Matthijs Mekking and Mark Andrews
7e3777c28a
Add todo in dnssec system test for [GL #1689 ]
...
Add a note why we don't have a test case for the issue.
It is tricky to write a good test case for this if our tools are
not allowed to create signatures for unsupported algorithms.
(cherry picked from commit c6345fffe9 )
2020-06-25 22:49:38 +10:00
Mark Andrews
a5b61ec1c9
Add Release Note for [GL #1689 ]
...
(cherry picked from commit e195d4608a )
2020-06-25 22:49:36 +10:00
Mark Andrews
1c14833c01
Add CHANGES for [GL #1689 ]
...
(cherry picked from commit b733bd6555 )
2020-06-25 22:47:18 +10:00
Mark Andrews
145b7f0b26
The validator could fail when select_signing_key/get_dst_key failed
...
to select the signing key because the algorithm was not supported
and the loop was prematurely aborted.
(cherry picked from commit d475f3aeed )
2020-06-25 22:46:41 +10:00
Mark Andrews
2ce8aa6b8c
Merge branch '1969-silence-cppcheck-warnings-v9_11' into 'v9_11'
...
Resolve "Silence CPPCHECK warnings"
See merge request isc-projects/bind9!3747
2020-06-25 12:37:10 +00:00
Mark Andrews
a878e8d4bc
Address potential thread issues:
...
Assign and then check node for NULL to address another thread
changing radix->head in the meantime.
Move 'node != NULL' check into while loop test to silence cppcheck
false positive.
Fix pointer != NULL style.
(cherry picked from commit 51f08d2095 )
2020-06-25 21:18:45 +10:00
Mark Andrews
ba420d50c8
Merge branch '1965-bin-named-unix-os-c-warning-s-directive-output-may-be-truncated-on-openindiana-v9_11' into 'v9_11'
...
Resize unamebuf[] to avoid warnings about snprintf() not having
See merge request isc-projects/bind9!3745
2020-06-24 23:52:03 +00:00
Mark Andrews
003d9d55ca
Resize unamebuf[] to avoid warnings about snprintf() not having
...
enough buffer space. Also change named_os_uname() prototype so
that it is now returning (const char *) rather than (char *). If
uname() is not supported on a UNIX build prepopulate unamebuf[]
with "unknown architecture".
(cherry picked from commit 4bc3de070f )
2020-06-25 09:32:02 +10:00
Ondřej Surý
b8fbd0a1ae
Merge branch '1627-address-race-in-zone-maintenance-v9_11' into 'v9_11'
...
Address race between zone_maintenance and dns_zone_setview_helper
See merge request isc-projects/bind9!3730
2020-06-22 12:00:02 +00:00
Mark Andrews and Ondřej Surý
915d94643f
Address race between zone_maintenance and dns_zone_setview_helper
...
There was a possible NULL dereference due to data race between accessing
zone->view and zone->view->adb.
(cherry picked from commit 67c8f7329d )
2020-06-22 12:28:41 +02:00
Michał Kępień
7dd9f979b5
Merge branch 'v9_11_20-release' into 'v9_11'
...
[CVE-2020-8619] Merge 9.11.20 release branch
See merge request isc-projects/bind9!3713
2020-06-18 08:58:28 +00:00
Michał Kępień
72e55cf9f4
Set up release notes for BIND 9.11.21
2020-06-18 10:43:44 +02:00
Michał Kępień
9451cd2d6a
Bump BIND_BASELINE_VERSION for ABI checks
2020-06-18 10:43:44 +02:00
Tinderbox User and Michał Kępień
25013e5bc3
Merge branch 'prep-release' into v9_11
2020-06-18 10:37:48 +02:00
Tinderbox User and Michał Kępień
fc8107adca
prep 9.11.20
2020-06-18 10:37:47 +02:00
Michał Kępień
c947769913
Merge branch 'security-v9_11-docs' into 'security-v9_11'
...
Prepare documentation for BIND 9.11.20
See merge request isc-private/bind9!174
2020-06-18 10:37:36 +02:00
Michał Kępień
2aa29c1264
Tweak and reword release notes
2020-06-18 10:37:36 +02:00
Michał Kępień
ed73a7215e
Add release note for #1842
2020-06-18 10:37:36 +02:00
Michał Kępień
48804d31fd
Add release note for #1834
2020-06-18 10:37:36 +02:00
Michał Kępień
7d8c09d05f
Add release note for #1812
2020-06-18 10:37:36 +02:00
Michał Kępień
23371b85fc
Add release note for #1714
2020-06-18 10:37:36 +02:00
Michał Kępień
7b28fcbb23
Tweak and reword recent CHANGES entries
2020-06-18 10:37:35 +02:00
Michał Kępień
8f5fa2572a
Merge branch 'security-new_reference-insist-v9_11' into security-v9_11
2020-06-18 10:37:16 +02:00
Mark Andrews and Michał Kępień
1ec39e73f8
Add CHANGES entry for #1718
...
(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)
2020-06-18 10:37:16 +02:00
Mark Andrews and Michał Kępień
0ab902b4b2
Add release note for #1718
...
(cherry picked from commit 2f9d6d4f7eb624986db914a2825bbcc4e6d378b1)
2020-06-18 10:37:16 +02:00
Mark Andrews and Michał Kępień
90a7416d15
Remove INSIST from from new_reference
...
RBTDB node can now appear on the deadnodes lists following the changes
to decrement_reference in 4db29f1f7d to
defer checking of node->down when the tree write lock is not held. The
node should be unlinked instead.
(cherry picked from commit 569cc155b8680d8ed12db1fabbe20947db24a0f9)
2020-06-18 10:37:16 +02:00
Ondřej Surý
a0231294ef
Merge branch '1950-properly-handle-missing-kyua-v9_11' into 'v9_11'
...
Resolve "Build option for no unittest"
See merge request isc-projects/bind9!3709
2020-06-17 13:42:15 +00:00
Ondřej Surý
279b2eaa7e
Add CHANGES and release note for #1950
...
(cherry picked from commit 4ab9e79e6f )
2020-06-17 15:37:13 +02:00
Ondřej Surý
b9c6932793
Skip the unit tests when kyua is not available
...
The unittest.sh script tried to execute the unit tests when cmocka
development libraries was available, but kyua, the execution engine,
was not. Now, both need to be installed in the system.
(cherry picked from commit 762a3c866e )
2020-06-17 15:31:44 +02:00
Ondřej Surý
9605a1ba79
Merge branch 'ondrej/switch-the-default-branch-name-to-main-v9_11' into 'v9_11'
...
Adjust the GitLab CI scripts for new default branch name
See merge request isc-projects/bind9!3708
2020-06-17 12:19:26 +00:00
Ondřej Surý
280720b151
Adjust the GitLab CI scripts for new default branch name
...
(cherry picked from commit b36cd06a0b )
2020-06-17 14:17:37 +02:00
Ondřej Surý
c722ece5ea
Merge branch '1945-system-clang-tsan-has-bad-symbolizer-v9_11' into 'v9_11'
...
Set the TSAN symbolizer path directly, the indirection via env doesn't work
See merge request isc-projects/bind9!3699
2020-06-16 08:55:00 +00:00
Ondřej Surý
a4837430c0
Set the TSAN symbolizer path directly, the indirection via env doesn't work
...
(cherry picked from commit 39107365a7 )
2020-06-16 10:52:44 +02:00
Mark Andrews
565709d377
Merge branch '1929-v9_11-drop-define-activeemtpynode-activeemtpynode64-from-lib-dns-rbtdb-c' into 'v9_11'
...
Resolve "[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.c"
See merge request isc-projects/bind9!3690
2020-06-12 06:21:24 +00:00
Mark Andrews
dcf3941f17
Fix #define of activeemptynode for rbtdb64
2020-06-12 11:41:06 +10:00
Ondřej Surý
d87f727636
Merge branch '1808-race-in-resolver-fetch-v9_11' into 'v9_11'
...
Resolve "assertion failure in bind 9.16.2"
See merge request isc-projects/bind9!3672
2020-06-06 07:16:33 +00:00
Ondřej Surý
724fd53643
Add release note for #1808
...
(cherry picked from commit 5a9f594629 )
2020-06-06 07:10:13 +02:00
Witold Kręcicki and Ondřej Surý
530c04c33a
Add CHANGES entry for #1808
...
(cherry picked from commit f0f859411f )
2020-06-06 07:10:13 +02:00
Witold Kręcicki and Ondřej Surý
b0707ebba0
Fix a data access race in resolver
...
We were passing client address to dns_resolver_createfetch as a pointer
and it was saved as a pointer. The client (with its address) could be
gone before the fetch is finished, and in a very odd scenario
log_formerr would call isc_sockaddr_format() which first checks if the
address family is valid (and at this point it still is), then the
sockaddr is cleared, and then isc_netaddr_fromsockaddr is called which
fails an assertion as the address family is now invalid.
(cherry picked from commit 175c4d9055 )
2020-06-06 07:10:13 +02:00
Ondřej Surý
a5942f7438
Merge branch '1842-correct-the-bind-arm-to-say-that-the-default-session-key-for-use-with-update-policy-local-is-v9_11' into 'v9_11'
...
Edit documentation to indicate that the TSIG session key is automatically created on startup
See merge request isc-projects/bind9!3674
2020-06-05 14:42:20 +00:00
Suzanne Goldlust and Ondřej Surý
31ed7fe55b
Edit reference.rst to indicate that the TSIG session key is automatically created on startup
...
(cherry picked from commit 79920cea70 )
2020-06-05 16:40:55 +02:00
Mark Andrews
a00b3498f5
Merge branch '1835-add-yaml-for-ede-v9_11' into 'v9_11'
...
Add +yaml support for EDE
See merge request isc-projects/bind9!3667
2020-06-05 05:31:15 +00:00
Mark Andrews
1f1209e1f6
Add +yaml support for EDE
...
(cherry picked from commit 0ec77c2b92 )
2020-06-05 12:10:53 +10:00
Mark Andrews
a40a25697d
Merge branch '1873-system-test-fails-on-single-stack-system' into 'v9_11'
...
Resolve "system test fails on single stack system"
See merge request isc-projects/bind9!3586
2020-06-05 01:16:32 +00:00
Mark Andrews
dd43437388
Fix resolver system test on system without ipv6 (--disable-ipv6).
2020-06-05 10:42:55 +10:00
Ondřej Surý
be69acfb07
Merge branch 'nsupdate-late-responses-v9_11' into 'v9_11'
...
Delay kserver cleanup until all tasks finish (v9.11)
See merge request isc-projects/bind9!3652
2020-06-04 11:14:43 +00:00
Ondřej Surý
fcd27b397f
Add CHANGES entry for !3316
...
(cherry picked from commit 72e78f0a4b )
2020-06-04 11:36:16 +02:00
Petr Mensik and Ondřej Surý
d33aef43de
Delay kserver cleanup until all tasks finishes
...
It might be possible some pending task would run when kserver is already
cleaned up. Postpone gsstsig structures cleanup after task and timer
managers are destroyed. No pending threads are possible after it.
Make action in maybeshutdown only if doshutdown was not already called.
Might be called from getinput event.
(cherry picked from commit 2685e69be8 )
2020-06-04 11:35:07 +02:00
Ondřej Surý
ded53d8762
Merge branch '1849-cidr-rejected-by-9-11-18-and-higher' into 'v9_11'
...
Resolve "CIDR rejected by 9.11.18 and higher"
See merge request isc-projects/bind9!3639
2020-06-04 06:39:27 +00:00
Ondřej Surý
f35ffb0f4a
Add CHANGES entry for #1849
2020-06-03 22:17:02 +02:00