Commit Graph
38777 Commits
Author SHA1 Message Date
Petr Špaček b63f449411 Prepare release notes for BIND 9.18.26 2024-04-03 11:14:26 +02:00
Michał Kępień 3e88318d3b Merge branch 'pspacek/hazard-improvements-9.18' into 'bind-9.18'
[9.18] CI hazard improvements

See merge request isc-projects/bind9!8901
2024-03-29 09:45:00 +00:00
Michał Kępień 9425ccb2b6 Warn if security fixes are not marked for testing
(cherry picked from commit 5e02a007ca)
2024-03-29 10:41:43 +01:00
Petr ŠpačekandMichał Kępień c7cc09185c Warn about release notes without CHANGES entry
(cherry picked from commit 0ba29730f7)
2024-03-29 10:41:43 +01:00
Petr ŠpačekandMichał Kępień 61158132c6 Detect change in supported RR types and issue Hazard warning
(cherry picked from commit 82cfb48295)
2024-03-29 10:41:43 +01:00
Michał Kępień 6f6d15e7de Merge branch 'michal/extract-changes-checks-to-a-separate-gitlab-ci-job-9.18' into 'bind-9.18'
[9.18] Extract CHANGES checks to a separate GitLab CI job

See merge request isc-projects/bind9!8927
2024-03-29 07:40:35 +00:00
Michał Kępień 4b52bd0090 Restore consistency in YAML anchor names
Commit d29fa288d4 added "pipelines" to CI
job trigger lists without updating the names of the YAML anchors
containing those lists accordingly.  Update YAML anchor names so that
they are consistent with their own contents.

(cherry picked from commit a7ece8e0bd)
2024-03-29 08:33:30 +01:00
Michał Kępień a4fa8e6335 Do not check CHANGES in pre-release pipelines
Since pre-release testing is usually carried out for branches in which
CHANGES entries are intentionally malformed to prevent entry numbering
conflicts down the road, do not run the "changes" GitLab CI job in
pipelines that are triggered by a parent pipeline (which can currently
only be a pre-release testing pipeline) to prevent triggering job
failures that would be meaningless anyway.

(cherry picked from commit 8c2503947f)
2024-03-29 08:33:30 +01:00
Michał Kępień f594a93b90 Extract CHANGES checks to a separate GitLab CI job
Checking the contents of the CHANGES file currently requires invoking
multiple shell scripts.  These invocations are conflated with those for
other test scripts in the "misc" GitLab CI job.  Extract the commands
checking the contents of the CHANGES file to a separate GitLab CI job,
"changes", to improve readability.  Remove similar checks for the
CHANGES.SE file altogether as they are only relevant for BIND -S and
therefore should not be present in an open source branch.

(cherry picked from commit 1335e139f2)
2024-03-29 08:33:30 +01:00
Michał Kępień 2f468b515a Merge branch '4334-CVE-2023-5679-test-fix-9.18' into 'bind-9.18'
[9.18] Fix check interaction in the "serve-stale" test

See merge request isc-projects/bind9!8925
2024-03-28 18:31:27 +00:00
Michał Kępień cd64a3747b Fix check interaction in the "serve-stale" test
Commit 2eee1e1761 modified the
"serve-stale" system test by adding the ns3/named9.conf.in configuration
file and making the ns3 named instance load that file near the end of
the test.  However, ns3/named9.conf.in changes the
stale-answer-client-timeout setting to a very low value, which affects
all subsequent checks in tests.sh (rather than just the check that needs
the low value to be set) and may cause false positives.  Fix by
reloading configuration from ns3/named8.conf.in as soon as the check
using a very low stale-answer-client-timeout value is finished.
2024-03-28 18:56:35 +01:00
Michał Kępień 31e7c94bc4 Merge branch '4334-CVE-2023-5679-test-9.18' into 'bind-9.18'
[9.18] [CVE-2023-5679] Check dns64 + server-stale short timeout

See merge request isc-projects/bind9!8922
2024-03-28 15:02:50 +00:00
Mark AndrewsandMichał Kępień 2eee1e1761 Check dns64 + server-stale short timeout
Check that named correctly returns a synthesized DNS64 answer when the
server stale timer triggers for the A lookup.  Use a small value for
stale-answer-client-timeout (2ms) and delay the A response by 1 second.
2024-03-28 15:28:55 +01:00
Michał Kępień fccc618514 Merge branch '4281-CVE-2023-5517-test-9.18' into 'bind-9.18'
[9.18] [CVE-2023-5517] Check nxdomain-redirect against built-in RFC-1918 zone

See merge request isc-projects/bind9!8920
2024-03-28 14:12:19 +00:00
Mark AndrewsandMichał Kępień 9c53bb94b0 Checking nxdomain-redirect against built-in RFC-1918 zone
Check that RFC 1918 leak detection does not trigger an assertion
when nxdomain redirection is enabled in the server but not for the
RFC 1918 reverse namespace.

(cherry picked from commit 2789906ce4)
2024-03-28 13:15:45 +01:00
Michal Nowak 71aa60d561 Merge branch 'mnowak/freebsd-use-mit-kerberos5-9.18' into 'bind-9.18'
[9.18] Build FreeBSD with MIT Kerberos5 instead of Heimdal

See merge request isc-projects/bind9!8915
2024-03-27 08:58:43 +00:00
Michal Nowak c683e01ff8 Build FreeBSD with MIT Kerberos5 instead of Heimdal
tsiggss system tests crash or are unstable with the base FreeBSD
(Heimdal-based) GSS-API.

(cherry picked from commit d6df757fdc)
2024-03-27 09:36:31 +01:00
Michal Nowak 27ec21b161 Merge branch 'mnowak/replace-IO-Socket-INET6-with-IO-Socket-IP' into 'bind-9.18'
IO::Socket::INET6 has been replaced by IO::Socket::IP

See merge request isc-projects/bind9!8910
2024-03-26 12:36:07 +00:00
Mark AndrewsandMichal Nowak fff8de8430 IO::Socket::INET6 has been replaced by IO::Socket::IP
IO::Socket::INET6 is no longer being maintained and its functionality
has been replaced by IO::Socket::IP.

(cherry picked from commit d1983adc22)
2024-03-25 16:02:01 +01:00
Michal Nowak 39df68be24 Merge branch 'mnowak/revert-05b09f2b5bb68a916288f56bf627babad4055b90-9.18' into 'bind-9.18'
[9.18] Revert "Work around a TSAN issue with newer kernels"

See merge request isc-projects/bind9!8908
2024-03-25 14:34:42 +00:00
Michal Nowak 82657d232d Revert "Work around a TSAN issue with newer kernels"
This reverts commit 05b09f2b5b.

The workaround has been moved to the AMI image (isc-private/packer!10).

(cherry picked from commit aba16af556)
2024-03-25 15:08:12 +01:00
Tom Krizek 70b179b099 Merge branch 'tkrizek/autosign-flaky-9.18' into 'bind-9.18'
[9.18] Mark the autosign system test as flaky

See merge request isc-projects/bind9!8900
2024-03-21 15:59:36 +00:00
Tom Krizek 2d7cc261f2 Mark the autosign system test as flaky
The autosign test uses sleep in many cases to wait for something to
happen. This inevitably leads to an instability that manifests in our
CI. Allow an automatic rerun of the test to improve its stability.

(cherry picked from commit a061fd67f6)
2024-03-21 16:23:55 +01:00
Tom Krizek aa1c4e15ca Merge branch 'tkrizek/resolver-test-export-home-9.18' into 'bind-9.18'
[9.18] Export variable in resolver system test

See merge request isc-projects/bind9!8898
2024-03-21 14:25:17 +00:00
Tom Krizek 6891291953 Export variable in resolver system test
Variable assignment when calling subroutines might not be portable.
Notably, it doesn't work with FreeBSD shell, where the value of HOME
would be ignored in this case.

Since the commands are already executed in a subshell, export the HOME
variable to ensure it is properly handled in all shells.

(cherry picked from commit 86a192cece)
2024-03-21 14:15:31 +01:00
Michał Kępień e04c17179b Merge branch 'michal/add-pipelines-to-ci-job-trigger-lists-9.18' into 'bind-9.18'
[9.18] Add "pipelines" to CI job trigger lists

See merge request isc-projects/bind9!8896
2024-03-21 11:31:40 +00:00
Michał Kępień d29fa288d4 Add "pipelines" to CI job trigger lists
To enable GitLab CI jobs in other projects to trigger pipelines in the
BIND 9 project using their CI_JOB_TOKEN, add "pipelines" to the relevant
GitLab CI job trigger lists.

(cherry picked from commit a4e9ce500a)
2024-03-21 12:30:04 +01:00
Petr Špaček 26cf83a76b Merge branch '4649-work-around-a-tsan-issue-with-newer-kernels-9.18' into 'bind-9.18'
[9.18] Work around a TSAN issue with newer kernels

See merge request isc-projects/bind9!8894
2024-03-21 08:39:59 +00:00
Michał KępieńandPetr Špaček eed32509fb Work around a TSAN issue with newer kernels
The ThreadSanitizer version currently available from Fedora 39
repositories is unable to cope with very high ASLR entropy, which is the
default in some recent Linux distributions [1].  This causes all
TSAN-enabled builds to fail on the affected systems with an error like:

    FATAL: ThreadSanitizer: unexpected memory mapping 0x7d00e0772000-0x7d00e0c00000

Work around the problem by reducing ASLR entropy for all TSAN-enabled
builds until the problem is resolved upstream.

[1] https://github.com/google/sanitizers/issues/1716

(cherry picked from commit 05b09f2b5b)
2024-03-21 09:02:09 +01:00
Mark Andrews 46c7aa2080 Merge branch '4640-checkzone-in-system-test-leaks-queries-bind-9.18' into 'bind-9.18'
[9.18] Resolve "Checkzone in system test leaks queries"

See merge request isc-projects/bind9!8892
2024-03-21 03:33:19 +00:00
Mark Andrews aa9f88b070 Stop named-checkzone leaking test queries
(cherry picked from commit ad083897cc)
2024-03-21 13:40:04 +11:00
Mark Andrews cbc6fd8209 Merge branch '4580-add-resolver-arpa-to-the-built-in-empty-zones-bind-9.18' into 'bind-9.18'
[9.18] Resolve "Add resolver.arpa to the built in empty zones"

See merge request isc-projects/bind9!8890
2024-03-21 00:49:34 +00:00
Mark Andrews ea981a9aa9 Add release note for [GL #4580]
(cherry picked from commit ecb043fc7b)
2024-03-21 11:17:34 +11:00
Mark Andrews afa0c4ae44 Add CHANGES entry for [GL #4580]
(cherry picked from commit d12c238750)
2024-03-21 11:13:50 +11:00
Mark Andrews 127566f9e2 Add RESOLVER.ARPA to the built in empty zones
RFC 9462 adds RESOLVER.ARPA to the list of built in empty zones.

(cherry picked from commit 49561277de)
2024-03-21 11:13:47 +11:00
Michał Kępień 0107701681 Merge tag 'v9.18.25' into bind-9.18 2024-03-20 14:34:32 +01:00
Michal Nowak 30274d930f Merge branch 'mnowak/pytest_rewrite_glue-9.18' into 'bind-9.18'
[9.18] Rewrite glue system test to pytest

See merge request isc-projects/bind9!8883
2024-03-20 06:58:54 +00:00
Michal Nowak 8ed4961ad8 Use bitwise operation to remove RD from default flags
(cherry picked from commit 69d3efed89)
2024-03-19 20:38:28 +01:00
Michal Nowak 4ce5f50162 Rewrite glue system test to pytest
(cherry picked from commit 9950f6d651)
2024-03-19 20:38:28 +01:00
Michal Nowak 83d9abd4ee Merge branch 'mnowak/pytest_rewrite_masterfile-9.18' into 'bind-9.18'
[9.18] Rewrite masterfile system test to pytest

See merge request isc-projects/bind9!8882
2024-03-19 11:19:37 +00:00
Michal Nowak 8c38897c5b Rewrite masterfile system test to pytest
(cherry picked from commit 7a161f615a)
2024-03-19 11:16:40 +01:00
Michal Nowak f152ee9291 Add zones_equal() with optional TTL comparison
(cherry picked from commit 686033e48d)
2024-03-19 11:15:08 +01:00
Michal Nowak ff6fc0c98f Modify rrsets_equal() to optionally compare TTL
(cherry picked from commit 5af3b713af)
2024-03-19 11:15:04 +01:00
Michal Nowak 4f03ec88b8 Merge branch 'mnowak/pytest_rewrite_limits-9.18' into 'bind-9.18'
[9.18] Rewrite limits system test to pytest

See merge request isc-projects/bind9!8878
2024-03-18 16:42:20 +00:00
Michal Nowak f94687069c Rewrite limits system test to pytest
Also, tweak the IP ranges of A RRsets so they are more easily processed
by for loops.

(cherry picked from commit f90a772298)
2024-03-18 17:07:17 +01:00
Michal Nowak 42582c6d24 Merge branch 'mnowak/freebsd-13.3-9.18' into 'bind-9.18'
[9.18] Add FreeBSD 13.3

See merge request isc-projects/bind9!8876
2024-03-18 16:03:48 +00:00
Michal Nowak ec009e7e67 Add FreeBSD 13.3
(cherry picked from commit 9019985d2d)
2024-03-18 16:02:19 +01:00
Mark Andrews a1b4a62c6a Merge branch '4641-dig-ednsflags-does-not-re-enable-edns-bind-9.18' into 'bind-9.18'
[9.18] Resolve "dig +ednsflags does not re-enable EDNS"

See merge request isc-projects/bind9!8875
2024-03-17 03:40:28 +00:00
Mark Andrews c4ba0d24a0 Add CHANGES for [GL #4641
(cherry picked from commit b41d1820d2)
2024-03-17 13:12:27 +10:00
Mark Andrews e185d23d9e Test +noedns +ednsflags=non-zero-value
(cherry picked from commit 8babbd09a1)
2024-03-17 13:11:51 +10:00