Commit Graph
35492 Commits
Author SHA1 Message Date
Petr Špaček c6571c36b8 Fix no-case-compress description in the ARM
We confused ourselves, it seems.

(cherry picked from commit 6451462a93)
2023-10-03 15:10:04 +02:00
Mark Andrews 0cf801f34d Merge branch '4316-dynamic-update-refused-shortly-after-zone-was-thawed-bind-9.16' into 'bind-9.16'
[9.16] Resolve "dynamic update refused shortly after zone was thawed"

See merge request isc-projects/bind9!8337
2023-09-27 00:41:41 +00:00
Mark Andrews 652847b06e Document that reloading happens asynchronously
(cherry picked from commit e33dbd0cbd)
2023-09-27 10:14:35 +10:00
Mark Andrews 0e55d94653 Wait for the test zone to finish re-loading
'rndc thaw' initiates asynchrous loading of all the zones
similar to 'rndc load'.  Wait for the test zone's load to
complete before testing that it is updatable again.

(cherry picked from commit 5b3238aa85)
2023-09-26 14:12:36 +10:00
Ondřej Surý 5d3a90b266 Merge branch '4327-minor-warning-about-ctype-h-function-9.16' into 'bind-9.16'
[9.16] Add semantic patch to explicitly cast chars to unsigned for ctype.h

See merge request isc-projects/bind9!8331
2023-09-22 15:42:01 +00:00
Ondřej Surý aa5b5e41a6 Add CHANGES note for [GL #4327]
(cherry picked from commit 0e49a8422f)
2023-09-22 17:10:25 +02:00
Ondřej Surý b354e10793 Explicitly cast chars to unsigned chars for <ctype.h> functions
Apply the semantic patch to catch all the places where we pass 'char' to
the <ctype.h> family of functions (isalpha() and friends, toupper(),
tolower()).

(cherry picked from commit 29caa6d1f0)
2023-09-22 17:10:25 +02:00
Ondřej Surý c2e835989f Add semantic patch to explicitly cast chars to unsigned for ctype.h
Add a semantic patch to catch all the places where we pass 'char' to the
<ctype.h> family of functions (isalpha() and friends, toupper(),
tolower()).  While it generally works because the way how these
functions are constructed in the libc, it's safer to do the explicit
cast.

(cherry picked from commit 5ec65ab5d0)
2023-09-22 17:02:39 +02:00
Michał Kępień 100890b172 Merge branch 'mnowak/add-cve-ref-role-9.16' into 'bind-9.16'
[9.16] Add a Sphinx role for linking CVEs to the ISC Knowledgebase

See merge request isc-projects/bind9!8327
2023-09-21 12:46:33 +00:00
Michal NowakandMichał Kępień 1e75f3ae33 Add a Sphinx role for linking CVEs to the ISC Knowledgebase
The new :cve: Sphinx role takes a CVE number as an argument and creates
a hyperlink to the relevant ISC Knowledgebase document that might have
more up-to-date or verbose information than the relevant release note.
This makes reaching ISC Knowledgebase pages directly from the release
notes easier.

Make all CVE references in the release notes use the new Sphinx role.

(cherry picked from commit 41b857e567)
2023-09-21 14:38:28 +02:00
Michał Kępień b426acd3c5 Merge branch 'michal/update-sphinx-and-sphinx_rtd_theme-9.16' into 'bind-9.16'
[9.16] Update Sphinx and sphinx_rtd_theme

See merge request isc-projects/bind9!8324
2023-09-20 15:27:24 +00:00
Michał Kępień e31e1d7639 Update Sphinx and sphinx_rtd_theme
Update Sphinx-related Python packages to their current versions pulled
in by "pip install sphinx-rtd-theme" run in a fresh virtual environment.

(cherry picked from commit 2f879cdec3)
2023-09-20 17:25:17 +02:00
Michał Kępień 2be533f469 Merge tag 'v9.16.44' into bind-9.16 2023-09-20 16:55:10 +02:00
Mark Andrews 4057a7c8c4 Merge branch '4314-dns_ncache_current-fails-to-set-covered-correctly-bind-9.16' into 'bind-9.16'
[9.16] Resolve "dns_ncache_current fails to set covered correctly"

See merge request isc-projects/bind9!8308
2023-09-18 07:14:07 +00:00
Mark Andrews dfd0a2c4f6 Add a CHANGES note for [GL #4314]
(cherry picked from commit 80298ade33)
2023-09-18 16:43:32 +10:00
Mark Andrews 50bdf976c7 Check RRSIG covered type in negative cache entry
The covered type previously displayed as TYPE0 when it should
have reflected the records that was actually covered.

(cherry picked from commit 8ce359652a)
2023-09-18 16:40:55 +10:00
Mark Andrews 426b575680 Correctly set the value of covered in dns_ncache_current
Fix the type and rdclass being passed to dns_rdata_tostruct so
that rrsig.covered is correctly set.

(cherry picked from commit 779980710c)
2023-09-18 16:40:54 +10:00
Arаm Sаrgsyаn 38b4648f6b Merge branch 'aram/danger-ignore-length-warn-for-fixups-9.16' into 'bind-9.16'
[9.16] Don't warn about subject line length for the fixup commits (CI)

See merge request isc-projects/bind9!8301
2023-09-14 11:37:18 +00:00
Aram Sargsyan b17948622b Don't warn about subject line length for the fixup commits
The fixup commits' subject line has a prefix which has its own
length, so warning about the exceeding length is not accurate.
Given that the fixup commits can not be merged, because they
cause a danger failure, it's safe to ignore the length check
for them.

(cherry picked from commit 3db2beef9f)
2023-09-14 11:00:10 +00:00
Michal Nowak b14f294f32 Merge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.16.45' into 'bind-9.16'
Set up version and release notes for BIND 9.16.45

See merge request isc-projects/bind9!8294
2023-09-12 07:39:52 +00:00
Michal Nowak 7d836f522c Set up release notes for BIND 9.16.45 2023-09-12 09:38:46 +02:00
Michal Nowak 2cedf0a486 Update BIND version to 9.16.45-dev 2023-09-12 09:38:45 +02:00
Michal Nowak cd2b4602b0 prep 9.16.44 v9.16.44 2023-09-08 14:40:48 +02:00
Michal Nowak 70c62c2f7e Merge branch 'mnowak/prepare-documentation-for-bind-9.16.44' into 'security-bind-9.16'
Prepare release notes for BIND 9.16.44

See merge request isc-private/bind9!580
2023-09-08 12:35:06 +00:00
Michal Nowak 22186ff9f6 Prepare release notes for BIND 9.16.44 2023-09-08 14:15:36 +02:00
Michal Nowak eca2f10f35 Merge branch '4152-confidential-limit-isccc_cc_fromwire-recursion-depth-bind-9.16' into 'security-bind-9.16'
[9.16] [CVE-2023-3341] Stack Exhaustion in control channel

See merge request isc-private/bind9!570
2023-09-08 12:11:41 +00:00
Mark AndrewsandMichal Nowak 003be70796 Add release note for [GL #4152] 2023-09-07 19:54:20 +02:00
Mark AndrewsandMichal Nowak 5f987f4568 Add CHANGES note for [GL #4152] 2023-09-07 19:54:20 +02:00
Mark AndrewsandMichal Nowak c4fac5ca98 Limit isccc_cc_fromwire recursion depth
Named and rndc do not need a lot of recursion so the depth is
set to 10.
2023-09-05 20:29:27 +02:00
Matthijs Mekking 4537578e78 Merge branch '4266-document-dnssec-policy-lifetime-v9_16' into 'bind-9.16'
[9.16] Clarify BIND 9 time formats

See merge request isc-projects/bind9!8265
2023-09-01 10:12:49 +00:00
Matthijs Mekking 77b0b387bf Add CHANGES entry for #4266
(cherry picked from commit fd3d58d512)
2023-09-01 11:16:13 +02:00
Matthijs Mekking 0946fc11a5 Explain lifetime format
Add the text "TTL-style unit suffixes or ISO 8601 duration formats",
just like we do at other places that are duration option types.

Also, in the dnssec-policy "keys" example, use a TTL-style unit too.

(cherry picked from commit b5a757c452)
2023-09-01 11:15:47 +02:00
Matthijs Mekking a780d6fb13 Add a glossary definition for duration
We don't yet explain the syntax of TTL-style suffixes or ISO 8601
duration formats.

In 9.16 the terms are not sorted alphabetically, so I added the
duration explanation at the end of the list.

(manually picked from commit cc122d22b4)
2023-09-01 11:14:29 +02:00
Matthijs Mekking f2e5f3ff9c Fix keys reference link in ARM
There's a statement that says: "Here is an example (for illustration
purposes only) of some possible entries in a [keys] list:", and that
links to the wrong "keys" statement (it links to the TSIG keys section).

Remove the reference, as we are already in the right section.

Note: This commit is empty because 9.16 was not affected by this.

(cherry-picked from commit 07c70ea2bd)
2023-08-31 18:52:36 +02:00
Tom Krizek 3df5a8b38b Merge branch 'tkrizek-update-sphinx-rtd-theme-9.16' into 'bind-9.16'
[9.16] Update sphinx_rtd_theme

See merge request isc-projects/bind9!8250
2023-08-29 08:25:12 +00:00
Tom Krizek 6e4f5d04c6 Update sphinx_rtd_theme
To resolve the version select and search issue on readthedocs.org,
sphinx_rtd_theme>=1.2.1 is required.

Related https://github.com/readthedocs/sphinx_rtd_theme/issues/1452

(cherry picked from commit 92143fa960)
2023-08-29 10:14:50 +02:00
Tom Krizek 33ddc4f34b Merge branch '3001-pytest-nitpicks-9.16' into 'bind-9.16'
[9.16] system tests stability tweaks and cleanup

See merge request isc-projects/bind9!8243
2023-08-23 13:35:53 +00:00
Tom Krizek d941dd151c Skip checkds test on Python<3.7
checkds test requires the capture_output argument for subprocess.run()
which was added in Python 3.7.

(cherry picked from commit 0361233b3d)
2023-08-23 14:51:25 +02:00
Michal Nowak 946bf10eff Merge branch '4270-add-autoconf2.69-to-bookworm' into 'bind-9.16'
Use autoreconf2.69

See merge request isc-projects/bind9!8229
2023-08-22 17:59:29 +00:00
Michal Nowak 9c615ae61b Use autoreconf2.69
autoconf 2.71 in Debian 12 is too different from autoconf 2.69 in Debian
11 and the BIND 9.16 build infrastructure does not easily handle this
change. Therefore, use autoreconf2.69 from Debian 12 to keep the build
system stable.
2023-08-22 19:20:52 +02:00
Michal Nowak 4f4f144cb7 Merge branch '4139-test_send_timeout-check-can-be-unstable-9.16' into 'bind-9.16'
[9.16] Make the test_send_timeout check more stable

See merge request isc-projects/bind9!8220
2023-08-22 08:07:48 +00:00
Michal Nowak 2d951a900b Mark test_send_timeout as flaky
In some cases, BIND is not fast enough to fill the send buffer and
manages to answer all queries, contrary to what the test expects.
Repeat the check up to 3 times to limit this test instability.

(cherry picked from commit 681b23c398)
2023-08-22 08:55:36 +02:00
Tom KrizekandMichal Nowak f84e0f4ad0 Add custom flaky decorator to handle unstable tests
If the flaky plugin for pytest is available, use its decorator to
support re-running unstable tests. In case the package is missing,
execute the test as usual without attempts to re-run it in case of
failure.

This is mostly intended to increase the test stability in CI. Using a
custom decorator enables us to keep the flaky package as an optional
dependency.

(cherry picked from commit 5b703de733)
2023-08-22 08:55:36 +02:00
Evan Hunt 1cb359e7cb Merge branch '3835-cname-wildcard-loop-followup-bind-9.16' into 'bind-9.16'
[9.16] prevent query_coveringnsec() from running twice

See merge request isc-projects/bind9!8225
2023-08-21 22:22:23 +00:00
Evan Hunt f6ca8e96a9 CHANGES for [GL #3835]
(cherry picked from commit ba1f75684f)
2023-08-21 14:37:20 -07:00
Evan Hunt 674a62694a prevent query_coveringnsec() from running twice
when synthesizing a new CNAME, we now check whether the target
matches the query already being processed. if so, we do not
restart the query; this prevents a waste of resources.

(cherry picked from commit 0ae8b2e056)
2023-08-21 14:37:00 -07:00
Michal Nowak acf89d19e6 Merge branch '3893-make-debian-12-bookworm-base-image-9.16' into 'bind-9.16'
[9.16] Make Debian 12 "bookworm" the base image

See merge request isc-projects/bind9!8222
2023-08-21 18:05:02 +00:00
Michal Nowak 383032b9e0 Configure gcc:bionic job with --without-cmocka
Ubuntu "bionic" does not include cmocka version 1.1.3 or higher in its
repositories. Additionally, the custom repository that contains the
library has been discontinued in CI images.

Remove the job unit:gcc:bionic:amd64 as the unit test does not run any
tests without cmocka.
2023-08-21 18:02:09 +02:00
Michal Nowak 56af29b5e4 Add PKCS11 testing with Clang on Debian 11 2023-08-21 18:02:06 +02:00
Michal Nowak 182f9fb067 Drop unnecessary gcovr workarounds
Many problems of the Debian 11 gcovr version were fixed in the Debian 12
one. Replace workarounds we accumulated over the years with two new,
simple ones.

(cherry picked from commit 55f5aa08f0)
2023-08-21 18:01:57 +02:00