ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
29,366 Commits 589 Branches 805 Tags
7ceeaca0dc42cb1b7b612c20bf7ca89bd4d75fb0
Commit Graph
29366 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Nowak 7ceeaca0dc Fix arguments with mismatched bound in lib/isc/sha2.c 
GCC 11 produced the following warnings:

    sha2.c:888:26: error: argument 1 of type ‘uint8_t[]’ {aka ‘unsigned char[]’} with mismatched bound [-Werror=array-parameter=]
      888 | isc_sha224_final(uint8_t digest[], isc_sha224_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:132:24: note: previously declared as ‘uint8_t[28]’ {aka ‘unsigned char[28]’}
      132 | void isc_sha224_final (uint8_t[ISC_SHA224_DIGESTLENGTH], isc_sha224_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1151:26: error: argument 1 of type ‘uint8_t[]’ {aka ‘unsigned char[]’} with mismatched bound [-Werror=array-parameter=]
     1151 | isc_sha256_final(uint8_t digest[], isc_sha256_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:139:24: note: previously declared as ‘uint8_t[32]’ {aka ‘unsigned char[32]’}
      139 | void isc_sha256_final (uint8_t[ISC_SHA256_DIGESTLENGTH], isc_sha256_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1514:31: error: argument 1 of type ‘uint8_t[]’ {aka ‘unsigned char[]’} with mismatched bound [-Werror=array-parameter=]
     1514 | void isc_sha512_final(uint8_t digest[], isc_sha512_t *context) {
          |                       ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:153:24: note: previously declared as ‘uint8_t[64]’ {aka ‘unsigned char[64]’}
      153 | void isc_sha512_final (uint8_t[ISC_SHA512_DIGESTLENGTH], isc_sha512_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1567:26: error: argument 1 of type ‘uint8_t[]’ {aka ‘unsigned char[]’} with mismatched bound [-Werror=array-parameter=]
     1567 | isc_sha384_final(uint8_t digest[], isc_sha384_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:146:24: note: previously declared as ‘uint8_t[48]’ {aka ‘unsigned char[48]’}
      146 | void isc_sha384_final (uint8_t[ISC_SHA384_DIGESTLENGTH], isc_sha384_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1604:44: error: argument 2 of type ‘char[]’ with mismatched bound [-Werror=array-parameter=]
     1604 | isc_sha224_end(isc_sha224_t *context, char buffer[]) {
          |                                       ~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:133:39: note: previously declared as ‘char[57]’
      133 | char *isc_sha224_end (isc_sha224_t *, char[ISC_SHA224_DIGESTSTRINGLENGTH]);
          |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1645:44: error: argument 2 of type ‘char[]’ with mismatched bound [-Werror=array-parameter=]
     1645 | isc_sha256_end(isc_sha256_t *context, char buffer[]) {
          |                                       ~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:140:39: note: previously declared as ‘char[65]’
      140 | char *isc_sha256_end (isc_sha256_t *, char[ISC_SHA256_DIGESTSTRINGLENGTH]);
          |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1686:44: error: argument 2 of type ‘char[]’ with mismatched bound [-Werror=array-parameter=]
     1686 | isc_sha512_end(isc_sha512_t *context, char buffer[]) {
          |                                       ~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:154:39: note: previously declared as ‘char[129]’
      154 | char *isc_sha512_end (isc_sha512_t *, char[ISC_SHA512_DIGESTSTRINGLENGTH]);
          |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:1727:44: error: argument 2 of type ‘char[]’ with mismatched bound [-Werror=array-parameter=]
     1727 | isc_sha384_end(isc_sha384_t *context, char buffer[]) {
          |                                       ~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:147:39: note: previously declared as ‘char[97]’
      147 | char *isc_sha384_end (isc_sha384_t *, char[ISC_SHA384_DIGESTSTRINGLENGTH]);
          |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    cc1: all warnings being treated as errors
 2021-05-20 12:55:14 +02:00
Michał Kępień a529145553 Merge branch 'v9_11_32-release' into 'v9_11' 
Merge 9.11.32 release branch

See merge request isc-projects/bind9!5070
 2021-05-20 10:44:35 +00:00
Michał Kępień 89ac216731 Set up release notes for BIND 9.11.33 2021-05-20 12:34:09 +02:00
Michał Kępień 80ffcfe774 Bump BIND_BASELINE_VERSION for ABI checks 2021-05-20 12:34:09 +02:00
Tinderbox UserandMichał Kępień bb002982b6 Merge branch 'prep-release' into v9_11_32-release 2021-05-20 12:34:09 +02:00
Michał Kępień 27c8369c3c Merge branch 'michal/prepare-documentation-for-bind-9.11.32' into 'v9_11_32-release' 
Prepare documentation for BIND 9.11.32

See merge request isc-private/bind9!295
 2021-05-20 12:34:09 +02:00
Tinderbox UserandMichał Kępień 82a83e41bf prep 9.11.32 2021-05-20 12:34:09 +02:00
Michał Kępień 1c2c3a90df Prepare release notes for BIND 9.11.32 2021-05-20 12:34:09 +02:00
Michał Kępień 20b7a5d31b Reorder release notes 2021-05-20 12:34:09 +02:00
Michał Kępień 40cce0bb71 Tweak and reword release notes 2021-05-20 12:34:09 +02:00
Michał Kępień 8351a774b3 Tweak and reword recent CHANGES entries 2021-05-20 12:34:09 +02:00
Michal Nowak c0d1666f21 Merge branch 'mnowak/openbsd-6.9-v9_11' into 'v9_11' 
[v9_11] Add OpenBSD 6.9

See merge request isc-projects/bind9!5065
 2021-05-19 17:33:39 +00:00
Michal Nowak 4b6b04e8bf Add OpenBSD 6.9 
(cherry picked from commit 315b8522ba)
 2021-05-19 18:27:40 +02:00
Mark Andrews a6e1e8b8a8 Merge branch '2701-gcc-10-fanalyzer-reports-dereference-of-null-label-in-lib-dns-name-c-1167-v9_11' into 'v9_11' 
Silence gcc-10-fanalyzer false positive

See merge request isc-projects/bind9!5050
 2021-05-18 08:30:23 +00:00
Mark Andrews ff88e33cff Silence gcc-10-fanalyzer false positive 
If 'state == ft_ordinary' then 'label' can't be NULL. Add
INSIST to reflect this.

(cherry picked from commit 29f1c1e677)
 2021-05-18 16:46:07 +10:00
Mark Andrews c78813338a Merge branch '2702-gcc-10-fanalyzer-reports-v9_11' into 'v9_11' 
Silence gcc-10-fanalyzer false positive

See merge request isc-projects/bind9!5045
 2021-05-18 06:15:25 +00:00
Mark Andrews baa40e47cd Silence gcc-10-fanalyzer false positive 
Add REQUIRE(type == dns_rdatatype_nsec3 || firstp != NULL); so
that dereferences of *firstp is not flagged as a NULL pointer
dereference.

(cherry picked from commit 683ad6e4bd)
 2021-05-18 15:48:32 +10:00
Michal Nowak 0703eb14eb Merge branch '2692-grep-from-freebsd-13-0-stumbles-on-r-in-digdelv-test-v9_11' into 'v9_11' 
[v9_11] Do not use escape codes for matching with grep

See merge request isc-projects/bind9!5033
 2021-05-17 11:37:40 +00:00
Michal Nowak 62035221e3 Do not use escape codes for matching with grep 
FreeBSD 13.0 replaced GNU grep with BSD grep and removed support for
"redundant escapes for most ordinary characters" from regex(3) library,
therefore the matching sequence in digdelv/tests.sh needs to be
rewritten otherwise it fails with:

    grep: trailing backslash (\)

(cherry picked from commit 253ae96bf1)
 2021-05-17 13:14:31 +02:00
Michal Nowak c524142b74 Merge branch 'mnowak/use-sigabrt-from-start.pl-v9_11' into 'v9_11' 
[v9_11] Use SIGABRT instead of SIGKILL to produce cores on failed start

See merge request isc-projects/bind9!4992
 2021-05-04 15:54:20 +00:00
Ondřej SurýandMichal Nowak 401b3519eb Use SIGABRT instead of SIGKILL to produce cores on failed start 
When the `named` would hang on startup it would be killed with SIGKILL
leaving us with no information about the state the process was in.
This commit changes the start.pl script to send SIGABRT instead, so we
can properly collect and process the coredump from the hung named
process.

(cherry picked from commit 861a236937)
 2021-05-04 17:22:41 +02:00
Matthijs Mekking dfadbc9d7b Merge branch 'matthijs-nsupdate-update_test-v9_11' into 'v9_11' 
Update nsupdate test (9.11)

See merge request isc-projects/bind9!4979
 2021-04-30 12:57:46 +00:00
Matthijs Mekking 5d899d0d99 Update nsupdate test 
The nsupdate system test did not record failures from the
'update_test.pl' Perl script. This was because the 'ret' value was
not being saved outside the '{ $PERL ... || ret=1 } cat_i' scope.

Change this piece to store the output in a separate file and then
cat its contents. Now the 'ret' value is being saved.

Also record failures in 'update_test.pl' if sending the update
failed.

Add missing 'n' incrementals to 'nsupdate/test.sh' to keep track of
test numbers.

(cherry picked from commit 5b31811b5f)
 2021-04-30 14:30:51 +02:00
Matthijs Mekking f2ff6fcc47 Merge branch '2445-nsec3-iterations-resolver-v9_11' into 'v9_11' 
Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure (9.11)

See merge request isc-projects/bind9!4974
 2021-04-30 09:35:20 +00:00
Mark AndrewsandMatthijs Mekking 83cbbf0ac8 Add release note for [GL #2445] 
(manually picked from commit ad236976fc)
 2021-04-30 11:13:37 +02:00
Mark AndrewsandMatthijs Mekking 523b9b02af Add CHANGES for [GL #2445] 
(cherry picked from commit fd1f7b6480)
 2021-04-30 11:13:37 +02:00
Mark AndrewsandMatthijs Mekking 02f4a9d6b3 Check insecure responses returned with too many NSEC3 iterations 
(cherry picked from commit e6e0e29fbb)
 2021-04-30 11:13:37 +02:00
Matthijs Mekking 2c81206984 Sync dns results 
Add missing DNS results from 9.16. We only care about
DNS_R_NSEC3ITERRANGE but better to sync and use the same numbers than
use a different number for this result code than what is used in 9.16.
 2021-04-30 09:58:44 +02:00
Mark AndrewsandMatthijs Mekking 1647bc7dc4 Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure 
(cherry picked from commit af02bbcdd6)
 2021-04-30 09:36:45 +02:00
Mark Andrews 2ee92dd506 Merge branch '2668-handle-net-dns-versions-that-don-t-support-nsec3param-v9_11' into 'v9_11' 
NSEC3PARAM support was added to Net::DNS in 1.00_06

See merge request isc-projects/bind9!4973
 2021-04-30 06:56:14 +00:00
Mark Andrews eb3122cd38 NSEC3PARAM support was added to Net::DNS in 1.00_06 
Require 1.01 or later to when adding a NSEC3PARAM records.

(cherry picked from commit 044933756a)
 2021-04-30 16:29:57 +10:00
Mark Andrews e0fcb90b09 Merge branch '2658-update-zonemd-now-that-rfc-8976-has-been-issued-v9_11' into 'v9_11' 
Update ZONEMD to match RFC 8976

See merge request isc-projects/bind9!4970
 2021-04-30 02:30:23 +00:00
Mark Andrews e4e4ff0e10 Update ZONEMD to match RFC 8976 
* The location of the digest type field has changed to where the
  reserved field was.
* The reserved field is now called scheme and is where the digest
  type field was.
* Digest type 2 has been defined (SHA256).

(cherry picked from commit 8510ccaa54)
 2021-04-30 11:31:05 +10:00
Mark Andrews 4aaddec8d9 Merge branch '2642-reduce-the-maximum-nsec3-iterations-that-can-be-configured-v9_11' into 'v9_11' 
Reduce nsec3 max iterations to 150 (9.11)

See merge request isc-projects/bind9!4967
 2021-04-30 01:14:38 +00:00
Mark Andrews 00a5a54978 Add Release Note for [GL #2642] 
(manually picked from commit ca07b8e414)
 2021-04-30 10:49:00 +10:00
Mark Andrews d749ccc41a Add CHANGES for [GL #2642] 
5625.   [func]          Reduce the supported maximum number of iterations
                        that can be configured in an NSEC3 zones to 150.
                        [GL #2642]

(cherry picked from commit e04f06873f)
 2021-04-30 10:49:00 +10:00
Mark Andrews e0fbb10017 Check that excessive iterations in logged by named when 
loading an existing zone or transfering from the primary.

(manually picked from commit 46eb21c546)
 2021-04-30 10:49:00 +10:00
Mark Andrews aa6a2d3902 Check NSEC3 iterations with dnssec-signzone 
(cherry picked from commit 8ec16c378d)
 2021-04-30 10:49:00 +10:00
Mark Andrews 80e8f72500 Check that named rejects excessive iterations via UPDATE 
(cherry picked from commit 4ce8437a6e)
 2021-04-30 10:49:00 +10:00
Mark Andrews f5625719a0 nsupdate: reject attempts to add NSEC3PARAM with excessive iterations 
(manually picked from commit 3fe75d9809)
 2021-04-30 10:49:00 +10:00
Mark Andrews 6e729ce890 Warn if there is excessive NSEC3 iterations 
(cherry picked from commit c9f5f8a059)
 2021-04-30 10:49:00 +10:00
Mark Andrews 91a7f94a66 Reduce nsec3 max iterations to 150 
(manually picked from commit 29126500d2)
 2021-04-30 10:49:00 +10:00
Michal Nowak f727ba383f Merge branch 'mnowak/configure-with-enable-dnstap-by-default-v9_11' into 'v9_11' 
[v9_11] Configure with --enable-dnstap by default

See merge request isc-projects/bind9!4966
 2021-04-29 14:53:41 +00:00
Michal Nowak da97afefca Suppress TSAN errors from libfstrm.so 
dnstap_test produces TSAN errors which originate in libfstrm.so. Unless
libfstrm is TSAN clean or a workaround is placed in libfstrm sources,
suppressing TSAN coming from libfstrm is necessary to test DNSTAP under
TSAN.

(cherry picked from commit c97c6fbfea)
 2021-04-29 16:19:16 +02:00
Michal Nowak b6695749c3 Configure with --enable-dnstap by default 
All platforms but OpenBSD have dnstap dependencies readily in their
respective repositories, and dnstap thus can be tested there. Given that
majority of images have dnstap dependencies available, it seems fitting
to make dnstap enabled by default.

Also dnstap is disabled for TSAN jobs configured with --disable-atomic
as it's known to produce TSAN errors (#2664) and for the gcc:noatomics
job because it has threads disabled, which is a requirement for dnstap.

(cherry picked from commit deff0ae317)
 2021-04-29 16:12:13 +02:00
Michał Kępień 52e752f25d Merge branch 'v9_11_31-release' into 'v9_11' 
Merge 9.11.31 release branch

See merge request isc-projects/bind9!4956
 2021-04-29 10:08:00 +00:00
Michał Kępień 06a3b1858c Set up release notes for BIND 9.11.32 2021-04-29 11:56:03 +02:00
Michał Kępień c0d7b3bb1d Bump BIND_BASELINE_VERSION for ABI checks 2021-04-29 11:56:03 +02:00
Tinderbox UserandMichał Kępień c3c68c6451 Merge branch 'prep-release' into v9_11_31-release 2021-04-29 11:56:03 +02:00
Michał Kępień a35cf8bc65 Merge branch 'michal/prepare-documentation-for-bind-9.11.31' into 'v9_11_31-release' 
Prepare documentation for BIND 9.11.31

See merge request isc-private/bind9!289
 2021-04-29 11:56:03 +02:00