Commit Graph

4481 Commits

Author SHA1 Message Date
Mukund Sivaraman
ccba3c9ffd [10686] Add version printing option to various BIND utilites
Squashed commit of the following:

commit 95effe9b2582a7eb878ccb8cb9ef51dfc5bbfde7
Author: Evan Hunt <each@isc.org>
Date:   Tue Jun 10 16:52:45 2014 -0700

    [rt10686] move version() to dnssectool.c

commit df205b541d1572ea5306a5f671af8b54b9c5c770
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:38:31 2014 +0530

    Rearrange order of cases

commit cfd30893f2540bf9d607e1fd37545ea7b441e0d0
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:38:08 2014 +0530

    Add version printer to dnssec-verify

commit a625ea338c74ab5e21634033ef87f170ba37fdbe
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:32:19 2014 +0530

    Add version printer to dnssec-signzone

commit d91e1c0f0697b3304ffa46fccc66af65591040d9
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:26:01 2014 +0530

    Add version printer to dnssec-settime

commit 46fc8775da3e13725c31d13e090b406d69b8694f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:25:48 2014 +0530

    Fix docbook

commit 8123d2efbd84cdfcbc70403aa9bb27b96921bab2
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:20:17 2014 +0530

    Add version printer to dnssec-revoke

commit d0916420317d3e8c69cf1b37d2209ea2d072b913
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:17:54 2014 +0530

    Add version printer to dnssec-keygen

commit 93b0bd5ebc043298dc7d8f446ea543cb40eaecf8
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:14:11 2014 +0530

    Add version printer to dnssec-keyfromlabel

commit 07001bcd9ae2d7b09dd9e243b0ab35307290d05d
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:13:39 2014 +0530

    Update usage help output, docbook

commit 85cdd702f41c96fbc767fc689d1ed97fe1f3a926
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:07:18 2014 +0530

    Add version printer to dnssec-importkey

commit 9274fc61e38205aad561edf445940b4e73d788dc
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 21:01:53 2014 +0530

    Add version printer to dnssec-dsfromkey

commit bf4605ea2d7282e751fd73489627cc8a99f45a90
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 20:49:22 2014 +0530

    Add -V to nsupdate usage output

(cherry picked from commit 4278293107)
2014-06-16 12:14:41 +05:30
Evan Hunt
d40f68e089 [v9_10] wrong dlopen filename caused segfault
3878.	[bug]		Using the incorrect filename for a DLZ module
			caused a segmentation fault on startup. [RT #36286]

(cherry picked from commit c1d33c159b)
2014-06-12 19:34:02 -07:00
Evan Hunt
099e457c77 [v9_10] address rpz bugs
3877.	[bug]		Inserting and deleting parent and child nodes
			in response policy zones could trigger an assertion
			failure. [RT #36272]

(cherry picked from commit 06e0d6bb12)
2014-06-11 20:01:21 -07:00
Mark Andrews
324d60568b 4. [test] Check that only "check-names master" is needed for
updates to be accepted.
2014-06-10 13:49:16 +10:00
Mark Andrews
555137ee1f 3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
(cherry picked from commit 634f66c659dade56502b55b1bbd514e5cfcae185)
2014-06-10 09:30:04 +10:00
Mark Andrews
9becd4c7d6 3872. [bug] Address issues found by static analysis. [RT #36209]
(cherry picked from commit b16d99bac1)
2014-06-10 09:22:43 +10:00
Mukund Sivaraman
2a7ecad81b [35063] Don't publish an activated key automatically before its publish time
(cherry picked from commit 79d27f505a)
2014-06-04 15:23:56 +05:30
Mark Andrews
7616b6233c 3869. [doc] Document that in-view zones cannot be used for
response policy zones. [RT #35941]
2014-06-03 13:37:43 +10:00
Mark Andrews
a27fdeeef2 3868. [bug] isc_mem_setwater incorrectly cleared hi_called
potentially leaving over memory cleaner running.
                        [RT #35270]
2014-06-02 16:37:45 +10:00
Mark Andrews
b6bcb386dc 3866. [bug] Named could die on disk full in generate_session_key.
[RT #36119]

(cherry picked from commit fa6308bd57)
2014-05-30 14:39:05 +10:00
Evan Hunt
1c961887b8 [v9_10] Add various RBT unit tests
3865.	[test]		Improved testability of the red-black tree
			implementation and added unit tests. [RT #35904]
2014-05-29 12:30:33 -07:00
Mark Andrews
e3befb38c9 3864. [bug] RPZ didn't work well when being used as forwarder.
[RT #36060]
2014-05-29 17:02:36 +10:00
Mark Andrews
5defbb76ea 3863. [bug] The "E" flag was missing from the query log as a
unintended side effect of code rearrangement to
                        support EDNS EXPIRE. [RT #36117]
2014-05-29 08:05:39 +10:00
Evan Hunt
3b5fc5809b [v9_10] fix typo/misspellings in CHANGES
Not reviewed

(cherry picked from commit a6d48ae493)
2014-05-28 14:11:10 -07:00
Mark Andrews
921b535e32 3862. [cleanup] Return immediately if we are not going to log the
message in ns_client_dumpmessage.

(cherry picked from commit 9b819daddf)
2014-05-27 12:22:53 +10:00
Mark Andrews
ffd2ef8ad6 add CVE-2014-3859 2014-05-26 09:43:26 +10:00
Mark Andrews
298b35a1df 3861. [security] Missing isc_buffer_availablelength check results
in a REQUIRE assertion when printing out a packet.
                        [RT #36078]
2014-05-25 12:39:52 +10:00
Mark Andrews
8fd8dd56fe 3860. [bug] ioctl(DP_POLL) array size needs to be determined
at run time as it is limited to {OPEN_MAX}.
                        [RT #35878]

(cherry picked from commit a569e1b321)
2014-05-23 13:06:25 +10:00
Mark Andrews
a4b09947f6 3858. [bug] Disable GCC 4.9 "delete null pointer check".
[RT #35968]

(cherry picked from commit 603a787083)
2014-05-23 11:26:29 +10:00
Mark Andrews
624b99c749 3857. [bug] Make it harder for a incorrect NOEDNS classification
to be made. [RT #36020]
2014-05-22 21:39:20 +10:00
Mark Andrews
779885fc06 3856. [bug] Configuring libjson without also configuring libxml
resulting in a REQUIRE assertion when retrieving
                        statistics using json. [RT #36009]
2014-05-21 12:06:31 +10:00
Mark Andrews
56f9a15e47 3855. [bug] Limit smoothed round trip time aging to no more than
once a second. [RT #32909]

(cherry picked from commit 0fe0789181)
2014-05-21 10:16:20 +10:00
Tinderbox User
c1f8df8ddf update copyright notice 2014-05-20 23:45:47 +00:00
Evan Hunt
177afac612 [v9_10] report unrecognized configure options
3854.	[cleanup]	Report unrecognized options, if any, in the final
                        configure summary. [RT #36014]
2014-05-20 15:31:34 -07:00
Mark Andrews
e59b84417b 3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out
the handling of a rdataset with no records. [RT #35968]

(cherry picked from commit 27b09ceb12)
2014-05-20 11:37:28 +10:00
Mark Andrews
0fe09c71ab 3849. [bug] Disabling forwarding could trigger a REQUIRE assertion.
[RT #35979]

(cherry picked from commit 01f881c1c5)
2014-05-15 16:55:55 +10:00
Mark Andrews
e56e55ca0e 3849. [doc] Alphabetized dig's +options. [RT #35992] 2014-05-15 12:20:04 +10:00
Mark Andrews
19125269ba 3848. [bug] Adjust 'statistics-channels specified but not effective'
error message to account for JSON support. [RT #36008]

(cherry picked from commit a14fe85229)
2014-05-15 11:12:33 +10:00
Mark Andrews
b334ccf31e 3847. [bug] 'configure --with-dlz-postgres' failed to fail when
there is not support available.

(cherry picked from commit 61fbd791fbd817301dcac27c05e1e742c37b10ab)
2014-05-14 17:17:41 +10:00
Mark Andrews
f49cd06d19 remove reporter 2014-05-14 10:02:08 +10:00
Mark Andrews
6685a05955 3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
ixfr query. [RT #35980]

(cherry picked from commit 05816676bb)
2014-05-14 10:00:03 +10:00
Mark Andrews
8acff36a44 changes order 2014-05-13 22:00:27 +10:00
Francis Dupont
7947049f24 use vcredist_x64.exe for 64 bit Windows [#35973] 2014-05-13 12:38:04 +02:00
Mark Andrews
a0184ac58c Revert "[master] improve RRL documentation"
This reverts commit fe9a1e5bd6.
2014-05-13 14:53:21 +10:00
Mark Andrews
60e7e63a72 3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
[RT #35969]

(cherry picked from commit ae5335dcd9d750312a4fa455495080fcb314b9d8)
2014-05-13 12:47:27 +10:00
Mark Andrews
2b9dccddb9 3842. [bug] Adjust RRL log-only logging category. [RT #35945]
(cherry picked from commit 2c172a42b3)
2014-05-11 11:00:19 +10:00
Mark Andrews
68e728d47d Add CVE-2014-3214 to change 3837
(cherry picked from commit 156d68fd2937d021ab343fca2d60c83a19b94c92)
2014-05-09 13:35:49 +10:00
Mark Andrews
64f015935f 3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
[RT #35924]

(cherry picked from commit faa01edd13)
2014-05-08 09:39:06 +10:00
Evan Hunt
b674db54ca [v9_10] check for arc4random_addrandom()
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]

(cherry picked from commit 1ea6e09c37)
2014-05-07 08:58:47 -07:00
Evan Hunt
812cf443bb [v9_10] use posix-compatible shell in system tests
3839.	[test]		Use only posix-compatible shell in system tests.
			[RT #35625]

(cherry picked from commit 60988462e5)
2014-05-06 22:06:28 -07:00
Mark Andrews
992ed39167 remove extraneous space 2014-05-06 11:49:37 +10:00
Mark Andrews
7062c5fb25 3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
(cherry picked from commit cd07e4d038)
2014-05-05 16:41:17 +10:00
Mark Andrews
29e6ce6e60 3837. [security] A NULL pointer is passed to query_prefetch resulting
a REQUIRE assertion failure when a fetch is actually
                        initiated.  [ RT #35899]

Squashed commit of the following:

commit 7f4e1f3917d743089c42cc52ec2c0eea598d2c00
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun May 4 22:34:34 2014 +0530

    Fix a comment

commit 6a35a6a2346013fa8e3798b9b680d8a3031fcb03
Author: Mark Andrews <marka@isc.org>
Date:   Sun May 4 23:34:25 2014 +1000

    pass the correct name to query_prefetch

(cherry picked from commit b36fc8294e)
2014-05-05 10:12:39 +10:00
Mark Andrews
7848d72398 3836. [bug] Address C++ keyword usage in header file.
(cherry picked from commit dd820d8fd2)
2014-05-02 11:35:45 +10:00
Tinderbox User
9c8331804a update copyright notice 2014-05-01 23:45:42 +00:00
Evan Hunt
4266ef751e [v9_10] fixed geoip elements in named ACLs
3835.	[bug]		Geoip ACL elements didn't work correctly when
                        referenced via named or nested ACLs. [RT #35879]

(cherry picked from commit c0c4512020)
2014-04-30 20:23:38 -07:00
Mark Andrews
9e7d2c11a3 fix change number 2014-04-30 11:59:41 +10:00
Mark Andrews
204d10864c 3834. [bug] The re-signing heaps were not being updated soon enough
leading to multiple re-generations of the same RRSIG
                        when a zone transfer was in progress. [RT #35273]

(cherry picked from commit 5d739300d1)
2014-04-30 11:58:31 +10:00
Mark Andrews
95ba250d60 2833. [bug] Cross compiling was broken due to calling genrandom at
build time. [RT #35869]

(cherry picked from commit 87344c2cb3)
2014-04-30 11:40:33 +10:00
Mark Andrews
23c5660af8 it was bad INSIST logic not use after free
(cherry picked from commit 6bc767b003)
2014-04-30 10:46:50 +10:00