Commit Graph
11202 Commits
Author SHA1 Message Date
Mark Andrews 2c3d353d57 update refreshkeytime
(cherry picked from commit ca977e3976)
2019-01-09 19:50:59 +11:00
Mark Andrews e216ee68ef maybe_numeric failed to handle NUL in text region.
(cherry picked from commit ee23780246)
2019-01-09 19:22:38 +11:00
Mark Andrews 0b8d530c84 Ensure base64/base32/hex fields in DNS records that should be non-empty are.
(cherry picked from commit 5e8b772ad1)
2019-01-09 18:53:29 +11:00
Mark AndrewsandEvan Hunt 019b12fc09 allow for up 100 records or 64K of data to be in a ncache entry
(cherry picked from commit 604889e627)
2019-01-08 21:27:36 -08:00
Mark AndrewsandEvan Hunt 3d76dae6d7 explictly convert ISC_R_NOSPACE from dns_message_parse to DNS_R_FORMERR and remove from dns_result_torcode
(cherry picked from commit 0c42a9c0ab)
2019-01-08 20:50:35 -08:00
Michał Kępień 82103796af Track forwarder timeouts in fetch contexts
Since following a delegation resets most fetch context state, address
marks (FCTX_ADDRINFO_MARK) set inside lib/dns/resolver.c are not
preserved when a delegation is followed.  This is fine for full
recursive resolution but when named is configured with "forward first;"
and one of the specified forwarders times out, triggering a fallback to
full recursive resolution, that forwarder should no longer be consulted
at each delegation point subsequently reached within a given fetch
context.

Add a new badnstype_t enum value, badns_forwarder, and use it to mark a
forwarder as bad when it times out in a "forward first;" configuration.
Since the bad server list is not cleaned when a fetch context follows a
delegation, this prevents a forwarder from being queried again after
falling back to full recursive resolution.  Yet, as each fetch context
maintains its own list of bad servers, this change does not cause a
forwarder timeout to prevent that forwarder from being used by other
fetch contexts.

(cherry picked from commit 33350626f9)
2019-01-08 08:31:16 +01:00
Ondřej Surý 179867290f Abort on allocation failure only if the memory functions are used internally in BIND 9 2018-12-21 09:22:17 +01:00
Ondřej Surý 1543df6b4e Abort on memory allocation failure
(cherry picked from commit 8de2451756)
2018-12-21 09:22:17 +01:00
Matthijs MekkingandMatthijs Mekking ed6674c9fd Move REQUIRE outside comment unsupported alg
(cherry picked from commit 5ca649967e)
2018-12-20 15:49:06 +01:00
Matthijs MekkingandMatthijs Mekking c0701e7ff2 Allow unsupported alg in zone /w dnssec-signzone
dnssec-signzone should sign a zonefile that contains a DNSKEY record
with an unsupported algorithm.  Current behavior is that it will
fail, hitting a fatal error.  The fix detects unsupported algorithms
and will not try to add it to the keylist.

Also when determining the maximum iterations for NSEC3, don't take
into account DNSKEY records in the zonefile with an unsupported
algorithm.

(cherry picked from commit 1dd11fc754)
2018-12-20 15:49:06 +01:00
Ondřej Surý bdc09e455e __SANITIZE_ADDRESS__ needs to be defined to 1
(cherry picked from commit ff7c868f25)
2018-12-20 00:14:58 +01:00
Ondřej Surý e055809c6f gcc defines __SANITIZE_ADDRESS__ and not __ADDRESS_SANITIZER__, use the correct #define
(cherry picked from commit 8903d68d69)
2018-12-19 12:44:51 +01:00
Ondřej Surý aeb6b97dad Disable RTLD_DEEPBIND when compiled under AddressSanitizer
(cherry picked from commit cad6b39cab)
2018-12-19 10:49:56 +01:00
Ondřej Surý afddfcb3f5 Define __ADDRESS_SANITIZER__ if compiling under clang's AddressSanitizer
(cherry picked from commit e1ce3a3d42)
2018-12-19 10:49:44 +01:00
Mark Andrews 0c19967532 pass the correct object to cfg_obj_log
(cherry picked from commit 53a33f7365)
2018-12-16 19:21:47 -05:00
Ondřej Surý 868e02a9ee Fix the stdatomic #ifdefs to work with older compilers 2018-12-14 09:00:13 +01:00
Ondřej Surý 9ae1c97b21 Add better EMPTY_TRANSLATION_UNIT to isc/util.h 2018-12-14 09:00:13 +01:00
Ondřej Surý a69f38e478 Fix ECC algorithms unused constants in PKCS#11 build 2018-12-14 09:00:12 +01:00
Mark Andrews be038493b9 add unit tests for dns_rdatatype_atcname, dns_rdatatype_atparent and iszonecutauth
(cherry picked from commit f2f7711977)
2018-12-14 14:27:53 +11:00
Mark Andrews 0eaa9a02b7 create dns_rdatatype_atcname to split records that can appear along side CNAME from DNSSEC; dns_rdatatype_iszonecutauth allowed too many types
(cherry picked from commit f4ceb12b69)
2018-12-14 14:12:31 +11:00
Mark Andrews e05c1a7236 log a error if we don't explicitly know that a error has been logged in zone_sign
(cherry picked from commit b108376a10)
2018-12-10 15:13:35 +11:00
Mark Andrews 2a6a3aa0e7 Properly detect bottom of zone when sign_a_node() is not called
(cherry picked from commit 9eec02a81f)
2018-12-07 11:48:03 +11:00
Mark Andrews 05785b4902 only test for prefixlen <= 63
(cherry picked from commit 5744415a75)
2018-12-03 17:06:02 +11:00
Mark Andrews 17d9fa3cc7 add missing DBC checks for catz and add isc_magic checks; add DBC checks to ht.c
(cherry picked from commit a487473fc5)
2018-11-29 14:41:41 +11:00
Mark Andrews b559bd1ebb update zname with the current zone anme
(cherry picked from commit 0708e43d3f)
2018-11-28 23:34:26 +11:00
Mark Andrews 35efc053b4 address coverity side effect in assert warning
(cherry picked from commit 2156a5b610)
2018-11-23 10:21:38 +11:00
Witold KręcickiandMark Andrews 7eb17b968a Use proper casting in socket unit test
(cherry picked from commit 5f81aa10bc)
2018-11-22 16:43:43 +11:00
Ondřej SurýandMark Andrews e839d4b978 Use strlcpy in place where strncpy(s, ...) + s[sizeof(s)-1] = \0; was used
(cherry picked from commit 175f06949f)
2018-11-22 08:10:41 +11:00
Ondřej SurýandMark Andrews f9b96e6de0 Fix memory leak in lex_test.c
(cherry picked from commit 7a3eb391fa)
2018-11-21 15:03:26 -05:00
Evan Hunt a305008346 remove (or hide behind a 'verbose' flag) extra output from system tests
(cherry picked from commit 8f15219f36)
2018-11-16 12:59:11 -08:00
Ondřej SurýandEvan Hunt 713d158e6d Remove embedded atf-src and enforce atf >= 0.20 + kyua as execution engine
(cherry picked from commit de219b8555)
2018-11-16 09:14:20 -08:00
Mark Andrews 18d80450e0 wait for tasks to complete 2018-11-16 11:07:17 +11:00
Mark Andrews efaa12bd57 add #include <isc/print.h> 2018-11-16 09:45:16 +11:00
Evan Hunt 33f428efda remove ATF source code and Atffiles
(cherry picked from commit 8c4d50c6bc)
2018-11-15 01:09:17 -08:00
JoeyandEvan Hunt 4beba42654 convert update_test; remove ATF from lib/dns/tests
(cherry picked from commit 336d5a5374)
2018-11-15 01:09:17 -08:00
Evan Hunt 28296fc57c convert gost_test 2018-11-15 01:09:16 -08:00
Evan Hunt 93e9b0261c convert dstrandom_test 2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt ea300146a8 convert tsig_test
(cherry picked from commit 92a3762cb6)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt 132bdcb954 convert time_test
(cherry picked from commit 2c7e6947fa)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt 34855ec13b convert sigs_test
(cherry picked from commit eda6281f98)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt c00f2c9434 convert rsa_test
(cherry picked from commit b915cdbf0b)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt bd3bb7cb89 convert resolver_test
(cherry picked from commit 2837a821e8)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt 5e44278871 convert rbt_serialize_test
(cherry picked from commit dfd90dbb82)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt c9c1d244e1 convert name_test
(cherry picked from commit 1b48e710d5)
2018-11-15 01:05:14 -08:00
JoeyandEvan Hunt 34291ae2be convert master_test
(cherry picked from commit 4ba08bb119)
2018-11-15 01:05:13 -08:00
JoeyandEvan Hunt ff26c1e014 convert keytable_test
(cherry picked from commit e38901154d)
2018-11-15 01:05:13 -08:00
JoeyandEvan Hunt ade81f29d6 convert private_test
(cherry picked from commit 9a464ef869)
2018-11-15 01:05:13 -08:00
Evan Hunt 3d396d1eb8 convert dbversion_test
(cherry picked from commit 98d5abb73c)
2018-11-15 01:05:13 -08:00
JoeyandEvan Hunt b902454460 convert dst_test
(cherry picked from commit ad923f82b1)
2018-11-15 01:05:13 -08:00
JoeyandEvan Hunt e8f61dd315 convert db_test
(cherry picked from commit 005e19ad3f)
2018-11-15 01:05:13 -08:00