Commit Graph

7397 Commits

Author SHA1 Message Date
Evan Hunt
c0f24a64e5 [v9_10] nsupdate: send tkey queries to the right server
4588.	[bug]		nsupdate could send queries for TKEY to the wrong
			server when using GSSAPI. Thanks to Tomas Hozza.
			[RT #39893]

(cherry picked from commit 66b71679b7)
2017-04-20 09:30:08 -07:00
Mark Andrews
0580a56901 4587. [bug] named-checkzone failed to handle occulted data below
DNAMEs correctly. [RT #44877]

(cherry picked from commit 600b027731)
2017-04-20 13:30:26 +10:00
Mark Andrews
28c8b282dd 4585. [port] win32: Set CompileAS value. [RT #42474]
(cherry picked from commit 3742338a7b)
2017-04-20 12:43:17 +10:00
Mark Andrews
2848dbf5cd 4574. [bug] Dig leaked memory with multiple +subnet options.
[RT #44683]

(cherry picked from commit af2b20ee3f)
2017-04-20 10:47:51 +10:00
Tinderbox User
a522189a27 regen v9_10 2017-04-12 01:12:39 +00:00
Tinderbox User
e4751d0a36 update copyright notice / whitespace 2017-04-11 23:46:32 +00:00
Evan Hunt
a35dd11527 [v9_10] correct -M in synopsis
(cherry picked from commit a477a025d5)
2017-04-11 12:24:41 -07:00
Tinderbox User
6d4aea9289 regen v9_10 2017-03-26 01:12:58 +00:00
Tinderbox User
f6e12bd9b2 update copyright notice / whitespace 2017-03-25 23:46:28 +00:00
Evan Hunt
646b17251d [v9_10] document that delv should be used instead of sigchase
(cherry picked from commit db93f3d4b3)
2017-03-25 12:23:36 -07:00
Tinderbox User
960bf5835b update copyright notice / whitespace 2017-03-24 23:46:33 +00:00
Mark Andrews
a636604b20 4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
2017-03-25 02:05:09 +11:00
Tinderbox User
b51818af06 update copyright notice / whitespace 2017-03-16 23:48:48 +00:00
Mark Andrews
62fd33b09c 4581. [port] Linux: Add getpid and getrandom to the list of system
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
2017-03-16 11:25:39 +11:00
Mark Andrews
9cff7880a3 adjust range
(cherry picked from commit 9301c35ae6)
2017-03-02 12:36:29 +11:00
Tinderbox User
7ef5374b0b update copyright notice / whitespace 2017-03-01 01:55:24 +00:00
Tinderbox User
e8598bd7f1 regen v9_10 2017-03-01 01:12:17 +00:00
Mark Andrews
6841d7b854 Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
2017-03-01 12:02:45 +11:00
Tinderbox User
bbe8717b37 update copyright notice / whitespace 2017-02-28 23:46:22 +00:00
Mark Andrews
6922bf3846 fix nsupdate reference
(cherry picked from commit 02fa49a4d8)
2017-03-01 08:34:38 +11:00
Mark Andrews
764240ca07 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:24:01 +11:00
Mark Andrews
66d4de0075 4571. [bug] Out-of-tree builds of backtrace_test failed.
(cherry picked from commit 3e48466e0a)
2017-02-06 13:47:15 +11:00
Evan Hunt
f6c22352fb [v9_10] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:43:05 -08:00
Mark Andrews
6d93a4e91a remove outdated cvs $Id strings 2017-02-03 18:41:40 +11:00
Tinderbox User
89abe04af5 update copyright notice / whitespace 2017-01-31 23:46:51 +00:00
Tinderbox User
f936bc441b update copyright notice / whitespace 2017-01-30 23:47:45 +00:00
Evan Hunt
a5a7e48035 [v9_10] change 4558 was incomplete
(cherry picked from commit cd668ea57f)
2017-01-30 14:11:25 -08:00
Tinderbox User
562244d395 update copyright notice / whitespace 2017-01-24 23:46:25 +00:00
Mark Andrews
f7903e4bcc 4560. [bug] mdig: add -m option to enable memory debugging rather
than have in on all the time. [RT #44509]

4559.   [bug]           Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
                        was turned off.  [RT #44509]

(cherry picked from commit 25da687db7)
2017-01-24 17:50:06 +11:00
Mark Andrews
5abe80ef13 4556. [security] Combining dns64 and rpz can result in dereferencing
a NULL pointer (read).  (CVE-2017-3135) [RT#44434]
2017-01-24 09:53:21 +11:00
Tinderbox User
7c9d578215 update copyright notice / whitespace 2017-01-19 23:46:35 +00:00
Mark Andrews
2fa1676380 use TCP macro 2017-01-18 09:54:46 +11:00
Tinderbox User
610b6f852e update copyright notice / whitespace 2017-01-13 23:46:31 +00:00
Mark Andrews
aa09e7be55 remove false negatives (add eol to grep patterns; add missing ret=0)
(cherry picked from commit bcfaac260a)
2017-01-13 16:00:30 +11:00
Tinderbox User
ff7d77ce73 update copyright notice / whitespace 2017-01-12 23:46:57 +00:00
Mark Andrews
bfb569d34f address shadow warning
(cherry picked from commit c2687b0594)
2017-01-13 09:15:02 +11:00
Evan Hunt
809c79f42a [v9_10] more specific date for DLV shutdown warning 2017-01-12 09:11:51 -08:00
Mark Andrews
4c74af8c4e --enable-developer now compiles bin/tests's XTARGETS [RT #44205]
(cherry picked from commit 434477aa02)
2017-01-12 14:06:34 +11:00
Mark Andrews
a90f8a983c remove false positives due to bad grep [RT #44178]
(cherry picked from commit 0c43d50368)
2017-01-12 13:59:33 +11:00
Mark Andrews
7033d7027e 4551. [test] Add system tests for integrity checks of MX and
SRV records. [RT #43953]

(cherry picked from commit 750619b7a8)
2017-01-12 13:36:11 +11:00
Evan Hunt
c06270131e [v9_10] remove refrerences to keymgr 2016-12-29 11:29:50 -08:00
Mark Andrews
05b483e012 fix ProjectGuid 2016-12-29 19:25:40 +11:00
Tinderbox User
ad4e4b05f2 update copyright notice / whitespace 2016-12-28 23:52:29 +00:00
Mark Andrews
b92f7c2245 4541. [bug] rndc addzone should properly reject non master/slave
zones. [RT #43665]

(cherry picked from commit e20db12918)
2016-12-28 10:59:23 +11:00
Tinderbox User
a263f19bff update copyright notice / whitespace 2016-12-26 23:48:48 +00:00
Mark Andrews
a1f98389a3 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:29:32 +11:00
Mark Andrews
5fb74a2d04 4537. [bug] Handle timouts better in dig/host/nslookup. [RT #43576]
(cherry picked from commit 6089c8df71)
2016-12-14 15:44:49 +11:00
Tinderbox User
b3ff1f2182 update copyright notice / whitespace 2016-12-13 23:48:55 +00:00
Mark Andrews
31da2eba56 4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
when reusing the event structure. [RT #43885]

(cherry picked from commit a678e70481)
2016-12-14 10:43:41 +11:00
Mark Andrews
83139f2a21 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:37:47 +11:00