Commit Graph

3115 Commits

Author SHA1 Message Date
Mark Andrews
d72952cf25 4739. [cleanup] Address clang static analysis warnings. [RT #45952]
(cherry picked from commit f9f3f20d2d)
2017-09-27 10:58:44 +10:00
Evan Hunt
68d7ff133c [v9_11] backport rpz tweaks
4713.	[cleanup]	Minor revisions to RPZ code to reduce
			differences with the development branch. [RT #46037]
2017-09-26 11:02:59 -07:00
Mukund Sivaraman
f896f7c8be Fix use after free when closing an LMDB (#46000)
(cherry picked from commit e2ed24aa4d)
2017-09-19 19:43:22 +05:30
Michał Kępień
62f2fefaec [v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit f665c724e4)
2017-09-18 09:23:18 +02:00
Mark Andrews
7b4bfc0201 4723. [bug] Statistics counter DNSTAPdropped was misidentified
as DNSSECdropped. [RT #46002]

(cherry picked from commit 3128cd21e3)
2017-09-14 23:53:07 +00:00
Tinderbox User
7c38d4781f update copyright notice / whitespace 2017-09-14 23:48:31 +00:00
Mark Andrews
4f851656c4 #include <isc/string.h>
(cherry picked from commit 5fb0c09a5e)
2017-09-14 18:55:15 +10:00
Mark Andrews
5a93d3be4e more str{n}{cat,cpy} corrections rt45981_stage2
(cherry picked from commit cb629cdeda)
2017-09-14 18:33:02 +10:00
Tinderbox User
bd911976d5 update copyright notice / whitespace 2017-09-13 23:52:25 +00:00
Evan Hunt
7cd594b842 [master] cleanup strcat/strcpy
4722.	[cleanup]	Clean up uses of strcpy() and strcat() in favor of
			strlcpy() and strlcat() for safety. [RT #45981]

(cherry picked from commit 114f95089c)
2017-09-13 00:17:16 -07:00
Mark Andrews
c76e8412f4 4719. [bug] Address PVS static analyzer warnings. [RT #45946]
(cherry picked from commit 34130ee25a)
2017-09-13 09:51:39 +10:00
Mark Andrews
7dfd012873 sync option order with master 2017-09-06 15:26:38 +10:00
Tinderbox User
9700e6d72c regen v9_11 2017-08-30 01:21:44 +00:00
Tinderbox User
36d3f6b40f update copyright notice / whitespace 2017-08-29 23:47:49 +00:00
Michał Kępień
b7a823a402 [v9_11] Ensure consistent handling of -4/-6 command line options in all tools
4690.	[bug]		Command line options -4/-6 were handled inconsistently
			between tools. [RT #45632]

(cherry picked from commit d6814700de)
2017-08-29 10:22:10 +02:00
Evan Hunt
031bc55634 [v9_11] turn on minimal responses for CDS/CDNSKEY
4678.	[cleanup]	Turn on minimal responses for CDNSKEY and CDS in
			addition to DNSKEY and DS. Thanks to Tony Finch.
			[RT #45690]

(cherry picked from commit 391a3a2f20)
2017-08-25 13:32:18 -07:00
Tinderbox User
3523e19da2 update copyright notice / whitespace 2017-08-09 23:49:39 +00:00
Mark Andrews
bf216589c1 4675. [cleanup] Don't use C++ keyword class. [RT #45726] 2017-08-10 08:44:23 +10:00
Evan Hunt
7dbeb5e7f0 [v9_11] silence gcc 7 warnings
4673.	[port]		Silence GCC 7 warnings. [RT #45592]

(cherry picked from commit cdacec1dcb)
2017-08-09 00:24:16 -07:00
Tinderbox User
36babd3e63 update copyright notice / whitespace 2017-08-09 01:01:24 +00:00
Evan Hunt
37f6466aa3 [v9_11] ensure verified_sig
4670.	[cleanup]	Ensure that a request MAC is never sent back
			in an XFR response unless the signature was
                        verified. [RT #45494]

(cherry picked from commit 0ad72b96d2)
2017-08-07 18:54:54 -07:00
Mark Andrews
cb4e0ef4e2 4659. [bug] Remove spurious log message about lmdb-mapsize
not being supported when parsing builtin
                        configuration file. [RT #45618]

(cherry picked from commit 71cd6910ba)
2017-07-28 16:03:24 +10:00
Mark Andrews
bfde61d519 4654. [cleanup] Don't use C++ keywords delete, new and namespace.
[RT #45538]

(cherry picked from commit 4bf32aa587)
2017-07-21 12:28:58 +10:00
Mark Andrews
3a84275b10 4648. [bug] "rndc reconfig" on a slave no longer causes all member
zones of configured catalog zones to be removed from
                        configuration. [RT #45310]

(cherry picked from commit 1e9b39fe26)
2017-07-10 09:07:29 +10:00
Mark Andrews
b2e7185306 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
2017-06-23 17:18:23 +10:00
Tinderbox User
6431922cb2 update copyright notice / whitespace 2017-06-13 23:46:02 +00:00
Evan Hunt
503809a8e1 [v9_11] put in a missing #ifdef section
(cherry picked from commit 19a72397da)
2017-06-13 14:51:09 -07:00
Evan Hunt
214b53880b [v9_11] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]

(cherry picked from commit bf05e66bb3)
2017-06-13 12:01:29 -07:00
Mukund Sivaraman
3a58e1fefb Don't log NSDNAME failures as NSIP (#45052)
(cherry picked from commit 2c11da8441)
2017-06-12 14:11:32 +05:30
Evan Hunt
3440cf9c60 [v9_11] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:35:06 -07:00
Mark Andrews
9270a14461 4530. [bug] "dyndb" is dependent on dlopen existing / being
enabled. [RT #45291]

(cherry picked from commit aa3a8979bc)
2017-05-30 11:35:05 +10:00
Evan Hunt
fb9ef31fed [v9_11] Add DLZ db version to activeversions
4628.	[bug]		Fixed a potential reference leak in query_getdb().
			[RT #45247]

(cherry picked from commit 594eadcc34)
2017-05-28 14:29:58 -07:00
Evan Hunt
b6fa637fc8 [v9_11] don't keep an LMDB transaction open across an exclusive section
4625.	[bug]		Running "rndc addzone" and "rndc delzone" at close
			to the same time could trigger a deadlock if using
			LMDB. [RT #45209]

(cherry picked from commit 03a7a952c0)
2017-05-16 08:48:21 -07:00
Mark Andrews
c935952ede 4619. [bug] Call isc_mem_put instead of isc_mem_free in
bin/named/server.c:setup_newzones. [RT #45202]

(cherry picked from commit 0c18eb4783)
2017-05-10 11:11:09 +10:00
Evan Hunt
c83a306155 [v9_11] fix lmdb delzone
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]

(cherry picked from commit 3a554a444c)
2017-05-04 12:32:47 -07:00
Mark Andrews
0b18154e45 remove unused assignments [RT #45147]
(cherry picked from commit 78551a3f2c)
2017-05-03 07:46:21 +10:00
Tinderbox User
af0d9b7705 update copyright notice / whitespace 2017-04-26 23:46:00 +00:00
Tinderbox User
0fc4b96b2b regen v9_11 2017-04-26 23:29:27 +00:00
Mukund Sivaraman
3b38e4b834 Set a LMDB mapsize and also provide a config option to control it (#44954)
(cherry picked from commit 241b49e611)
2017-04-26 23:55:27 +05:30
Tinderbox User
9b9b0d5962 regen v9_11 2017-04-24 01:10:30 +00:00
Evan Hunt
1ca2cf0243 [v9_11] update copyrights that had been missed recently 2017-04-23 17:07:59 -07:00
Tinderbox User
164ade1482 regen v9_11 2017-04-23 01:10:00 +00:00
Tinderbox User
d0c3b241e5 update copyright notice / whitespace 2017-04-21 23:46:11 +00:00
Evan Hunt
34f649fa22 [v9_11] auto-generate named.conf.docbook
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
2017-04-21 16:30:51 -07:00
Mukund Sivaraman
fec9247b8f Validate glue before adding it to the additional section (#45062)
(cherry picked from commit b0dbcba2d2)
2017-04-21 15:46:07 +05:30
Mark Andrews
1bce43adcc 4585. [port] win32: Set CompileAS value. [RT #42474]
(cherry picked from commit 3742338a7b)
2017-04-20 12:42:39 +10:00
Tinderbox User
3be4330b77 update copyright notice / whitespace 2017-03-16 23:47:44 +00:00
Mark Andrews
8bcd80824c 4581. [port] Linux: Add getpid and getrandom to the list of system
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
2017-03-16 11:23:36 +11:00
Mark Andrews
b81977ae70 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:22:53 +11:00
Tinderbox User
1617002c78 update copyright notice / whitespace 2017-02-04 23:46:08 +00:00