Commit Graph
22988 Commits
Author SHA1 Message Date
Evan Hunt bfdeccc5bd ensure rpz summary consistence during AXFR updates
4121.	[bug]		When updating a response-policy zone via AXFR,
			summary data about other policy zones could fall
			out of sync. Ultimately this could trigger an
			assertion failure in rpz.c. [RT #39567]

(cherry picked from commit 19365b43e9)
(cherry picked from commit 433b64a548)
2015-05-21 12:39:43 -07:00
Evan Hunt e1dc78dd6e [v9_10_2_patch] address a possible policy update race
4120.	[bug]		A bug in RPZ could cause the server to crash if
			policy zones were updated while recursion was
			pending for RPZ processing of an active query.
			[RT #39415]

(cherry picked from commit 7e6cf6fc6e)
(cherry picked from commit 04defaf799)
2015-05-21 12:39:39 -07:00
Evan Hunt 0ed7ac26f1 Fix a bug in RPZ that could cause unwanted recursion (#39229)
(cherry picked from commit b947e1a521)
(cherry picked from commit 5cbd509a3d)
2015-05-21 12:38:54 -07:00
Evan Hunt 62d011a9ff RPZ: Don't diff keys out of bounds, found via Valgrind (#38559)
(cherry picked from commit e58eb371a0)
(cherry picked from commit 73639a33fa)
2015-05-21 12:38:43 -07:00
Tinderbox User 53e49fb5a8 regenerate v9.10.2 2015-02-18 01:55:55 +00:00
Tinderbox User ab4c4f1431 regen v9_10 2015-02-18 01:40:13 +00:00
Evan Hunt f2009f0400 [v9_10] prep 9.10.2 2015-02-17 17:11:35 -08:00
Tinderbox User 85f71b64a8 update copyright notice / whitespace 2015-02-17 23:45:46 +00:00
Tinderbox User ae467bea95 newcopyrights 2015-02-17 23:30:08 +00:00
Evan Hunt a30b7ada90 [v9_10] silence warning 2015-02-17 11:37:18 -08:00
Evan Hunt 5999e976fa [v9_10] edit CHANGES note 2015-02-17 08:50:58 -08:00
Tinderbox User c9436dff28 update copyright notice / whitespace 2015-02-12 23:45:50 +00:00
Tinderbox User df6bb3abda newcopyrights 2015-02-12 23:30:13 +00:00
Evan Hunt 30ce1fd71e [v9_10] spelling 2015-02-12 14:56:10 -08:00
Evan Hunt 74ec5dd26f [v9_10] fixed testing problems with bdbhtp DLZ module 2015-02-12 10:21:02 -08:00
Mukund Sivaraman b7c9ad2e26 Remove canary code from hash destroy function (#38602)
This triggers a Valgrind out-of-bounds read report. It was introduced by
commit 5d7849ad7f.

No CHANGES entry necessary as it doesn't have any user-visible or
behavioral change. It removes an out-of-bounds read issue that went
undetected when allocated through isc_mem as the memory was present.
The memory read was compared to itself, so it has no behavioral change.

(cherry picked from commit ffc393dd18)
2015-02-12 18:19:04 +05:30
Mark Andrews 6482c1b4b7 ignore dig's result when expecting 'connection timed out'
(cherry picked from commit 82c6bce26a)
2015-02-12 13:44:49 +11:00
Tinderbox User 80348decfc update copyright notice / whitespace 2015-02-11 23:45:53 +00:00
Tinderbox User 499d01bd9a newcopyrights 2015-02-11 23:30:08 +00:00
Evan Hunt 551bea5743 [v9_10] typo v9.10.2rc2 2015-02-10 22:44:46 -08:00
Mark Andrews 6b51ed9d5d spelling 2015-02-11 17:00:57 +11:00
Mark Andrews bc52858a67 4061. [bug] Handle timeout in legacy system test. [RT #38573]
(cherry picked from commit 2ff2145ff5)
2015-02-11 16:54:28 +11:00
Mark Andrews bc6ec8a625 4060. [bug] dns_rdata_freestruct could be call on a uninitialised
structure when handling a error. [RT #38568]

(cherry picked from commit f4102ab13e)
2015-02-11 16:50:55 +11:00
Mark Andrews f96e5c9d50 add CVE-2015-1349 2015-02-11 16:33:57 +11:00
Evan Hunt ca18699462 [v9_10] oops, win32 data exports work differently now 2015-02-10 17:27:42 -08:00
Evan Hunt 4f1e0dd70e [v9_10] export dns_zone_mkey_{month,day,hour} 2015-02-10 17:00:44 -08:00
Tinderbox User a60d1d80f9 regenerate 2015-02-11 00:00:38 +00:00
Tinderbox User bce6232a49 regen v9_10 2015-02-10 23:58:03 +00:00
Tinderbox User d5bad8c9b9 update copyright notice / whitespace 2015-02-10 23:45:50 +00:00
Tinderbox User c583ad4cb1 newcopyrights 2015-02-10 23:30:07 +00:00
Evan Hunt df3ca0d7f3 [v9_10] prep 9.10.2rc2 2015-02-10 15:12:49 -08:00
Evan Hunt 5d26333c87 [v9_10] silence RPZ log messages
4050.	[cleanup]	Silence occasional spurious "duplicate query" log
			messages from RPZ. [RT #38510]
2015-02-10 15:01:46 -08:00
Evan Hunt eb36da19e7 [v9_10] address valgrind warnings
4059.	[bug]		Addressed valgrind warnings. [RT #38549]
2015-02-10 14:03:27 -08:00
Evan Hunt a7db54206c [v9_10] fix PRNG selection in dispatch.c
4058.	[bug]		UDP dispatches could use the wrong psuedorandom
			number generator context. [RT #38578]
2015-02-10 13:55:14 -08:00
Evan Hunt 81048281c2 [v9_10] cleanup 2015-02-10 13:50:01 -08:00
Evan Hunt 83b613cbfb [v9_10] fix "initialize with revoked key" test 2015-02-10 13:40:39 -08:00
Evan Hunt f87d4ca084 [v9_10] 5011 fixes
4056.	[bug]		Fixed several small bugs in automatic trust anchor
			management, including a memory leak and a possible
			loss of key state information. [RT #38458]
2015-02-10 12:59:38 -08:00
Mark Andrews 6a383a6318 4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
[RT #38565]

(cherry picked from commit e785f9c1c7)
2015-02-06 17:02:36 +11:00
Tinderbox User 11cca1cf7e regen v9_10 2015-02-06 01:08:25 +00:00
Mark Andrews f4889a7491 cast to (unsigned long) to silence format warning
(cherry picked from commit d2a50c9ba8)
2015-02-05 07:50:44 +11:00
Evan Hunt 6bd82ee4a5 [v9_10] avoid crash due to managed-key rollover
4053.	[security]	Revoking a managed trust anchor and supplying
			an untrusted replacement could cause named
			to crash with an assertion failure.
			(CVE-2015-1349) [RT #38344]
2015-02-03 18:25:58 -08:00
Tinderbox User 18f1c5b304 regen v9_10 2015-02-04 01:08:20 +00:00
Tinderbox User a45043e538 update copyright notice / whitespace 2015-02-03 23:46:54 +00:00
Tinderbox User 32302c8013 newcopyrights 2015-02-03 23:30:06 +00:00
Evan Hunt 039c916c48 [v9_10] clarify edns-udp-size doc
(cherry picked from commit 7267d1f335)
2015-02-03 13:36:54 -08:00
Mukund Sivaraman 6ba6c73179 Update notes.xml for #38454
(cherry picked from commit e3e783a0e9)
2015-02-03 12:08:17 +05:30
Mukund Sivaraman 718b30d039 Fix a leak of query fetchlock (#38454)
4052.	[bug]		Fix a leak of query fetchlock. [RT #38454]

(cherry picked from commit 4eefa351cc)
2015-02-03 11:47:44 +05:30
Mukund Sivaraman ed436982c5 Fix a leak of pthread_mutexattr_t (#38454)
4051.	[bug]		Fix a leak of pthread_mutexattr_t. [RT #38454]

(cherry picked from commit fe12a8f107)

Conflicts:
	CHANGES
2015-02-03 11:47:21 +05:30
Tinderbox User 7c8189712b update copyright notice / whitespace 2015-01-30 23:45:46 +00:00
Tinderbox User 4e06940d7b newcopyrights 2015-01-30 23:30:05 +00:00