Commit Graph

23791 Commits

Author SHA1 Message Date
Mark Andrews
ca3d4db1a5 re-order security list into reverse order 2016-02-29 12:44:35 +11:00
Mark Andrews
202efe3c3b spelling
(cherry picked from commit 40401165e4)
2016-02-29 12:20:33 +11:00
Mark Andrews
c08e4c3636 silence may be used when unset false positive
(cherry picked from commit c7aae79b62)
2016-02-29 11:25:08 +11:00
Mark Andrews
e87b18eb8f more sit -> cookie cleanups 2016-02-29 11:15:44 +11:00
Mark Andrews
0d2ac7e76e rename sit buffer cookie 2016-02-29 10:32:03 +11:00
Mark Andrews
29d808c386 compute_sit/process_sit -> compute_cookie/process_cookie to aid with backporting 2016-02-29 10:26:06 +11:00
Mark Andrews
499952eb45 Part 2 of:
4319.   [security]      Fix resolver assertion failure due to improper
                        DNAME handling when parsing fetch reply messages.
                        (CVE-2016-1286) [RT #41753]

(cherry picked from commit 2de89ee9de)
2016-02-29 07:17:31 +11:00
Mark Andrews
b5c239dcdc add CVE-2016-2088 2016-02-27 13:21:55 +11:00
Tinderbox User
3288843a56 regen v9_10 2016-02-27 01:07:30 +00:00
Mark Andrews
7cd300abd6 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]

(cherry picked from commit 455c0848f8)
2016-02-27 11:46:16 +11:00
Mark Andrews
498b6195f6 update copyrights 2016-02-25 10:56:48 +11:00
Mark Andrews
3b4b57bb4f add CVE-2016-1286 2016-02-24 13:16:25 +11:00
Mark Andrews
f0eb27c402 4321. [bug] Zones using mapped files containing out-of-zone data
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]

(cherry picked from commit f9da4a8e54)
2016-02-24 11:25:04 +11:00
Tinderbox User
c2d5cfa264 update copyright notice / whitespace 2016-02-23 23:46:00 +00:00
Tinderbox User
72ed396db8 newcopyrights 2016-02-23 23:30:36 +00:00
Mukund Sivaraman
77fe016206 Test bin/tests/system/checkconf/good-*.conf 2016-02-23 12:59:37 +05:30
Mukund Sivaraman
c685f0d741 Fix allocation for "none" ACL that caused assertion failure (#41745)
(cherry picked from commit 293a9e9978)
2016-02-23 12:57:08 +05:30
Mark Andrews
e7c31225e7 update usage
(cherry picked from commit a125381c60)
2016-02-23 16:57:57 +11:00
Tinderbox User
baa71f756a regen v9_10 2016-02-23 01:07:37 +00:00
Mukund Sivaraman
456e1eadd2 Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753)
(cherry picked from commit 5995fec51c)
2016-02-22 12:24:15 +05:30
Tinderbox User
a372b927ed regen v9_10 2016-02-19 01:07:10 +00:00
Tinderbox User
160c8ad89d update copyright notice / whitespace 2016-02-18 23:45:59 +00:00
Tinderbox User
4c287181f5 newcopyrights 2016-02-18 23:30:19 +00:00
Mark Andrews
e7e15d1302 4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

(cherry picked from commit a2b15b3305)
2016-02-18 12:12:02 +11:00
Tinderbox User
c40415360f newcopyrights 2016-02-12 23:30:11 +00:00
Mark Andrews
849e9d6dce 4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
(cherry picked from commit d372f426ca)
2016-02-12 12:34:49 +11:00
Tinderbox User
78636ea480 regen v9_10 2016-02-12 01:07:16 +00:00
Mark Andrews
5a62da0ee6 add sanity check that $base is '.docbook' 2016-02-12 11:20:19 +11:00
Mark Andrews
9c580f296b automatically set year to 'DOCBOOK' if '.docbook' exists for MAN and HTML 2016-02-12 11:20:12 +11:00
Mark Andrews
d3c00d1bae inherit years from docbook 2016-02-12 10:48:47 +11:00
Mark Andrews
47eb670742 copyrights / whitespace 2016-02-11 10:45:43 +11:00
Mukund Sivaraman
6f3e21cd9b Remove nodechain from dns_rbt_addnode() (#41246)
(cherry picked from commit 9267cc8e83)
2016-02-08 15:40:20 +05:30
Mukund Sivaraman
400dd1020c Add tests for hash function, and comment dns_rbt_addnode() (#41179)
No CHANGES entry necessary.

(cherry picked from commit 614ce1b65f)
2016-02-08 14:53:24 +05:30
Mukund Sivaraman
0b46608d6e Check that configured view class isn't a meta class (#41572)
(cherry picked from commit 0c29904b27)
2016-02-08 14:01:05 +05:30
Mark Andrews
eb768908f8 specify what to copy
(cherry picked from commit 88624c9c32)
2016-02-05 13:54:35 +11:00
Mark Andrews
8e66424688 add missing line break
(cherry picked from commit 68ecf1c9a5)
2016-02-04 11:52:18 +11:00
Tinderbox User
dfe0a4d775 newcopyrights 2016-02-03 23:31:21 +00:00
Evan Hunt
caf457cb7e [v9_10] add dnsperf to contrib
4314.	[contrib]	Added 'dnsperf-2.1.0.0-1', a set of performance
			testing tools provided by Nominum, Inc.
2016-02-03 15:29:25 -08:00
Mark Andrews
5c993c326f 4313. [bug] Handle ns_client_replace failures in test mode.
[RT #41190]

(cherry picked from commit d88ba93712)
2016-02-03 15:01:22 +11:00
Tinderbox User
40b40b51bb update copyright notice / whitespace 2016-02-02 23:45:50 +00:00
Tinderbox User
e23646fe78 newcopyrights 2016-02-02 23:30:06 +00:00
Mukund Sivaraman
df7f430894 Remove 45 second sleeps from notify system test (#41248)
No CHANGES entry required.

(cherry picked from commit f9b167290a)
2016-02-02 09:50:24 +05:30
Mark Andrews
c0a2b2672f 4312. [bug] dig's unknown dns and edns flags (MBZ value) logging
was not consistent. [RT #41600]

(cherry picked from commit 8d00c5ab2c)
2016-02-02 14:19:41 +11:00
Mark Andrews
4c375c6fa8 handle permission denied 2016-02-02 12:38:40 +11:00
Mark Andrews
2d58f4aee2 capture rndc output 2016-02-02 12:26:04 +11:00
Tinderbox User
724704f65b update copyright notice / whitespace 2016-02-01 23:45:54 +00:00
Tinderbox User
dfa27e44f4 newcopyrights 2016-02-01 23:30:08 +00:00
Evan Hunt
16f69da352 [v9_10] add [performance] 2016-02-01 09:52:19 -08:00
Evan Hunt
c66805df00 [v9_10] disallow delzone on policiy zones
4311.	[bug]		Prevent "rndc delzone" from being used on
			response-policy zones. [RT #41593]
2016-02-01 09:49:18 -08:00
Mukund Sivaraman
6e2e0f72b1 Use __built_expect() where available (#41411)
(cherry picked from commit d1dbf6b20f)
2016-02-01 09:07:12 +05:30