Commit Graph
2777 Commits
Author SHA1 Message Date
Tinderbox User 928c3c53c6 update copyright notice / whitespace 2017-09-14 23:59:05 +00:00
Mark Andrews b3faa2b293 (cherry picked from commit 5fb0c09a5e) 2017-09-14 18:55:51 +10:00
Mark Andrews af9aed27c1 more str{n}{cat,cpy} corrections rt45981_stage2
(cherry picked from commit cb629cdeda)
2017-09-14 18:43:48 +10:00
Tinderbox User 077f3c4e27 update copyright notice / whitespace 2017-09-14 00:03:54 +00:00
Evan Hunt f07825440f [master] cleanup strcat/strcpy
4722.	[cleanup]	Clean up uses of strcpy() and strcat() in favor of
			strlcpy() and strlcat() for safety. [RT #45981]

(cherry picked from commit 114f95089c)
(cherry picked from commit 7cd594b842)
(cherry picked from commit e0ddfb109e)
2017-09-13 00:20:09 -07:00
Mark Andrews 7ebef930d7 4719. [bug] Address PVS static analyzer warnings. [RT #45946]
(cherry picked from commit 34130ee25a)
2017-09-13 09:55:13 +10:00
Tinderbox User fae699ca45 update copyright notice / whitespace 2017-09-07 23:53:21 +00:00
Mark Andrews 79ec139d10 4705. [bug] Remove some name server statistics counters that
were accidentally back ported to the BIND 9.9 branch
                        in change 3938. [RT #45919]
2017-09-07 13:16:27 +10:00
Mark Andrews a7364b097b sort order wrong 2017-09-06 18:21:54 +10:00
Mark Andrews be531d9469 sync option order with master 2017-09-06 18:06:04 +10:00
Tinderbox User a60b1b470b regen v9_9 2017-08-30 01:42:07 +00:00
Tinderbox User 0bee87c000 update copyright notice / whitespace 2017-08-29 23:52:07 +00:00
Michał Kępień 2e39f122dd [v9_9] Mark -4/-6 command line options as mutually exclusive
4690.	[doc]		Command line options -4/-6 for various tools are
			mutually exclusive. [RT #45632]

(cherry picked from commit 16650c6fa2)
2017-08-29 10:39:12 +02:00
Evan Hunt d2516c6507 [v9_9] turn on minimal responses for CDS/CDNSKEY
4678.	[cleanup]	Turn on minimal responses for CDNSKEY and CDS in
			addition to DNSKEY and DS. Thanks to Tony Finch.
			[RT #45690]

(cherry picked from commit 391a3a2f20)
2017-08-25 13:32:39 -07:00
Tinderbox User 16fd34ab85 update copyright notice / whitespace 2017-08-09 01:37:36 +00:00
Evan Hunt b435e88337 [v9_9] ensure verified_sig
4670.	[cleanup]	Ensure that a request MAC is never sent back
			in an XFR response unless the signature was
                        verified. [RT #45494]

(cherry picked from commit 0ad72b96d2)
(cherry picked from commit 37f6466aa3)
2017-08-07 18:58:50 -07:00
Tinderbox User b5f2eaec62 update copyright notice / whitespace 2017-07-21 23:48:17 +00:00
Mark Andrews 169bf685a1 4654. [cleanup] Don't use C++ keywords delete, new and namespace.
[RT #45538]

(cherry picked from commit 4bf32aa587)
2017-07-21 12:50:13 +10:00
Tinderbox User 0b3fb0379d update copyright notice / whitespace 2017-07-11 01:47:26 +00:00
Mark Andrews 7015ac4491 4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
will not fit into a single IPv4 encapsulated IPv6
                        UDP packet when transmitted over a Ethernet link.
                        [RT #42871]

(cherry picked from commit 31ffec1541)
2017-07-11 11:42:43 +10:00
Mark Andrews 282980e448 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
(cherry picked from commit 18bb24bc37)
2017-06-23 17:19:15 +10:00
Evan Hunt 10f80ef83a [v9_9] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]

(cherry picked from commit 3440cf9c60)
(cherry picked from commit a57b289ed0)
2017-05-30 12:43:57 -07:00
Evan Hunt 7334fbc55c [v9_9] Add DLZ db version to activeversions
4628.	[bug]		Fixed a potential reference leak in query_getdb().
			[RT #45247]

(cherry picked from commit 594eadcc34)
2017-05-28 14:34:14 -07:00
Mark Andrews bd84d0a47a 4624. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
[RT #45210]

(cherry picked from commit 5049d09bca)
2017-05-11 20:38:22 +10:00
Mark Andrews 673dd20a78 remove unused assignments [RT #45147]
(cherry picked from commit 78551a3f2c)
2017-05-03 07:46:34 +10:00
Tinderbox User 15731cd16c regen v9_9 2017-04-24 01:23:00 +00:00
Tinderbox User 65d4abb881 update copyright notice / whitespace 2017-04-23 23:47:17 +00:00
Tinderbox User 1966cf8c5e regen v9_9 2017-04-23 01:21:17 +00:00
Tinderbox User d77ee7c663 update copyright notice / whitespace 2017-04-21 23:47:35 +00:00
Evan Hunt ae7d8f92d7 [v9_9] auto-generate named.conf.docbook
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
2017-04-21 16:40:43 -07:00
Mukund Sivaraman e315a20bd4 Validate glue before adding it to the additional section (#45062)
(cherry picked from commit b0dbcba2d2)
(cherry picked from commit fec9247b8f)
(cherry picked from commit b958488b2e)
2017-04-21 16:03:28 +05:30
Mark Andrews 11a028ceb4 4585. [port] win32: Set CompileAS value. [RT #42474]
(cherry picked from commit 3742338a7b)
2017-04-20 13:01:35 +10:00
Mark Andrews 35ca802c7b 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:24:33 +11:00
Evan Hunt d8edf39f95 [v9_9] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:42:31 -08:00
Evan Hunt f3713038d5 [v9_9] revised comment 2017-02-04 00:24:25 -08:00
Mark Andrews 182d657891 remove outdated cvs $Id strings 2017-02-03 18:44:36 +11:00
Tinderbox User 2444ab6b88 update copyright notice / whitespace 2017-02-02 23:48:58 +00:00
Evan Hunt 5d9663f99a [v9_9] Remove obsolete Id lines that showed old date on generated bind.keys.h 2017-02-02 11:16:41 -08:00
Mark Andrews 9543825c15 4564. [maint] Update the built in managed keys to include the
upcoming root KSK. [RT #44579]

(cherry picked from commit 00a83c64d7)
2017-02-02 17:38:21 +11:00
Mark Andrews eaa394fcfa address rpz version issue 2017-01-24 11:21:55 +11:00
Mark Andrews 4b843e0cc8 4556. [security] Combining dns64 and rpz can result in dereferencing
a NULL pointer (read).  (CVE-2017-3135) [RT#44434]

(cherry picked from commit 5abe80ef13)
2017-01-24 09:56:20 +11:00
Tinderbox User 3d51a06d9d update copyright notice / whitespace 2017-01-19 23:47:43 +00:00
Mark Andrews 3f4d134e72 use TCP macro
(cherry picked from commit 2fa1676380)
2017-01-19 13:14:11 +11:00
Tinderbox User 0ed649b6e5 update copyright notice / whitespace 2017-01-12 23:48:25 +00:00
Evan Hunt b4ff704eaf [v9_9] more specific date for DLV shutdown warning 2017-01-12 09:12:47 -08:00
Tinderbox User c38b1c7115 update copyright notice / whitespace 2016-12-28 23:58:02 +00:00
Mark Andrews 354f7b05ef 4541. [bug] rndc addzone should properly reject non master/slave
zones. [RT #43665]

(cherry picked from commit e20db12918)
2016-12-28 11:08:26 +11:00
Mark Andrews c8174a6268 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:41:14 +11:00
Mark Andrews bcdf316ca5 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:38:50 +11:00
Tinderbox User 881739ee87 regen v9_9 2016-12-09 01:20:54 +00:00