Commit Graph
28715 Commits
Author SHA1 Message Date
Mark Andrews 7aff93bdc3 Update BIND 9 logo 2020-07-07 14:40:11 +10:00
Michał Kępień 94e43cf220 Merge branch '1627-add-changes-entry-v9_11' into 'v9_11'
[v9_11] Add CHANGES entry for #1627

See merge request isc-projects/bind9!3798
2020-07-02 09:25:57 +00:00
Michał Kępień e690fff4ba Add CHANGES entry for #1627
(cherry picked from commit dee2b3c7c8)
2020-07-02 11:23:29 +02:00
Ondřej Surý 4051b88180 Merge branch '1968-cleanup-dead-nodes-fix-v9_11' into 'v9_11'
Resolve "Again: BIND | rbtdb.c:2162: INSIST with bind with 9.11.20  (see #1718)"

See merge request isc-projects/bind9!3783
2020-07-01 14:26:34 +00:00
Ondřej Surý 6d9919fb86 Add CHANGES and release note for #1968
(cherry picked from commit 4c12709da4)
2020-07-01 15:38:51 +02:00
Witold KręcickiandOndřej Surý e73702e821 rbtdb: cleanup_dead_nodes should ignore alive nodes on the deadlist
(cherry picked from commit c8f2d55acf)
2020-07-01 15:37:01 +02:00
Mark Andrews b9024e06b7 Merge branch 'marka-silence-pyyaml-warning-v9_11' into 'v9_11'
Silence PyYAML warning

See merge request isc-projects/bind9!3770
2020-06-30 02:19:00 +00:00
Michał KępieńandMark Andrews 74a738428c Silence PyYAML warning
Make yaml.load_all() use yaml.SafeLoader to address a warning currently
emitted when bin/tests/system/dnstap/ydump.py is run:

    ydump.py:28: YAMLLoadWarning: calling yaml.load_all() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
      for l in yaml.load_all(f.stdout):

(cherry picked from commit 62f631f798)
2020-06-30 11:43:35 +10:00
Mark Andrews 66c9390775 Merge branch 'u/fanf2/dnstap-roll-v9_11' into 'v9_11'
U/fanf2/dnstap roll v9 11

See merge request isc-projects/bind9!3755
2020-06-30 00:16:01 +00:00
Mark Andrews 686ee5bd12 Check that 'rndc dnstap -roll <value>' works
(cherry picked from commit a289a57c7f)
2020-06-30 08:39:19 +10:00
Michał Kępień e2ff063c8c Merge branch 'mnowak/add-new-releases-v9_11' into 'v9_11'
[v9_11] Add Ubuntu 20.04, Fedora 32, Alpine 3.12, OpenBSD 6.7, and FreeBSD 11.4

See merge request isc-projects/bind9!3763
2020-06-29 11:08:26 +00:00
Michał Kępień e5a72ed3a5 Fix build-time GSSAPI detection on Tumbleweed
The "krb5-devel" package on openSUSE Tumbleweed installs the
"krb5-config" binary into a custom prefix, which prevents BIND's
"configure" script from autodetecting it.  Fix by specifying the path to
the "krb5-config" binary using --with-gssapi.

(cherry picked from commit 1be15f5900)
2020-06-29 12:49:35 +02:00
Michal NowakandMichał Kępień 5a60bff4c8 Update FreeBSD 11 to 11.4
(cherry picked from commit 18f97b9af2)
2020-06-29 12:49:07 +02:00
Michal NowakandMichał Kępień be8524cea6 Update to Alpine Linux 3.12
(cherry picked from commit eff79ab20c)
2020-06-29 12:49:00 +02:00
Michal NowakandMichał Kępień b5012b000c Update to OpenBSD 6.7
(cherry picked from commit 374660fd37)
2020-06-29 12:48:52 +02:00
Michal NowakandMichał Kępień eb1f193ba3 Drop Bionic
(cherry picked from commit 27c8bc1750)
2020-06-29 12:48:44 +02:00
Michal NowakandMichał Kępień 1520d48112 Add Ubuntu 20.04 Focal Fossa, update Fedora to 32
(cherry picked from commit c3e259a8c9)
2020-06-29 12:48:43 +02:00
Mark Andrews 1632ef0a92 Merge branch '1935-v9_11-resolver-test-broken-on-windows-after-3586' into 'v9_11'
Resolve "[v9_11] "resolver" test broken on Windows after !3586"

See merge request isc-projects/bind9!3691
2020-06-26 14:17:44 +00:00
Mark Andrews d958d51797 Just test for the two possible values rather than testing for ipv6.
testsock6 can return a false negative when testing under Windows.
2020-06-26 08:55:39 +00:00
Evan Hunt 5da2fedf9d Merge branch '1952-yaml-ipv6-v9_11' into 'v9_11'
append "0" to IPv6 addresses ending in "::" when printing YAML

See merge request isc-projects/bind9!3753
2020-06-26 03:59:10 +00:00
Evan Hunt 8d52602daf append "0" to IPv6 addresses ending in "::" when printing YAML
such addresses broke some YAML parsers.

(cherry picked from commit a8baf79e33)
2020-06-25 19:35:31 -07:00
Mark Andrews bb7d2bb044 Merge branch '1689-bind-stops-dnskey-lookup-in-get_dst_key-when-a-key-with-unsupported-algorithm-is-found-first-v9_11' into 'v9_11'
Resolve "BIND stops DNSKEY lookup in get_dst_key() when a key with unsupported algorithm is found first"

See merge request isc-projects/bind9!3749
2020-06-25 14:07:50 +00:00
Matthijs MekkingandMark Andrews 7e3777c28a Add todo in dnssec system test for [GL #1689]
Add a note why we don't have a test case for the issue.

It is tricky to write a good test case for this if our tools are
not allowed to create signatures for unsupported algorithms.

(cherry picked from commit c6345fffe9)
2020-06-25 22:49:38 +10:00
Mark Andrews a5b61ec1c9 Add Release Note for [GL #1689]
(cherry picked from commit e195d4608a)
2020-06-25 22:49:36 +10:00
Mark Andrews 1c14833c01 Add CHANGES for [GL #1689]
(cherry picked from commit b733bd6555)
2020-06-25 22:47:18 +10:00
Mark Andrews 145b7f0b26 The validator could fail when select_signing_key/get_dst_key failed
to select the signing key because the algorithm was not supported
and the loop was prematurely aborted.

(cherry picked from commit d475f3aeed)
2020-06-25 22:46:41 +10:00
Mark Andrews 2ce8aa6b8c Merge branch '1969-silence-cppcheck-warnings-v9_11' into 'v9_11'
Resolve "Silence CPPCHECK warnings"

See merge request isc-projects/bind9!3747
2020-06-25 12:37:10 +00:00
Mark Andrews a878e8d4bc Address potential thread issues:
Assign and then check node for NULL to address another thread
changing radix->head in the meantime.

Move 'node != NULL' check into while loop test to silence cppcheck
false positive.

Fix pointer != NULL style.

(cherry picked from commit 51f08d2095)
2020-06-25 21:18:45 +10:00
Mark Andrews ba420d50c8 Merge branch '1965-bin-named-unix-os-c-warning-s-directive-output-may-be-truncated-on-openindiana-v9_11' into 'v9_11'
Resize unamebuf[] to avoid warnings about snprintf() not having

See merge request isc-projects/bind9!3745
2020-06-24 23:52:03 +00:00
Mark Andrews 003d9d55ca Resize unamebuf[] to avoid warnings about snprintf() not having
enough buffer space.  Also change named_os_uname() prototype so
that it is now returning (const char *) rather than (char *).  If
uname() is not supported on a UNIX build prepopulate unamebuf[]
with "unknown architecture".

(cherry picked from commit 4bc3de070f)
2020-06-25 09:32:02 +10:00
Ondřej Surý b8fbd0a1ae Merge branch '1627-address-race-in-zone-maintenance-v9_11' into 'v9_11'
Address race between zone_maintenance and dns_zone_setview_helper

See merge request isc-projects/bind9!3730
2020-06-22 12:00:02 +00:00
Mark AndrewsandOndřej Surý 915d94643f Address race between zone_maintenance and dns_zone_setview_helper
There was a possible NULL dereference due to data race between accessing
zone->view and zone->view->adb.

(cherry picked from commit 67c8f7329d)
2020-06-22 12:28:41 +02:00
Michał Kępień 7dd9f979b5 Merge branch 'v9_11_20-release' into 'v9_11'
[CVE-2020-8619] Merge 9.11.20 release branch

See merge request isc-projects/bind9!3713
2020-06-18 08:58:28 +00:00
Michał Kępień 72e55cf9f4 Set up release notes for BIND 9.11.21 2020-06-18 10:43:44 +02:00
Michał Kępień 9451cd2d6a Bump BIND_BASELINE_VERSION for ABI checks 2020-06-18 10:43:44 +02:00
Tinderbox UserandMichał Kępień 25013e5bc3 Merge branch 'prep-release' into v9_11 2020-06-18 10:37:48 +02:00
Tinderbox UserandMichał Kępień fc8107adca prep 9.11.20 2020-06-18 10:37:47 +02:00
Michał Kępień c947769913 Merge branch 'security-v9_11-docs' into 'security-v9_11'
Prepare documentation for BIND 9.11.20

See merge request isc-private/bind9!174
2020-06-18 10:37:36 +02:00
Michał Kępień 2aa29c1264 Tweak and reword release notes 2020-06-18 10:37:36 +02:00
Michał Kępień ed73a7215e Add release note for #1842 2020-06-18 10:37:36 +02:00
Michał Kępień 48804d31fd Add release note for #1834 2020-06-18 10:37:36 +02:00
Michał Kępień 7d8c09d05f Add release note for #1812 2020-06-18 10:37:36 +02:00
Michał Kępień 23371b85fc Add release note for #1714 2020-06-18 10:37:36 +02:00
Michał Kępień 7b28fcbb23 Tweak and reword recent CHANGES entries 2020-06-18 10:37:35 +02:00
Michał Kępień 8f5fa2572a Merge branch 'security-new_reference-insist-v9_11' into security-v9_11 2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 1ec39e73f8 Add CHANGES entry for #1718
(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 0ab902b4b2 Add release note for #1718
(cherry picked from commit 2f9d6d4f7eb624986db914a2825bbcc4e6d378b1)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 90a7416d15 Remove INSIST from from new_reference
RBTDB node can now appear on the deadnodes lists following the changes
to decrement_reference in 4db29f1f7d to
defer checking of node->down when the tree write lock is not held.  The
node should be unlinked instead.

(cherry picked from commit 569cc155b8680d8ed12db1fabbe20947db24a0f9)
2020-06-18 10:37:16 +02:00
Ondřej Surý a0231294ef Merge branch '1950-properly-handle-missing-kyua-v9_11' into 'v9_11'
Resolve "Build option for no unittest"

See merge request isc-projects/bind9!3709
2020-06-17 13:42:15 +00:00
Ondřej Surý 279b2eaa7e Add CHANGES and release note for #1950
(cherry picked from commit 4ab9e79e6f)
2020-06-17 15:37:13 +02:00