ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
25,917 Commits 589 Branches 805 Tags
cd86c23e875cf49213e07a2cb60bdee1faea6708
Commit Graph
5580 Commits
Author SHA1 Message Date
Evan Hunt d77cb075aa [v9_11] prep 9.11.3rc1 2018-02-15 11:16:15 -08:00
Mark Andrews 30ca20f720 4889. [func] Warn about the use of old root keys without the new 
root key being present.  Warn about dlv.isc.org's
                        key being present. Warn about both managed and
                        trusted root keys being present. [RT #43670]

(cherry picked from commit baef0ca988)
 2018-02-09 12:33:42 +11:00
Evan Hunt 7ec97ae74e [v9_11] fix typo 2018-02-08 16:16:19 -08:00
Mark AndrewsandEvan Hunt 701a93f5a5 [v9_11] fix nsupdate test on windows 
4888.	[test]		Initialize sockets correctly in sample-update so
			that nsupdate system test will will run on Windows.
			[RT #47097]

(cherry picked from commit 6757dc6488)
 2018-02-08 13:35:43 -08:00
Tony FinchandMukund Sivaraman 002f137337 Document dig -u in manpage (#47150) 
(cherry picked from commit cc82b5aa3c)
(cherry picked from commit 30c86d5649)
 2018-02-09 00:53:07 +05:30
Mark Andrews 8f1ed05dc0 4885. [security] update-policy rules that otherwise ignore the name 
field now require that it be set to "." to ensure
                        that any type list present is properly interpreted.
                        [RT #47126]

(cherry picked from commit ec771bbdc8)
 2018-02-07 13:50:00 +11:00
Evan Hunt 3a29ce9c08 [v9_11] typo 2018-01-30 09:13:36 -08:00
Mark Andrews 73cf0ba4e8 4882. [bug] Address potential memory leak in 
dns_update_signaturesinc. [RT #47084]

(cherry picked from commit 7817caa3c7)
 2018-01-30 15:28:56 +11:00
Mark Andrews d8351dfc9b 4881. [bug] Only include dst_openssl.h when OpenSSL is required. 
[RT #47068]

(cherry picked from commit a64503c736)
 2018-01-30 15:28:51 +11:00
Mark Andrews 5c78f1f50e 4879. [bug] dns_rdata_caa:value_len is was small. [RT #47086] 
(cherry picked from commit 3ae586b857)
 2018-01-30 11:00:44 +11:00
Mark Andrews f1740da065 4878. [bug] List 'ply' as a requirement for the 'isc' python 
package. [RT #47065]

(cherry picked from commit 6e08af82ed)
 2018-01-29 13:29:35 +11:00
Mark Andrews 31c7ab4fb3 4811. [bug] Revert api changes to use <isc/buffer.h> inline 
macros.  Provide a alternative mechanism to turn
                        on the use of inline macros when building BIND.
                        [RT #46520]

(cherry picked from commit a1a5145867)
 2018-01-25 16:42:37 +11:00
Evan Hunt ad309e8dfa [v9_11] prep 9.11.3b1 2018-01-24 10:21:04 -08:00
Mark Andrews 635e4351b0 4876. [bug] Address deadlock with accessing a keytable. [RT #47000] 
(cherry picked from commit b575c4ec42)
 2018-01-24 18:56:34 +11:00
Mark Andrews fc04365d2f 4875. [bug] Address compile failures on older systems. [RT #47015] 
(cherry picked from commit 99178b6329)
 2018-01-24 13:10:44 +11:00
Mark Andrews 7cbac360bf 4874. [bug] Wrong time display when reporting new keywarntime. 
[RT #47042]

(cherry picked from commit 83d005de61)
 2018-01-24 08:00:30 +11:00
Evan Hunt 1cf118a656 [v9_11] automatically generate named.conf grammars for the ARM 
4873.	[doc]		Grammars for named.conf included in the ARM are now
			automatically generated by the configuration parser
			itself.  As a side effect of the work needed to
			separate zone type grammars from each other, this
			also makes checking of zone statements in
			named-checkconf more correct and consistent.
			[RT #36957]

(cherry picked from commit 129c4414cb)
(cherry picked from commit f662d5484e)
 2018-01-22 19:40:00 +00:00
Mukund Sivaraman 6fb3db01ac Don't permit loading meta RR types such as TKEY from master files (#47009) 
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
 2018-01-22 14:36:18 +05:30
Mukund Sivaraman fd82c70695 Fix configure issue detecting stdatomic.h support (#46959) 
(cherry picked from commit 63d0c6a3fc)
(cherry picked from commit 7e1ed15762)
 2018-01-22 13:50:38 +05:30
Mark Andrews 4a53e3c2b8 4870. [test] Update included ATF library to atf-0.21 preserving 
the ATF tool. [RT #46967]

(cherry picked from commit 23d77c8747)
 2018-01-22 10:00:47 +11:00
Mark Andrews 2cf0fe3b80 4869. [bug] Address some cases where NULL with zero length could 
be passed to memmove which is undefined behaviour and
                        can lead to bad optimisation. [RT #46888]

(cherry picked from commit fdd8838bf9)
 2018-01-22 09:39:25 +11:00
Evan Hunt 4221d9cd1d [v9_11] normalize rndc on/off commands 
4867.	[cleanup]	Normalize rndc on/off commands (validation and
			querylog) so they accept the same synonyms
			for on/off (yes/no, true/false, enable/disable).
			Thanks to Tony Finch. [RT #47022]

(cherry picked from commit cf8f4241e7)
 2018-01-18 10:52:15 -08:00
Francis Dupont ded782a862 Merged rt46864 (check MD5 amd SHA1 support) 2018-01-17 14:41:58 +01:00
Francis Dupont f9c410d937 Merged rt46864 (check MD5 amd SHA1 support) 2018-01-17 14:40:13 +01:00
Michał Kępień e526027287 [v9_11] Ensure all master definitions in a catalog zone contain an IP address 
4864.	[bug]		named acting as a slave for a catalog zone crashed if
			the latter contained a master definition without an IP
			address. [RT #45999]

(cherry picked from commit ae51a676c9)
 2018-01-15 20:52:54 +01:00
Mukund Sivaraman 929329d2d6 Fix various bugs reported by valgrind --tool=memcheck (#46978) 
(cherry picked from commit f96133826e)
(cherry picked from commit 0374e1c3fd)
 2018-01-13 11:47:46 +05:30
Mark Andrews 7e1a62eea2 grammar 
(cherry picked from commit a35b95acb1)
 2018-01-11 09:54:20 +11:00
Mark Andrews ec29d217ba 4862. [bug] The rdata flags for RRSIG was not being properly set 
when constructing a rdataslab. [RT #46978]

(cherry picked from commit 7befb67af4)
 2018-01-11 09:54:20 +11:00
Mark Andrews afefd75473 4861. [bug] The isc_crc64 unit test was not endian independent. 
[RT #46973]

(cherry picked from commit 0ce212b9f5)
 2018-01-10 09:46:54 +11:00
Mark Andrews f0353a586c 4860. [bug] isc_int8_t should be signed char. [RT #46973] 
(cherry picked from commit 21f708c88c)
 2018-01-10 08:42:21 +11:00
Evan Hunt 7ff28f5bef [v9_11] block validator deadlock and prevent use-after-free 
4859.	[bug]		A loop was possible when attempting to validate
			unsigned CNAME responses from secure zones;
			this caused a delay in returning SERVFAIL and
			also increased the chances of encountering
			CVE-2017-3145. [RT #46839]

4858.	[security]	Addresses could be referenced after being freed
			in resolver.c, causing an assertion failure.
			(CVE-2017-3145) [RT #46839]
 2018-01-03 19:19:46 -08:00
Mark Andrews cad79077bd 4857. [bug] Maintain attach/detach semantics for event->db, 
event->node, event->rdataset and event->sigrdataset
                        in query.c. [RT #46891]
 2018-01-04 13:07:51 +11:00
Mark Andrews adfe58e8e5 4856. [bug] 'rndc zonestatus' reported the wrong underlying type 
for a inline slave zone. [RT #46875]

(cherry picked from commit 0b27aa0712)
 2018-01-04 10:12:15 +11:00
Mark Andrews c3237dec87 4852. [bug] Handle strftime() failing in isc_time_formatISO8601ms. 
Add REQUIRE's and INSIST's to isc_time_formattimestamp,
                        isc_time_formathttptimestamp, isc_time_formatISO8601,
                        isc_time_formatISO8601ms. [RT #46892]
 2018-01-02 10:46:41 +11:00
Mark Andrews cb616c6d5c 4851. [port] Support using kyua as well as atf-run to run the unit 
tests. [RT #46853]

(cherry picked from commit ccb5678066)
 2018-01-02 10:21:39 +11:00
Mark Andrews c0a2210466 4850. [bug] Named failed to restart with multiple added zones in 
lmdb database. [RT #46889]

(cherry picked from commit 9bec7facfb)
 2017-12-27 16:26:32 +11:00
Mark Andrews 534057c9f9 4849. [bug] Duplicate zones could appear in the .nzf file if 
addzone failed. [RT #46435]

(cherry picked from commit 2d7f89b9c7)
(cherry picked from commit 22a32060c1)
 2017-12-20 17:16:49 +11:00
Mark Andrews 0f14b04132 4846. [test] Adjust timing values in runtime system test. Address 
named.pid removal races in runtime system test.
                        [RT #46800]

(cherry picked from commit c67180f09b)
 2017-12-13 10:26:58 +11:00
Mark Andrews f7f4730e56 4844. [test] Address memory leaks in libatf-c. [RT #46798] 
(cherry picked from commit 1c794002f5)
 2017-12-08 12:34:49 +11:00
Mark Andrews 1848d38f44 4843. [bug] dnssec-signzone free hashlist on exit. [RT #46791] 
(cherry picked from commit 8444b4856a)
 2017-12-07 19:30:10 +11:00
Mark Andrews 2d82ed9456 4842. [bug] Conditionally compile opensslecdsa_link.c to avoid 
warnings about unused function. [RT #46790]

(cherry picked from commit 63459cdc05)
 2017-12-07 13:31:57 +11:00
Mark Andrews a5a1cbece4 4841. [bug] Address -fsanitize=undefined warnings. [RT #46786] 
(cherry picked from commit 9d5a0abe81)
 2017-12-06 21:02:24 +11:00
Mark Andrews c7e3e6dfa0 remove extra line 2017-12-06 21:01:44 +11:00
Mark Andrews 0d6328ce5f 4840. [test] Add tests to cover fallback to using ZSK on inactive 
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
 2017-12-06 20:38:26 +11:00
Mukund Sivaraman 16f43564c6 Backport performance work to 9.11 (#45637) 2017-12-06 10:35:21 +05:30
Tinderbox User 124cc0660c update copyright notice / whitespace 2017-12-05 23:46:27 +00:00
Mark Andrews e01ef6f01c 4839. [bug] zone.c:zone_sign was not properly determining 
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
 2017-12-05 16:11:53 +11:00
Mark Andrews 677f507de7 4838. [bug] zone.c:add_sigs was not properly determining 
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
 2017-12-05 09:32:50 +11:00
Mark Andrews bf459d24a1 4837. [bug] dns_update_signatures{inc} (add_sigs) was not 
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
 2017-12-04 10:04:58 +11:00
Evan Hunt f53e0bda46 [v9_11] fix "allow-transfer" inheritance and clean up ACL configuration 
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
 2017-11-30 12:56:39 -08:00