Mark Andrews
d72952cf25
4739. [cleanup] Address clang static analysis warnings. [RT #45952 ]
...
(cherry picked from commit f9f3f20d2d )
2017-09-27 10:58:44 +10:00
Evan Hunt
68d7ff133c
[v9_11] backport rpz tweaks
...
4713. [cleanup] Minor revisions to RPZ code to reduce
differences with the development branch. [RT #46037 ]
2017-09-26 11:02:59 -07:00
Mukund Sivaraman
f896f7c8be
Fix use after free when closing an LMDB ( #46000 )
...
(cherry picked from commit e2ed24aa4d )
2017-09-19 19:43:22 +05:30
Michał Kępień
62f2fefaec
[v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
...
4727. [bug] Retransferring an inline-signed slave using NSEC3
around the time its NSEC3 salt was changed could result
in an infinite signing loop. [RT #45080 ]
(cherry picked from commit f665c724e4 )
2017-09-18 09:23:18 +02:00
Mark Andrews
7b4bfc0201
4723. [bug] Statistics counter DNSTAPdropped was misidentified
...
as DNSSECdropped. [RT #46002 ]
(cherry picked from commit 3128cd21e3 )
2017-09-14 23:53:07 +00:00
Tinderbox User
7c38d4781f
update copyright notice / whitespace
2017-09-14 23:48:31 +00:00
Mark Andrews
4f851656c4
#include <isc/string.h>
...
(cherry picked from commit 5fb0c09a5e )
2017-09-14 18:55:15 +10:00
Mark Andrews
5a93d3be4e
more str{n}{cat,cpy} corrections rt45981_stage2
...
(cherry picked from commit cb629cdeda )
2017-09-14 18:33:02 +10:00
Tinderbox User
bd911976d5
update copyright notice / whitespace
2017-09-13 23:52:25 +00:00
Evan Hunt
7cd594b842
[master] cleanup strcat/strcpy
...
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981 ]
(cherry picked from commit 114f95089c )
2017-09-13 00:17:16 -07:00
Mark Andrews
c76e8412f4
4719. [bug] Address PVS static analyzer warnings. [RT #45946 ]
...
(cherry picked from commit 34130ee25a )
2017-09-13 09:51:39 +10:00
Mark Andrews
7dfd012873
sync option order with master
2017-09-06 15:26:38 +10:00
Tinderbox User
9700e6d72c
regen v9_11
2017-08-30 01:21:44 +00:00
Tinderbox User
36d3f6b40f
update copyright notice / whitespace
2017-08-29 23:47:49 +00:00
Michał Kępień
b7a823a402
[v9_11] Ensure consistent handling of -4/-6 command line options in all tools
...
4690. [bug] Command line options -4/-6 were handled inconsistently
between tools. [RT #45632 ]
(cherry picked from commit d6814700de )
2017-08-29 10:22:10 +02:00
Evan Hunt
031bc55634
[v9_11] turn on minimal responses for CDS/CDNSKEY
...
4678. [cleanup] Turn on minimal responses for CDNSKEY and CDS in
addition to DNSKEY and DS. Thanks to Tony Finch.
[RT #45690 ]
(cherry picked from commit 391a3a2f20 )
2017-08-25 13:32:18 -07:00
Tinderbox User
3523e19da2
update copyright notice / whitespace
2017-08-09 23:49:39 +00:00
Mark Andrews
bf216589c1
4675. [cleanup] Don't use C++ keyword class. [RT #45726 ]
2017-08-10 08:44:23 +10:00
Evan Hunt
7dbeb5e7f0
[v9_11] silence gcc 7 warnings
...
4673. [port] Silence GCC 7 warnings. [RT #45592 ]
(cherry picked from commit cdacec1dcb )
2017-08-09 00:24:16 -07:00
Tinderbox User
36babd3e63
update copyright notice / whitespace
2017-08-09 01:01:24 +00:00
Evan Hunt
37f6466aa3
[v9_11] ensure verified_sig
...
4670. [cleanup] Ensure that a request MAC is never sent back
in an XFR response unless the signature was
verified. [RT #45494 ]
(cherry picked from commit 0ad72b96d2 )
2017-08-07 18:54:54 -07:00
Mark Andrews
cb4e0ef4e2
4659. [bug] Remove spurious log message about lmdb-mapsize
...
not being supported when parsing builtin
configuration file. [RT #45618 ]
(cherry picked from commit 71cd6910ba )
2017-07-28 16:03:24 +10:00
Mark Andrews
bfde61d519
4654. [cleanup] Don't use C++ keywords delete, new and namespace.
...
[RT #45538 ]
(cherry picked from commit 4bf32aa587 )
2017-07-21 12:28:58 +10:00
Mark Andrews
3a84275b10
4648. [bug] "rndc reconfig" on a slave no longer causes all member
...
zones of configured catalog zones to be removed from
configuration. [RT #45310 ]
(cherry picked from commit 1e9b39fe26 )
2017-07-10 09:07:29 +10:00
Mark Andrews
b2e7185306
4640. [bug] If query_findversion failed in query_getdb due to
...
memory failure the error status was incorrectly
discarded. [RT #45331 ]
(cherry picked from commit b551ee14bd )
2017-06-23 17:18:23 +10:00
Tinderbox User
6431922cb2
update copyright notice / whitespace
2017-06-13 23:46:02 +00:00
Evan Hunt
503809a8e1
[v9_11] put in a missing #ifdef section
...
(cherry picked from commit 19a72397da )
2017-06-13 14:51:09 -07:00
Evan Hunt
214b53880b
[v9_11] prevent reload failure due to LMDB database perms
...
4638. [bug] Reloading or reconfiguring named could fail on
some platforms when LMDB was in use. [RT #45203 ]
(cherry picked from commit bf05e66bb3 )
2017-06-13 12:01:29 -07:00
Mukund Sivaraman
3a58e1fefb
Don't log NSDNAME failures as NSIP ( #45052 )
...
(cherry picked from commit 2c11da8441 )
2017-06-12 14:11:32 +05:30
Evan Hunt
3440cf9c60
[v9_11] fix rpz formerr loop
...
4531. [security] Some RPZ configurations could go into an infinite
query loop when encountering responses with TTL=0.
(CVE-2017-3140) [RT #45181 ]
2017-05-30 12:35:06 -07:00
Mark Andrews
9270a14461
4530. [bug] "dyndb" is dependent on dlopen existing / being
...
enabled. [RT #45291 ]
(cherry picked from commit aa3a8979bc )
2017-05-30 11:35:05 +10:00
Evan Hunt
fb9ef31fed
[v9_11] Add DLZ db version to activeversions
...
4628. [bug] Fixed a potential reference leak in query_getdb().
[RT #45247 ]
(cherry picked from commit 594eadcc34 )
2017-05-28 14:29:58 -07:00
Evan Hunt
b6fa637fc8
[v9_11] don't keep an LMDB transaction open across an exclusive section
...
4625. [bug] Running "rndc addzone" and "rndc delzone" at close
to the same time could trigger a deadlock if using
LMDB. [RT #45209 ]
(cherry picked from commit 03a7a952c0 )
2017-05-16 08:48:21 -07:00
Mark Andrews
c935952ede
4619. [bug] Call isc_mem_put instead of isc_mem_free in
...
bin/named/server.c:setup_newzones. [RT #45202 ]
(cherry picked from commit 0c18eb4783 )
2017-05-10 11:11:09 +10:00
Evan Hunt
c83a306155
[v9_11] fix lmdb delzone
...
4616. [bug] When using LMDB, zones deleted using "rndc delzone"
were not correctly removed from the new-zone
database. [RT #45185 ]
(cherry picked from commit 3a554a444c )
2017-05-04 12:32:47 -07:00
Mark Andrews
0b18154e45
remove unused assignments [RT #45147 ]
...
(cherry picked from commit 78551a3f2c )
2017-05-03 07:46:21 +10:00
Tinderbox User
af0d9b7705
update copyright notice / whitespace
2017-04-26 23:46:00 +00:00
Tinderbox User
0fc4b96b2b
regen v9_11
2017-04-26 23:29:27 +00:00
Mukund Sivaraman
3b38e4b834
Set a LMDB mapsize and also provide a config option to control it ( #44954 )
...
(cherry picked from commit 241b49e611 )
2017-04-26 23:55:27 +05:30
Tinderbox User
9b9b0d5962
regen v9_11
2017-04-24 01:10:30 +00:00
Evan Hunt
1ca2cf0243
[v9_11] update copyrights that had been missed recently
2017-04-23 17:07:59 -07:00
Tinderbox User
164ade1482
regen v9_11
2017-04-23 01:10:00 +00:00
Tinderbox User
d0c3b241e5
update copyright notice / whitespace
2017-04-21 23:46:11 +00:00
Evan Hunt
34f649fa22
[v9_11] auto-generate named.conf.docbook
...
4603. [doc] Automatically generate named.conf(5) man page
from doc/misc/options. Thanks to Tony Finch.
[RT #43525 ]
2017-04-21 16:30:51 -07:00
Mukund Sivaraman
fec9247b8f
Validate glue before adding it to the additional section ( #45062 )
...
(cherry picked from commit b0dbcba2d2 )
2017-04-21 15:46:07 +05:30
Mark Andrews
1bce43adcc
4585. [port] win32: Set CompileAS value. [RT #42474 ]
...
(cherry picked from commit 3742338a7b )
2017-04-20 12:42:39 +10:00
Tinderbox User
3be4330b77
update copyright notice / whitespace
2017-03-16 23:47:44 +00:00
Mark Andrews
8bcd80824c
4581. [port] Linux: Add getpid and getrandom to the list of system
...
calls named uses for seccomp. [RT #44883 ]
(cherry picked from commit f94f3e2791 )
2017-03-16 11:23:36 +11:00
Mark Andrews
b81977ae70
4575. [security] Dns64 with break-dnssec yes; can result in a
...
assertion failure. (CVE-2017-3136) [RT #44653 ]
(cherry picked from commit 3bce12e4b6 )
2017-02-15 12:22:53 +11:00
Tinderbox User
1617002c78
update copyright notice / whitespace
2017-02-04 23:46:08 +00:00