Commit Graph
28693 Commits
Author SHA1 Message Date
Matthijs MekkingandMark Andrews 7e3777c28a Add todo in dnssec system test for [GL #1689]
Add a note why we don't have a test case for the issue.

It is tricky to write a good test case for this if our tools are
not allowed to create signatures for unsupported algorithms.

(cherry picked from commit c6345fffe9)
2020-06-25 22:49:38 +10:00
Mark Andrews a5b61ec1c9 Add Release Note for [GL #1689]
(cherry picked from commit e195d4608a)
2020-06-25 22:49:36 +10:00
Mark Andrews 1c14833c01 Add CHANGES for [GL #1689]
(cherry picked from commit b733bd6555)
2020-06-25 22:47:18 +10:00
Mark Andrews 145b7f0b26 The validator could fail when select_signing_key/get_dst_key failed
to select the signing key because the algorithm was not supported
and the loop was prematurely aborted.

(cherry picked from commit d475f3aeed)
2020-06-25 22:46:41 +10:00
Mark Andrews 2ce8aa6b8c Merge branch '1969-silence-cppcheck-warnings-v9_11' into 'v9_11'
Resolve "Silence CPPCHECK warnings"

See merge request isc-projects/bind9!3747
2020-06-25 12:37:10 +00:00
Mark Andrews a878e8d4bc Address potential thread issues:
Assign and then check node for NULL to address another thread
changing radix->head in the meantime.

Move 'node != NULL' check into while loop test to silence cppcheck
false positive.

Fix pointer != NULL style.

(cherry picked from commit 51f08d2095)
2020-06-25 21:18:45 +10:00
Mark Andrews ba420d50c8 Merge branch '1965-bin-named-unix-os-c-warning-s-directive-output-may-be-truncated-on-openindiana-v9_11' into 'v9_11'
Resize unamebuf[] to avoid warnings about snprintf() not having

See merge request isc-projects/bind9!3745
2020-06-24 23:52:03 +00:00
Mark Andrews 003d9d55ca Resize unamebuf[] to avoid warnings about snprintf() not having
enough buffer space.  Also change named_os_uname() prototype so
that it is now returning (const char *) rather than (char *).  If
uname() is not supported on a UNIX build prepopulate unamebuf[]
with "unknown architecture".

(cherry picked from commit 4bc3de070f)
2020-06-25 09:32:02 +10:00
Ondřej Surý b8fbd0a1ae Merge branch '1627-address-race-in-zone-maintenance-v9_11' into 'v9_11'
Address race between zone_maintenance and dns_zone_setview_helper

See merge request isc-projects/bind9!3730
2020-06-22 12:00:02 +00:00
Mark AndrewsandOndřej Surý 915d94643f Address race between zone_maintenance and dns_zone_setview_helper
There was a possible NULL dereference due to data race between accessing
zone->view and zone->view->adb.

(cherry picked from commit 67c8f7329d)
2020-06-22 12:28:41 +02:00
Michał Kępień 7dd9f979b5 Merge branch 'v9_11_20-release' into 'v9_11'
[CVE-2020-8619] Merge 9.11.20 release branch

See merge request isc-projects/bind9!3713
2020-06-18 08:58:28 +00:00
Michał Kępień 72e55cf9f4 Set up release notes for BIND 9.11.21 2020-06-18 10:43:44 +02:00
Michał Kępień 9451cd2d6a Bump BIND_BASELINE_VERSION for ABI checks 2020-06-18 10:43:44 +02:00
Tinderbox UserandMichał Kępień 25013e5bc3 Merge branch 'prep-release' into v9_11 2020-06-18 10:37:48 +02:00
Tinderbox UserandMichał Kępień fc8107adca prep 9.11.20 2020-06-18 10:37:47 +02:00
Michał Kępień c947769913 Merge branch 'security-v9_11-docs' into 'security-v9_11'
Prepare documentation for BIND 9.11.20

See merge request isc-private/bind9!174
2020-06-18 10:37:36 +02:00
Michał Kępień 2aa29c1264 Tweak and reword release notes 2020-06-18 10:37:36 +02:00
Michał Kępień ed73a7215e Add release note for #1842 2020-06-18 10:37:36 +02:00
Michał Kępień 48804d31fd Add release note for #1834 2020-06-18 10:37:36 +02:00
Michał Kępień 7d8c09d05f Add release note for #1812 2020-06-18 10:37:36 +02:00
Michał Kępień 23371b85fc Add release note for #1714 2020-06-18 10:37:36 +02:00
Michał Kępień 7b28fcbb23 Tweak and reword recent CHANGES entries 2020-06-18 10:37:35 +02:00
Michał Kępień 8f5fa2572a Merge branch 'security-new_reference-insist-v9_11' into security-v9_11 2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 1ec39e73f8 Add CHANGES entry for #1718
(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 0ab902b4b2 Add release note for #1718
(cherry picked from commit 2f9d6d4f7eb624986db914a2825bbcc4e6d378b1)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 90a7416d15 Remove INSIST from from new_reference
RBTDB node can now appear on the deadnodes lists following the changes
to decrement_reference in 4db29f1f7d to
defer checking of node->down when the tree write lock is not held.  The
node should be unlinked instead.

(cherry picked from commit 569cc155b8680d8ed12db1fabbe20947db24a0f9)
2020-06-18 10:37:16 +02:00
Ondřej Surý a0231294ef Merge branch '1950-properly-handle-missing-kyua-v9_11' into 'v9_11'
Resolve "Build option for no unittest"

See merge request isc-projects/bind9!3709
2020-06-17 13:42:15 +00:00
Ondřej Surý 279b2eaa7e Add CHANGES and release note for #1950
(cherry picked from commit 4ab9e79e6f)
2020-06-17 15:37:13 +02:00
Ondřej Surý b9c6932793 Skip the unit tests when kyua is not available
The unittest.sh script tried to execute the unit tests when cmocka
development libraries was available, but kyua, the execution engine,
was not.  Now, both need to be installed in the system.

(cherry picked from commit 762a3c866e)
2020-06-17 15:31:44 +02:00
Ondřej Surý 9605a1ba79 Merge branch 'ondrej/switch-the-default-branch-name-to-main-v9_11' into 'v9_11'
Adjust the GitLab CI scripts for new default branch name

See merge request isc-projects/bind9!3708
2020-06-17 12:19:26 +00:00
Ondřej Surý 280720b151 Adjust the GitLab CI scripts for new default branch name
(cherry picked from commit b36cd06a0b)
2020-06-17 14:17:37 +02:00
Ondřej Surý c722ece5ea Merge branch '1945-system-clang-tsan-has-bad-symbolizer-v9_11' into 'v9_11'
Set the TSAN symbolizer path directly, the indirection via env doesn't work

See merge request isc-projects/bind9!3699
2020-06-16 08:55:00 +00:00
Ondřej Surý a4837430c0 Set the TSAN symbolizer path directly, the indirection via env doesn't work
(cherry picked from commit 39107365a7)
2020-06-16 10:52:44 +02:00
Mark Andrews 565709d377 Merge branch '1929-v9_11-drop-define-activeemtpynode-activeemtpynode64-from-lib-dns-rbtdb-c' into 'v9_11'
Resolve "[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.c"

See merge request isc-projects/bind9!3690
2020-06-12 06:21:24 +00:00
Mark Andrews dcf3941f17 Fix #define of activeemptynode for rbtdb64 2020-06-12 11:41:06 +10:00
Ondřej Surý d87f727636 Merge branch '1808-race-in-resolver-fetch-v9_11' into 'v9_11'
Resolve "assertion failure in bind 9.16.2"

See merge request isc-projects/bind9!3672
2020-06-06 07:16:33 +00:00
Ondřej Surý 724fd53643 Add release note for #1808
(cherry picked from commit 5a9f594629)
2020-06-06 07:10:13 +02:00
Witold KręcickiandOndřej Surý 530c04c33a Add CHANGES entry for #1808
(cherry picked from commit f0f859411f)
2020-06-06 07:10:13 +02:00
Witold KręcickiandOndřej Surý b0707ebba0 Fix a data access race in resolver
We were passing client address to dns_resolver_createfetch as a pointer
and it was saved as a pointer. The client (with its address) could be
gone before the fetch is finished, and in a very odd scenario
log_formerr would call isc_sockaddr_format() which first checks if the
address family is valid (and at this point it still is), then the
sockaddr is cleared, and then isc_netaddr_fromsockaddr is called which
fails an assertion as the address family is now invalid.

(cherry picked from commit 175c4d9055)
2020-06-06 07:10:13 +02:00
Ondřej Surý a5942f7438 Merge branch '1842-correct-the-bind-arm-to-say-that-the-default-session-key-for-use-with-update-policy-local-is-v9_11' into 'v9_11'
Edit documentation to indicate that the TSIG session key is automatically created on startup

See merge request isc-projects/bind9!3674
2020-06-05 14:42:20 +00:00
Suzanne GoldlustandOndřej Surý 31ed7fe55b Edit reference.rst to indicate that the TSIG session key is automatically created on startup
(cherry picked from commit 79920cea70)
2020-06-05 16:40:55 +02:00
Mark Andrews a00b3498f5 Merge branch '1835-add-yaml-for-ede-v9_11' into 'v9_11'
Add +yaml support for EDE

See merge request isc-projects/bind9!3667
2020-06-05 05:31:15 +00:00
Mark Andrews 1f1209e1f6 Add +yaml support for EDE
(cherry picked from commit 0ec77c2b92)
2020-06-05 12:10:53 +10:00
Mark Andrews a40a25697d Merge branch '1873-system-test-fails-on-single-stack-system' into 'v9_11'
Resolve "system test fails on single stack system"

See merge request isc-projects/bind9!3586
2020-06-05 01:16:32 +00:00
Mark Andrews dd43437388 Fix resolver system test on system without ipv6 (--disable-ipv6). 2020-06-05 10:42:55 +10:00
Ondřej Surý be69acfb07 Merge branch 'nsupdate-late-responses-v9_11' into 'v9_11'
Delay kserver cleanup until all tasks finish (v9.11)

See merge request isc-projects/bind9!3652
2020-06-04 11:14:43 +00:00
Ondřej Surý fcd27b397f Add CHANGES entry for !3316
(cherry picked from commit 72e78f0a4b)
2020-06-04 11:36:16 +02:00
Petr MensikandOndřej Surý d33aef43de Delay kserver cleanup until all tasks finishes
It might be possible some pending task would run when kserver is already
cleaned up. Postpone gsstsig structures cleanup after task and timer
managers are destroyed. No pending threads are possible after it.

Make action in maybeshutdown only if doshutdown was not already called.
Might be called from getinput event.

(cherry picked from commit 2685e69be8)
2020-06-04 11:35:07 +02:00
Ondřej Surý ded53d8762 Merge branch '1849-cidr-rejected-by-9-11-18-and-higher' into 'v9_11'
Resolve "CIDR rejected by 9.11.18 and higher"

See merge request isc-projects/bind9!3639
2020-06-04 06:39:27 +00:00
Ondřej Surý f35ffb0f4a Add CHANGES entry for #1849 2020-06-03 22:17:02 +02:00