Commit Graph

10420 Commits

Author SHA1 Message Date
Tinderbox User
5688a47c15 update copyright notice / whitespace 2017-01-24 23:45:58 +00:00
Mark Andrews
832f5803f6 4560. [bug] mdig: add -m option to enable memory debugging rather
than have in on all the time. [RT #44509]

4559.   [bug]           Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
                        was turned off.  [RT #44509]

(cherry picked from commit 25da687db7)
2017-01-24 17:49:08 +11:00
Mark Andrews
4441328a1d 4558. [bug] Synthesised CNAME before matching DNAME was still
being cached when it should have been.  [RT #44318]

(cherry picked from commit 9f4bf43b79)
2017-01-24 17:41:17 +11:00
Tinderbox User
9b2743294c update copyright notice / whitespace 2017-01-14 23:46:06 +00:00
Mark Andrews
7bcba68b95 4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
[RT #44336]

(cherry picked from commit 5dfa5221d5)
2017-01-14 13:14:25 +11:00
Tinderbox User
00860eece0 update copyright notice / whitespace 2017-01-13 23:46:05 +00:00
Mark Andrews
1de3115e8c make e's declaration unconditional. [RT #44324]
(cherry picked from commit b8eee0f48d)
2017-01-13 16:10:39 +11:00
Tinderbox User
f6b9092741 update copyright notice / whitespace 2017-01-12 23:46:13 +00:00
Mark Andrews
2cee8eadec 4553. [bug] Named could deadlock there were multiple changes to
NSEC/NSEC3 parameters for a zone being processed at
                        the same time. [RT #42770]

(cherry picked from commit d2e1b47d4f)
2017-01-12 14:26:06 +11:00
Mark Andrews
81df1363fb 4552. [bug] Named could trigger a assertion when sending notify
messages. [RT #44019]

(cherry picked from commit 7b9e28f1a5)
2017-01-12 14:12:38 +11:00
Tinderbox User
3b7f610bec update copyright notice / whitespace 2017-01-11 23:45:54 +00:00
Evan Hunt
e63d63dc85 [v9_11] expand the flags field in dns_master_style
4550.	[cleanup]	Increased the number of available master file
			output style flags from 32 to 64. [RT #44043]

(cherry picked from commit 2e703d7b61)
2017-01-11 12:01:06 -08:00
Tinderbox User
2728d0618e update copyright notice / whitespace 2017-01-04 23:45:48 +00:00
Evan Hunt
f5c17a057f [v9_11] add support for native pkcs11 on keyper
4547.	[port]		Add support for --enable-native-pkcs11 on the AEP
			Keyper HSM. [RT #42463]
2017-01-03 16:42:07 -08:00
Evan Hunt
7fa388dac3 [v9_11] silence warning
(cherry picked from commit b3aebb5890)
2016-12-28 17:54:39 -08:00
Mark Andrews
d6080de9be 9.11.1b1 2016-12-29 12:26:27 +11:00
Mark Andrews
701aa95d96 4510. [security] Named mishandled some responses where covering RRSIG
records are returned without the requested data
                        resulting in a assertion failure. (CVE-2016-9147)
                        [RT #43548]

(cherry picked from commit 6adf421e7e)
2016-12-29 11:49:06 +11:00
Mark Andrews
b243aa40f9 4508. [security] Named incorrectly tried to cache TKEY records which
could trigger a assertion failure when there was
                            a class mismatch. (CVE-2016-9131) [RT #43522]

(cherry picked from commit 2c1c4b99a1)
2016-12-29 11:17:14 +11:00
Tinderbox User
2a2618356e update copyright notice / whitespace 2016-12-28 23:50:44 +00:00
Mark Andrews
2595d1da35 4517. [security] Named could mishandle authority sections that were
missing RRSIGs triggering an assertion failure.
                        (CVE-2016-9444) [RT # 43632]

(cherry picked from commit 1df30cfd27c5a3c57fce357c54aaf6c702227d51)
2016-12-29 10:41:06 +11:00
wpk
397b24d008 [master] Remove spurious entry in lib/dns/win32/libdns.def.in 2016-12-28 19:22:13 +01:00
wpk
b1866070ef 4545. [func] Make dnstap-read output more functionally usable.
[RT #43642]

4544.	[func]		Add message/payload size to dnstap-read YAML output.
			[RT #43622]
2016-12-28 11:58:08 +01:00
Mark Andrews
6b45fd062b 4543. [bug] dns_client_startupdate now delays sending the update
request until isc_app_ctxrun has been called.
                        [RT #43976]

(cherry picked from commit 6f94747270)
2016-12-28 15:51:47 +11:00
Tinderbox User
cec9fddbaf update copyright notice / whitespace 2016-12-26 23:47:35 +00:00
Mark Andrews
f1e3dd087b 4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
[RT #43601]

(cherry picked from commit 8e333f42ef)
2016-12-27 09:50:08 +11:00
Mark Andrews
23ac7e6634 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:13:40 +11:00
Mark Andrews
458e816ed0 4538. [bug] Call dns_client_startresolve from client->task.
[RT #43896]

(cherry picked from commit aceabacdb8)
2016-12-27 07:02:58 +11:00
Mark Andrews
641dede12a if gen fails remove the file [RT #43949]
(cherry picked from commit e17d2f98be)
2016-12-23 09:20:48 +11:00
Mark Andrews
b8e7abc50e freeaddrinfo is called too early.
(cherry picked from commit c1870d0e44)
2016-12-15 09:39:51 +11:00
Tinderbox User
8852646542 update copyright notice / whitespace 2016-12-13 23:47:43 +00:00
Mark Andrews
1160ea4c28 4535. [bug] Address race condition in setting / testing of
DNS_REQUEST_F_SENDING. [RT #43889]

(cherry picked from commit 37a8db0ba4)
2016-12-14 10:33:04 +11:00
Mark Andrews
348d80fb84 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:27:49 +11:00
Mark Andrews
45f206e6c1 4533. [bug] dns_client_update should terminate on prerequiste
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
2016-12-13 15:48:20 +11:00
Mark Andrews
d77cab69bf 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:09 +11:00
Evan Hunt
f1b29d8428 [v9_11] silence DSCP probing error
4529.	[cleanup]	Silence noisy log warning when DSCP probe fails
			due to firewall rules. [RT #43847]

(cherry picked from commit f2c7ae114a)
2016-12-08 08:44:44 -08:00
Mark Andrews
d0c5ff7f65 4528. [bug] Only set the flag bits for the i/o we are waiting
for on EPOLLERR or EPOLLHUP. [RT #43617]

(cherry picked from commit c1619b8420)
2016-12-08 17:00:37 +11:00
Tinderbox User
7911e6f9de regen v9_11 2016-12-07 01:09:50 +00:00
Mark Andrews
83a28ca274 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
(cherry picked from commit 1b8ce3b330)
2016-12-07 10:50:50 +11:00
Tinderbox User
9a4743fca8 update copyright notice / whitespace 2016-12-05 23:47:38 +00:00
Mark Andrews
5be93f5dff 4524. [bug] The net zero test was broken causing IPv4 servers
with addresses ending in .0 to be rejected. [RT #43776]

(cherry picked from commit df372d967e)
2016-12-05 10:47:38 +11:00
Mukund Sivaraman
6ae22c4119 Add doc function for cfg_type_querysource4 and cfg_type_querysource6 (#43768)
(cherry picked from commit 5c843b384d)
2016-12-02 11:17:14 +05:30
Mark Andrews
74d98566ed 4522. [bug] Handle big gaps in log file version numbers better.
[RT #38688]

(cherry picked from commit cab871f1bc)
2016-11-30 11:00:49 +11:00
Tinderbox User
2a2335a013 update copyright notice / whitespace 2016-11-29 23:47:26 +00:00
Mark Andrews
0c2d891abe 4520. [cleanup] Alphabetise more of the grammar when printing it
out. Fix unbalanced indenting. [RT #43755]

(cherry picked from commit 4352551d23)
2016-11-29 15:33:37 +11:00
Mark Andrews
fd017eea63 4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
(cherry picked from commit a611e44f9a)
2016-11-29 11:29:23 +11:00
Mark Andrews
6ef1cdec9a 4516. [bug] isc_socketmgr_renderjson was missing from the
windows build. [RT #43602]

(cherry picked from commit 358c6ecd26)
2016-11-22 12:08:26 +11:00
Mark Andrews
e0f1907562 locks are only need in OpenSSL < 1.1 2016-11-09 10:06:34 +11:00
Mark Andrews
704f73353d only call dns_test_begin once
(cherry picked from commit f13c7b01746a07bef87a386ceff93ccb2a7488a9)
(cherry picked from commit 56c6fc0dac)
2016-11-09 10:03:47 +11:00
Mark Andrews
a135cb62d3 remove spurious newline [RT #43585]
(cherry picked from commit fed2f7e4c1)
2016-11-09 08:27:27 +11:00
Evan Hunt
0fdb1e5cb7 [v9_11] typo in comment 2016-11-08 09:06:30 -08:00