ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
25,207 Commits 589 Branches 805 Tags
8664a1bd40814ed0b42eacfc5eb354b598dfd6df
Commit Graph
3086 Commits
Author SHA1 Message Date
Evan Hunt 3440cf9c60 [v9_11] fix rpz formerr loop 
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
 2017-05-30 12:35:06 -07:00
Mark Andrews 9270a14461 4530. [bug] "dyndb" is dependent on dlopen existing / being 
enabled. [RT #45291]

(cherry picked from commit aa3a8979bc)
 2017-05-30 11:35:05 +10:00
Evan Hunt fb9ef31fed [v9_11] Add DLZ db version to activeversions 
4628.	[bug]		Fixed a potential reference leak in query_getdb().
			[RT #45247]

(cherry picked from commit 594eadcc34)
 2017-05-28 14:29:58 -07:00
Evan Hunt b6fa637fc8 [v9_11] don't keep an LMDB transaction open across an exclusive section 
4625.	[bug]		Running "rndc addzone" and "rndc delzone" at close
			to the same time could trigger a deadlock if using
			LMDB. [RT #45209]

(cherry picked from commit 03a7a952c0)
 2017-05-16 08:48:21 -07:00
Mark Andrews c935952ede 4619. [bug] Call isc_mem_put instead of isc_mem_free in 
bin/named/server.c:setup_newzones. [RT #45202]

(cherry picked from commit 0c18eb4783)
 2017-05-10 11:11:09 +10:00
Evan Hunt c83a306155 [v9_11] fix lmdb delzone 
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]

(cherry picked from commit 3a554a444c)
 2017-05-04 12:32:47 -07:00
Mark Andrews 0b18154e45 remove unused assignments [RT #45147] 
(cherry picked from commit 78551a3f2c)
 2017-05-03 07:46:21 +10:00
Tinderbox User af0d9b7705 update copyright notice / whitespace 2017-04-26 23:46:00 +00:00
Tinderbox User 0fc4b96b2b regen v9_11 2017-04-26 23:29:27 +00:00
Mukund Sivaraman 3b38e4b834 Set a LMDB mapsize and also provide a config option to control it (#44954) 
(cherry picked from commit 241b49e611)
 2017-04-26 23:55:27 +05:30
Tinderbox User 9b9b0d5962 regen v9_11 2017-04-24 01:10:30 +00:00
Evan Hunt 1ca2cf0243 [v9_11] update copyrights that had been missed recently 2017-04-23 17:07:59 -07:00
Tinderbox User 164ade1482 regen v9_11 2017-04-23 01:10:00 +00:00
Tinderbox User d0c3b241e5 update copyright notice / whitespace 2017-04-21 23:46:11 +00:00
Evan Hunt 34f649fa22 [v9_11] auto-generate named.conf.docbook 
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
 2017-04-21 16:30:51 -07:00
Mukund Sivaraman fec9247b8f Validate glue before adding it to the additional section (#45062) 
(cherry picked from commit b0dbcba2d2)
 2017-04-21 15:46:07 +05:30
Mark Andrews 1bce43adcc 4585. [port] win32: Set CompileAS value. [RT #42474] 
(cherry picked from commit 3742338a7b)
 2017-04-20 12:42:39 +10:00
Tinderbox User 3be4330b77 update copyright notice / whitespace 2017-03-16 23:47:44 +00:00
Mark Andrews 8bcd80824c 4581. [port] Linux: Add getpid and getrandom to the list of system 
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
 2017-03-16 11:23:36 +11:00
Mark Andrews b81977ae70 4575. [security] Dns64 with break-dnssec yes; can result in a 
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
 2017-02-15 12:22:53 +11:00
Tinderbox User 1617002c78 update copyright notice / whitespace 2017-02-04 23:46:08 +00:00
Evan Hunt fc8c8966c9 [v9_11] fall back to builtin keys if bind.keys is empty 
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
 2017-02-04 00:43:32 -08:00
Evan Hunt 07b7a3eade [v9_11] store local and remote addresses in dnstap 
4569.	[func]		Store both local and remote addresses in dnstap
			logging, and modify dnstap-read output format to
			print them. [RT #43595]

(cherry picked from commit 650b5e7592)
 2017-02-03 17:11:06 -08:00
Evan Hunt 6ec6741fe7 [v9_11] Revert "fixed build failure when building without LMDB" 
This reverts commit d9788e03ad.
 2017-02-02 11:28:53 -08:00
Evan Hunt d9788e03ad [v9_11] fixed build failure when building without LMDB 
(cherry picked from commit 8acbf7e4de99bbc4867b02ed87dbbc3761a57ca5)
 2017-02-02 11:24:57 -08:00
Mark Andrews 22e3ffcf2c 4556. [security] Combining dns64 and rpz can result in dereferencing 
a NULL pointer (read).  (CVE-2017-3135) [RT#44434]

(cherry picked from commit 5abe80ef13)
 2017-01-24 09:54:54 +11:00
Tinderbox User 2f4e3e45d6 update copyright notice / whitespace 2017-01-19 23:46:07 +00:00
Mark Andrews eb032a17ef whitespace 
(cherry picked from commit bf0b649993)
 2017-01-19 13:16:35 +11:00
Tinderbox User f6b9092741 update copyright notice / whitespace 2017-01-12 23:46:13 +00:00
Evan Hunt 445b0e72d7 [v9_11] more specific date for DLV shutdown warning 2017-01-12 09:11:17 -08:00
Tinderbox User 2a2618356e update copyright notice / whitespace 2016-12-28 23:50:44 +00:00
Mark Andrews 9609899255 4531. [security] 'is_zone' was not being properly updated by redirect2 
and subsequently preserved leading to an assertion
                        failure. (CVE-2016-9778) [RT #43837]

(cherry picked from commit d376792dae)
 2016-12-29 10:27:21 +11:00
Mark Andrews 72cae054ad 4541. [bug] rndc addzone should properly reject non master/slave 
zones. [RT #43665]

(cherry picked from commit e20db12918)
 2016-12-28 10:28:54 +11:00
Mark Andrews f1e3dd087b 4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure. 
[RT #43601]

(cherry picked from commit 8e333f42ef)
 2016-12-27 09:50:08 +11:00
Mark Andrews 23ac7e6634 4539. [bug] Referencing a nonexistant zone with rpz could lead 
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
 2016-12-27 09:13:40 +11:00
Mark Andrews bc2510a6a5 4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared 
when reusing the event structure. [RT #43885]

(cherry picked from commit a678e70481)
 2016-12-14 10:43:24 +11:00
Mark Andrews 348d80fb84 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879] 
(cherry picked from commit def6b33bad)
 2016-12-13 16:27:49 +11:00
Tinderbox User 7911e6f9de regen v9_11 2016-12-07 01:09:50 +00:00
Mark Andrews 83a28ca274 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831] 
(cherry picked from commit 1b8ce3b330)
 2016-12-07 10:50:50 +11:00
Mark Andrews 52254f7526 added -T keepstderr to keep stderr open when daemonizing [RT #43736] 
(cherry picked from commit c9ee977f31)
 2016-12-05 10:38:50 +11:00
Evan Hunt 1c89e89eaf [v9_11] log as error if entropy unavailable 
4521.	[cleanup]	Log it as an error if an entropy source is not
			found and there is no fallback available. [RT #43659]

(cherry picked from commit 6bdb70057d)
 2016-11-29 11:30:47 -08:00
Tinderbox User 45571e7374 regen v9_11 2016-11-03 01:12:32 +00:00
Mark Andrews 744c1db635 4504. [security] Allow the maximum number of records in a zone to 
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
 2016-11-03 09:48:26 +11:00
Evan Hunt 8a5809527e [v9_11] make uninstall 
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
 2016-11-01 19:17:23 -07:00
Mark Andrews fd44151797 check for LIBRESSL_VERSION_NUMBER 
(cherry picked from commit b2c1d6f0a2)
 2016-11-01 12:49:13 +11:00
Mark Andrews 76af83c9ad 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] 
(cherry picked from commit 1fce0951ed)
 2016-10-31 10:05:55 +11:00
Mark Andrews 54ee0b0eef s/,/;/ 
(cherry picked from commit 856c77cc40)
 2016-10-26 22:38:50 +11:00
Witold Krecicki cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Tinderbox User 17697000bc regen v9_11 2016-10-16 01:10:31 +00:00
Mark Andrews 2e0d02503c add managed keys to view section 
(cherry picked from commit 7551ec1ebe)
 2016-10-16 08:15:36 +11:00