ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
29,474 Commits 589 Branches 805 Tags
c2e6a4841542fd39178f0b7d13d54431dd5e50aa
Commit Graph
29474 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Nowak c2e6a48415 Merge branch 'mnowak/switch-pkcs11-job-to-fedora' into 'v9_11' 
Run gcc:pkcs11 CI jobs on Fedora image

See merge request isc-projects/bind9!5614
 2021-12-14 11:32:33 +00:00
Michal Nowak 99e127ffc8 Configure gcc:pkcs11 CI job with "--disable-warn-error" 
"--disable-warn-error" ./configure option disables compiler warnings.
This ensures that the job will not fail because of warnings (e.g., array
inconsistencies in lib/isc/sha2.c) we don't want to fix on BIND 9.11
because the version is in security-fixes-only mode.

    sha2.c:310:26: error: argument 1 of type 'uint8_t[]' {aka 'unsigned char[]'} with mismatched bound [-Werror=array-parameter=]
      310 | isc_sha224_final(uint8_t digest[], isc_sha224_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:132:24: note: previously declared as 'uint8_t[28]' {aka 'unsigned char[28]'}
      132 | void isc_sha224_final (uint8_t[ISC_SHA224_DIGESTLENGTH], isc_sha224_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:376:26: error: argument 1 of type 'uint8_t[]' {aka 'unsigned char[]'} with mismatched bound [-Werror=array-parameter=]
      376 | isc_sha256_final(uint8_t digest[], isc_sha256_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:139:24: note: previously declared as 'uint8_t[32]' {aka 'unsigned char[32]'}
      139 | void isc_sha256_final (uint8_t[ISC_SHA256_DIGESTLENGTH], isc_sha256_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:442:26: error: argument 1 of type 'uint8_t[]' {aka 'unsigned char[]'} with mismatched bound [-Werror=array-parameter=]
      442 | isc_sha512_final(uint8_t digest[], isc_sha512_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:153:24: note: previously declared as 'uint8_t[64]' {aka 'unsigned char[64]'}
      153 | void isc_sha512_final (uint8_t[ISC_SHA512_DIGESTLENGTH], isc_sha512_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    sha2.c:508:26: error: argument 1 of type 'uint8_t[]' {aka 'unsigned char[]'} with mismatched bound [-Werror=array-parameter=]
      508 | isc_sha384_final(uint8_t digest[], isc_sha384_t *context) {
          |                  ~~~~~~~~^~~~~~~~
    In file included from sha2.c:58:
    ./include/isc/sha2.h:146:24: note: previously declared as 'uint8_t[48]' {aka 'unsigned char[48]'}
      146 | void isc_sha384_final (uint8_t[ISC_SHA384_DIGESTLENGTH], isc_sha384_t *);
          |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 2021-12-14 12:12:40 +01:00
Michal Nowak fd9e100b42 Drop gcc:fedora34 CI jobs 
With switching the gcc:pkcs11 CI jobs from Debian Buster to Fedora, we
don't need two Fedora CI jobs, which differ only by leveraging PKCS#11
or OpenSSL.
 2021-12-14 12:11:39 +01:00
Michal Nowak 18da983970 Run gcc:pkcs11 CI jobs on Fedora image 
SoftHSM v2.4 was dropped from the base image because it is being
upgraded to Debian Bullseye, which has SoftHSM v2.6, the same version we
already have in the Fedora image, and use it in the "main" branch for
PKCS#11 testing. However, on the "v9_11" branch, to sustain PKCS#11
testing, gcc:pkcs11 CI jobs need to be ported from the base image to the
Fedora image.
 2021-12-14 12:10:07 +01:00
Ondřej Surý 04f641a173 Merge branch 'ondrej/update-flycheck-configuration-on-Linux-v9_11' into 'v9_11' 
Add flycheck configuration for libxml2 and json-c on Linux

See merge request isc-projects/bind9!5572
 2021-11-15 11:35:48 +00:00
Ondřej SurýandOndřej Surý c5e3b0646b Add flycheck configuration for libxml2 and json-c on Linux 
(cherry picked from commit 41f86440c4)
 2021-11-15 12:34:45 +01:00
Petr Špaček 73ff4280b7 Merge branch 'pspacek/ci-jobs-interruptible-v9_11' into 'v9_11' 
Automatically cancel CI jobs on outdated branches [v9_11]

See merge request isc-projects/bind9!5565
 2021-11-09 12:22:45 +00:00
Petr Špaček a01d9606bb Automatically cancel CI jobs on outdated branches 
Gitlab feature
https://docs.gitlab.com/ee/ci/pipelines/settings.html#auto-cancel-redundant-pipelines
can automatically cancel jobs which operate on an outdated code, i.e. on
branches which received new commits while jobs with an older set of
commits are still running. For this feature to work jobs have to be
configured with boolean interruptible: true.

I think practically all of our current CI jobs can be cancelled,
so the option is now on by default for all jobs.
 2021-11-09 13:19:40 +01:00
Michał Kępień 22aa9e7eda Merge branch 'michal/disable-pylint-warning-C0209-v9_11' into 'v9_11' 
[v9_11] Disable PyLint warning C0209

See merge request isc-projects/bind9!5540
 2021-10-28 13:45:54 +00:00
Michał Kępień c100ae1162 Disable PyLint warning C0209 
PyLint 2.11 reports a new warning, C0209 (consider-using-f-string).
Since f-strings are only available in Python 3.6+, existing scripts
cannot be updated to use this feature just yet because they would stop
working with older Python versions.  Instead, disable PyLint warning
C0209 for the time being.

(cherry picked from commit 860ca4e0ef)
 2021-10-28 15:43:24 +02:00
Michał Kępień f3235c0840 Merge branch 'v9_11_36-release' into 'v9_11' 
Merge 9.11.36 release branch

See merge request isc-projects/bind9!5537
 2021-10-28 10:47:16 +00:00
Michał Kępień 93b69fa3f9 Set up release notes for BIND 9.11.37 2021-10-28 12:44:12 +02:00
Michał Kępień ecb3f0e5c4 Bump BIND_BASELINE_VERSION for ABI checks 2021-10-28 12:44:12 +02:00
Tinderbox UserandMichał Kępień c71ded8ffc Merge branch 'prep-release' into security-v9_11 2021-10-28 12:44:12 +02:00
Michał Kępień f1237c5a79 Merge branch 'michal/prepare-documentation-for-bind-9.11.36' into 'security-v9_11' 
Prepare documentation for BIND 9.11.36

See merge request isc-private/bind9!327
 2021-10-28 12:44:12 +02:00
Tinderbox UserandMichał Kępień 4b99ff0143 prep 9.11.36 2021-10-28 12:44:12 +02:00
Michał Kępień 4866c50c44 Merge branch '2899-security-disable-lame-cache-v9_11' into 'security-v9_11' 
[CVE-2021-25219] [v9_11] Disable "lame-ttl" cache

See merge request isc-private/bind9!324
 2021-10-28 12:44:12 +02:00
Michał Kępień e306ef83c0 Prepare release notes for BIND 9.11.36 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień f0cfa038fd Add CHANGES and release note for [GL #2899] 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień b01862e8cd Enable lame response detection even with disabled lame cache 
Previously, when lame cache would be disabled by setting lame-ttl to 0,
it would also disable lame answer detection.  In this commit, we enable
the lame response detection even when the lame cache is disabled.  This
enables stopping answer processing early rather than going through the
whole answer processing flow.
 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień 1f85706711 Disable lame-ttl cache 
The lame-ttl cache is implemented in ADB as per-server locked
linked-list "indexed" with <qname,qtype>.  This list has to be walked
every time there's a new query or new record added into the lame cache.
Determined attacker can use this to degrade performance of the resolver.

Resolver testing has shown that disabling the lame cache has little
impact on the resolver performance and it's a minimal viable defense
against this kind of attack.
 2021-10-28 12:44:12 +02:00
Michal Nowak 3f9d7859d7 Merge branch 'mnowak/debian-11-bullseye-v9_11' into 'v9_11' 
[v9_11] Add Debian 11 (bullseye)

See merge request isc-projects/bind9!5526
 2021-10-22 09:28:41 +00:00
Michal Nowak 650ed92d39 Do not spawn Debian 9 CI jobs in merge requests 
(cherry picked from commit 1b9a9c2829)
 2021-10-22 11:09:25 +02:00
Michal Nowak 3e5cd6013e Add Debian 11 (bullseye) 
(cherry picked from commit 2b5dfae5de)
 2021-10-22 11:08:45 +02:00
Michal Nowak 590ac3ca1b Merge branch 'mnowak/openbsd-7.0-v9_11' into 'v9_11' 
[v9_11] Add OpenBSD 7.0

See merge request isc-projects/bind9!5524
 2021-10-22 07:51:28 +00:00
Michal Nowak 465c57a114 Add OpenBSD 7.0 
(cherry picked from commit 75e873ed98)
 2021-10-22 09:43:33 +02:00
Ondřej Surý 75fd6ee811 Merge branch '2933-bump-the-default-clang-version-to-13-v9_11' into 'v9_11' 
Change the LLVM tools version to 13

See merge request isc-projects/bind9!5489
 2021-10-12 10:14:09 +00:00
Ondřej Surý 7004dab7d4 Change the LLVM tools version to 13 
LLVM 13.0.0 was released on 4. October 2021, change the default version
to the current stable.

(cherry picked from commit 16916ab3e3)
 2021-10-12 11:32:19 +02:00
Petr Špaček ab1bef0dfe Merge branch 'ondrej/add-python-3.8-check-v9_11' into 'v9_11' 
Add python3.8 to the autoconf search list

See merge request isc-projects/bind9!5435
 2021-09-22 08:54:23 +00:00
Ondřej Surý 2663509c12 Add python3.8 to the autoconf search list 
It was discovered that FreeBSD doesn't setup alias from default
Python version neither to python3 nor python, and thus the configure
step would fail to find working python installation.
 2021-09-22 10:28:18 +02:00
Michal Nowak f15da8b9fa Merge branch 'mnowak/replace-centos-with-oraclelinux-v9_11' into 'v9_11' 
[v9_11] Replace CentOS 7 & 8 with Oracle Linux

See merge request isc-projects/bind9!5420
 2021-09-16 15:53:28 +00:00
Michal Nowak 67f9f2349f Replace CentOS 7 & 8 with Oracle Linux 
(cherry picked from commit 3085edf1a0)
 2021-09-16 17:33:28 +02:00
Ondřej Surý 0210d98432 Merge branch '2866-split-gssapi-and-krb5-check-from-krb5-config-v9_11' into 'v9_11' 
Fix the krb5-config usage (v9.11)

See merge request isc-projects/bind9!5393
 2021-09-14 19:21:55 +00:00
Ondřej Surý 218cbd5236 Add CHANGES note for [GL ##2866] 2021-09-14 21:01:05 +02:00
Michał KępieńandOndřej Surý d89c65118a Test various --with-gssapi options in GitLab CI 
The implicit ./configure default is to use --with-gssapi=auto.  There is
already a GitLab CI job (gcc:stretch:amd64) which uses --without-gssapi.
Add four more forms of the --with-gssapi option to various GitLab CI job
configurations so that its every possible variant is regularly tested.
 2021-09-08 13:10:28 +02:00
Ondřej Surý f6dd6940bc Call krb5-config with just one argument at the time 
The autoconf script would call the krb5-config with both gssapi and krb5
libraries as arguments in a single call.  It turned out that this is
actually not supported and it breaks some platforms.  This commit splits
the call into two separate calls - one for gssapi and one for krb5
library.
 2021-09-08 13:10:25 +02:00
Ondřej SurýandOndřej Surý f67479fe48 Revert "Resolve 'Configuration issues on Solaris 11.4'" MR 
The MR in question broke the configure script in different way,
so we are going to use a different fix.
 2021-09-08 13:09:24 +02:00
Mark Andrews eff7921c33 Merge branch '1805-save-failed-build-artifacts-v9_11' into 'v9_11' 
always save build artifacts

See merge request isc-projects/bind9!5365
 2021-08-26 04:45:59 +00:00
Mark Andrews 4c4fe6a800 always save build artifacts 
(cherry picked from commit 221228572f)
 2021-08-26 14:22:02 +10:00
Michał Kępień 0480e212bf Merge branch 'v9_11_35-release' into 'v9_11' 
Merge 9.11.35 release branch

See merge request isc-projects/bind9!5340
 2021-08-19 05:36:04 +00:00
Michał Kępień 94dc186441 Set up release notes for BIND 9.11.36 2021-08-19 07:31:02 +02:00
Michał Kępień c1afa10fce Bump BIND_BASELINE_VERSION for ABI checks 2021-08-19 07:31:02 +02:00
Tinderbox User 8aead5f87a Merge branch 'prep-release' into v9_11_35-release v9.11.35 2021-08-10 22:00:41 +00:00
Tinderbox User bee1b09a24 prep 9.11.35 2021-08-10 22:00:23 +00:00
Michał Kępień 6900668e09 Merge branch 'michal/prepare-documentation-for-bind-9.11.35' into 'v9_11_35-release' 
Prepare documentation for BIND 9.11.35

See merge request isc-private/bind9!318
 2021-08-10 21:39:51 +00:00
Michał Kępień 2f37bd4cd3 Prepare release notes for BIND 9.11.35 2021-08-10 23:38:03 +02:00
Michał Kępień 6859b18d7b Tweak and reword release notes 2021-08-10 23:38:03 +02:00
Michał Kępień f565978451 Tweak and reword recent CHANGES entries 2021-08-10 23:38:03 +02:00
Michal Nowak 17a1334660 Merge branch 'mnowak/fix-pylint-v9_11' into 'v9_11' 
Make kasp2policy.py PyLint-clean

See merge request isc-projects/bind9!5307
 2021-07-28 09:16:46 +00:00
Michal Nowak 56480bd705 Make kasp2policy.py PyLint-clean 
PyLint 2.9.5 reported the following errors:
    contrib/kasp/kasp2policy.py:25:0: R0402: Use 'from ply import yacc' instead (consider-using-from-import)
    contrib/kasp/kasp2policy.py:26:0: R0402: Use 'from ply import lex' instead (consider-using-from-import)

(cherry picked from commit 4e09411371)
 2021-07-28 11:12:05 +02:00