Commit Graph

10030 Commits

Author SHA1 Message Date
Mark Andrews
c8f7bbdf12 4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
(cherry picked from commit 3b7cb2c5b1)
2016-10-21 22:44:49 +11:00
Mark Andrews
c1d0599a24 4489. [security] It was possible to trigger assertions when processing
a response. (CVE-2016-8864) [RT #43465]

(cherry picked from commit bd6f27f5c3)
2016-10-21 14:56:26 +11:00
Mark Andrews
3e77655c1a fix typo
(cherry picked from commit 6bb84df34d)
2016-10-11 17:06:04 +11:00
Mark Andrews
57b17a67d2 don't require lctx to be non NULL
(cherry picked from commit 3793d848bd)
2016-10-11 17:03:08 +11:00
Mark Andrews
4415634cd3 4483. [func] Check prefixes in acls to make sure the address and
prefix lengths are consistent.  Warn only in
                        BIND 9.11 and earlier. [RT #43367]
2016-10-11 15:04:11 +11:00
Mark Andrews
e236673170 4482. [bug] Address use before require check and remove extraneous
dns_message_gettsigkey call in dns_tsig_sign.
                        [RT #43374]

(cherry picked from commit 61463ab7a4)
2016-10-11 14:41:41 +11:00
Evan Hunt
d58d861cbc [v9_10] add missing REQUIREs in cfg parser 2016-10-10 17:15:01 -07:00
Tinderbox User
aaf8627cee update copyright notice / whitespace 2016-10-05 23:46:45 +00:00
Mark Andrews
31be5b7394 4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
getprotobyname and getservbyname work.  [RT #43197]

(cherry picked from commit 82a50a619a)
2016-10-05 12:30:05 +11:00
Mark Andrews
c99efbfa1b 4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
(cherry picked from commit fe4d0fbc7c)
2016-10-05 12:20:53 +11:00
Tinderbox User
6c6a5f8e71 update copyright notice / whitespace 2016-10-04 23:47:59 +00:00
Witold Krecicki
f8e3534f18 [master] Fix a minor bug in isc_netaddr_masktoprefixlen
(cherry picked from commit f78603b534)
2016-10-05 09:07:24 +11:00
Mark Andrews
88e9f0b489 4468. [bug] Address ECS option handling issues. [RT #43191]
(cherry picked from commit df17290113)
2016-09-14 09:06:24 +10:00
Mark Andrews
9dd582167a 4467. [security] It was possible to trigger a assertion when rendering
a message. [RT #43139]

(cherry picked from commit 2bd0922cf9)
2016-09-09 11:32:12 +10:00
Mark Andrews
9b0583b37e 4466. [bug] Interface scanning didn't work on a Windows system
without a non local IPv6 addresses. [RT #43130]

(cherry picked from commit 61ca100b80)
2016-09-08 14:26:37 +10:00
Tinderbox User
dfc79e1313 update copyright notice / whitespace 2016-09-07 23:46:16 +00:00
Mark Andrews
69f9ca5830 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]
2016-09-07 14:43:14 +10:00
Mark Andrews
fcc8f5b565 silence unused variable 'pollstate' warning [RT #43109]
(cherry picked from commit 9d11e46714)
2016-08-30 14:26:27 +10:00
Mukund Sivaraman
0edca7b6cd Update assertions to be more correct, and also remove use of a reserved word (#43090)
Note: this doesn't actually fix #43090.
(cherry picked from commit becac651e8)
(cherry picked from commit ce78690029)
2016-08-29 18:56:06 +05:30
Mark Andrews
4fba489dbe 4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
(cherry picked from commit c55b572ccf)
2016-08-29 10:16:52 +10:00
Mark Andrews
d847be96c1 4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
[RT #42587]

(cherry picked from commit 63fe88e8d8)
2016-08-26 15:49:58 +10:00
Mark Andrews
a33f9a7eff 4453. [bug] Prefetching of DS records failed to update their
RRSIGs. [RT #42865]

(cherry picked from commit f431bf02a6)
2016-08-25 09:55:08 +10:00
Mark Andrews
169546c6ad update copyrights / whitespace 2016-08-23 09:51:39 +10:00
Francis Dupont
95aca48a15 Added print.h include 2016-08-22 14:26:07 +02:00
Francis Dupont
92d1b38a81 Merged rt43077 (new RSA verify unit test) 2016-08-22 14:11:08 +02:00
Francis Dupont
185762b486 Merged rt43076 (log PKCS#11 provider load failure) 2016-08-22 14:08:33 +02:00
Tinderbox User
9831d2c6e5 update copyright notice / whitespace 2016-08-19 01:23:59 +00:00
Evan Hunt
b57eef8c27 [v9_10] clarify README.site
(cherry picked from commit 6d2963e4d4)
2016-08-18 17:53:03 -07:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Mark Andrews
10793ed5fd install isc/errno.h
(cherry picked from commit dec17fb662)
2016-08-18 22:14:55 +10:00
Mark Andrews
6f7ea1aa4b 4448. [bug] win32: ::1 was not being found when iterating
interfaces. [RT #42993]

(cherry picked from commit 6e4788dd12)
2016-08-18 22:00:26 +10:00
Tinderbox User
83b6462693 update copyright notice / whitespace 2016-08-17 23:46:31 +00:00
Evan Hunt
e3fd4a7fc4 [v9_10] check for STALE rdatasets in cache search
4446.	[bug]		The cache_find() and _findrdataset() functions
			could find rdatasets that had been marked stale.
			[RT #42853]

(cherry picked from commit 46e7763d19)
2016-08-17 11:44:46 -07:00
Evan Hunt
ddef16e1d9 [v9_10] isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]
2016-08-17 11:32:16 -07:00
Tinderbox User
5591cf2635 update copyright notice / whitespace 2016-08-16 23:46:14 +00:00
Mark Andrews
7f4800a71f 4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
TCP sockets. [RT #42864]

(cherry picked from commit 7872d4d1c0)
2016-08-16 07:43:02 +10:00
Mukund Sivaraman
418b43028e Fix RPZ CIDR tree insertion bug (#43035)
(cherry picked from commit 131307a70e)
2016-08-15 17:07:06 +05:30
Tinderbox User
4858334554 update copyright notice / whitespace 2016-08-11 23:46:19 +00:00
Mark Andrews
fdcca0a23e 4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
will not fit into a single IPv4 encapsulated IPv6
                        UDP packet when transmitted over a Ethernet link.
                        [RT #42871]

(cherry picked from commit 31ffec1541)
2016-08-12 09:44:02 +10:00
Francis Dupont
7a4d54f6c6 Merged rt42840_10 (tcp-only backport) 2016-08-11 14:28:22 +02:00
Mark Andrews
73b4cbb1ff 4431. [bug] named-checkconf now checks the rate-limit clause.
[RT #42970]

(cherry picked from commit 632e67baa6)
2016-08-08 23:55:03 +10:00
Tinderbox User
7a90fc75f5 update copyright notice / whitespace 2016-07-22 23:48:53 +00:00
Mark Andrews
fc24ea9ac8 add dns_keytable_forall
(cherry picked from commit 6655b7db13)
2016-07-22 20:34:39 +10:00
Mark Andrews
aa1a7e1e58 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:16:59 +10:00
Evan Hunt
f54a8c74c4 [v9_10] add aaaa for b.root-servers.net
4423.	[maint]		Added missing IPv6 address 2001:500:84::b for
			B.ROOT-SERVERS.NET. [RT #42898]

Patch submitted by Xoze Vazquez Perez (xose.vazquez@gmail.com).
2016-07-21 20:02:54 -07:00
Witold Krecicki
4c2fcac334 4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879] 2016-07-21 12:18:37 +02:00
Tinderbox User
388a80b087 update copyright notice / whitespace 2016-07-19 23:47:31 +00:00
Evan Hunt
8d6d676b5f [v9_10] fix isc_atomic_xadd() on MIPS
4414.	[bug]		Corrected a bug in the MIPS implementation of
			isc_atomic_xadd(). [RT #41965]

Submitted by Lamont Jones (lamont@debian.org). Closes Debian issue #406409.
2016-07-19 11:12:14 -07:00
Tinderbox User
d122358d76 update copyright notice / whitespace 2016-07-14 23:52:39 +00:00
Mark Andrews
594b2c2597 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
2016-07-14 15:08:28 +10:00