderr to /dev/null also
(cherry picked from commit 4615bc5408)
2017-10-04 19:26:59 +11:00
Mark Andrews
af6a526dfd test for 'printf'
(cherry picked from commit d1e823af15)
2017-10-04 19:20:01 +11:00
Tinderbox User
a134177ed9 update copyright notice / whitespace 2017-10-03 23:46:31 +00:00
Evan Hunt
d5bd8bb71a [v9_11] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			- No longer use ISC DLV by default in delv
			[RT #46155]
2017-10-03 00:43:19 -07:00
Mark Andrews
ad1317338a 4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
(cherry picked from commit a009d03a1a)
2017-10-03 14:55:33 +11:00
Tinderbox User
f8f19158fa update copyright notice / whitespace 2017-09-30 23:49:40 +00:00
Evan Hunt
1c81aef28d [v9_11] color-coded test output
4745.	[test]		Add color-coded pass/fail messages to system
			tests when running on terminals that support them.
			[RT #45977]

(cherry picked from commit 3bb6150cae)
2017-09-30 10:02:52 -07:00
Mark Andrews
da1f585afa 4744. [bug] Suppress trust-anchor-telementry queries if
validation is disabled. [RT #46131]

(cherry picked from commit dc0a792d94)
2017-09-29 09:33:55 +10:00
Mark Andrews
1288734b53 improve forensics
(cherry picked from commit 86e5d14e82)
2017-09-28 22:15:41 +10:00
Mark Andrews
d72952cf25 4739. [cleanup] Address clang static analysis warnings. [RT #45952]
(cherry picked from commit f9f3f20d2d)
2017-09-27 10:58:44 +10:00
Evan Hunt
68d7ff133c [v9_11] backport rpz tweaks
4713.	[cleanup]	Minor revisions to RPZ code to reduce
			differences with the development branch. [RT #46037]
2017-09-26 11:02:59 -07:00
Mark Andrews
aae171c542 4738. [port] win32: strftime mishandles %Z. [RT #46039]
(cherry picked from commit 744061a03b)
2017-09-26 23:33:26 +10:00
Mukund Sivaraman
f896f7c8be Fix use after free when closing an LMDB (#46000)
(cherry picked from commit e2ed24aa4d)
2017-09-19 19:43:22 +05:30
Tinderbox User
acce4b333d update copyright notice / whitespace 2017-09-18 23:52:43 +00:00
Evan Hunt
fd8d52fbdd [v9_11] add I: when echoing information about failed tests
(cherry picked from commit 49740fb0f2)
2017-09-18 14:15:55 -07:00
Michał Kępień
62f2fefaec [v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit f665c724e4)
2017-09-18 09:23:18 +02:00
Mark Andrews
8008de0b11 4725. [bug] Nsupdate: "recvsoa" was incorrectly reported for
failures in sending the update message.  The correct
                        location to be reported is "update_completed".
                        [RT #46014]

(cherry picked from commit 0bcb8b0b7c)
2017-09-18 14:29:40 +10:00
Mark Andrews
7b4bfc0201 4723. [bug] Statistics counter DNSTAPdropped was misidentified
as DNSSECdropped. [RT #46002]

(cherry picked from commit 3128cd21e3)
2017-09-14 23:53:07 +00:00
Tinderbox User
7c38d4781f update copyright notice / whitespace 2017-09-14 23:48:31 +00:00
Evan Hunt
a3b6dcd418 [v9_11] revert dlzexternal changes for portability 2017-09-14 11:33:36 -07:00
Mark Andrews
4f851656c4 #include <isc/string.h>
(cherry picked from commit 5fb0c09a5e)
2017-09-14 18:55:15 +10:00
Mark Andrews
5a93d3be4e more str{n}{cat,cpy} corrections rt45981_stage2
(cherry picked from commit cb629cdeda)
2017-09-14 18:33:02 +10:00
Mukund Sivaraman
e05b7dc69a Link dlzexternal system test's driver against libisc
(cherry picked from commit bbe9f1dd95)
2017-09-14 13:37:22 +05:30
Tinderbox User
bd911976d5 update copyright notice / whitespace 2017-09-13 23:52:25 +00:00
Mark Andrews
d8402e191a fix filenamelen so it has the buffer length rather than buffer length - 1
(cherry picked from commit 21c12d0107)
2017-09-14 09:30:03 +10:00
Mukund Sivaraman
a13e9f894c Add missing <isc/print.h>
(cherry picked from commit 188fa6ea68)
2017-09-13 19:48:20 +05:30
Francis Dupont
1cc250f9af Added isc/string.h to shutdown_test which got strlcpy
(cherry picked from commit 804ca1d926)
2017-09-13 23:00:42 +10:00
Evan Hunt
7cd594b842 [master] cleanup strcat/strcpy
4722.	[cleanup]	Clean up uses of strcpy() and strcat() in favor of
			strlcpy() and strlcat() for safety. [RT #45981]

(cherry picked from commit 114f95089c)
2017-09-13 00:17:16 -07:00
Mark Andrews
a27226b849 give more time for the initial signing of bits in the inline signing test to complete
(cherry picked from commit e930487ce7)
2017-09-13 12:19:42 +10:00
Mark Andrews
3f932812d7 fix first if test in setoption
(cherry picked from commit abda73147d)
2017-09-13 11:58:52 +10:00
Mark Andrews
c76e8412f4 4719. [bug] Address PVS static analyzer warnings. [RT #45946]
(cherry picked from commit 34130ee25a)
2017-09-13 09:51:39 +10:00
Tinderbox User
c40e033d21 update copyright notice / whitespace 2017-09-12 23:47:30 +00:00
Evan Hunt
a2a0100e0f [v9_11] improve handling of qcount=0 replies
4717.	[bug]		Treat replies with QCOUNT=0 as truncated if TC=1,
			FORMERR if TC=0, and log the error correctly.
			[RT #45836]

(cherry picked from commit 25b33bede4)
2017-09-12 15:27:06 -07:00
Evan Hunt
e5f5675b1d [v9_11] dig: retain domain when retrying with tcp
4712.	[bug]		"dig +domain" and "dig +search" didn't retain the
			search domain when retrying with TCP. [RT #45547]

(cherry picked from commit 8e014c45ae)
2017-09-11 10:10:38 -07:00
Evan Hunt
29f0ced781 [v9_11] add missing rrtypes to genzones
4711.	[test]		Some RR types were missing from genzones.sh.
			[RT #45782]

(cherry picked from commit 3e66721b35)
2017-09-11 09:35:03 -07:00