Commit Graph
4826 Commits
Author SHA1 Message Date
Mark Andrews ab9537f521 4553. [bug] Named could deadlock there were multiple changes to
NSEC/NSEC3 parameters for a zone being processed at
                        the same time. [RT #42770]

(cherry picked from commit d2e1b47d4f)
2017-01-12 14:26:17 +11:00
Mark Andrews ff963a5d93 4552. [bug] Named could trigger a assertion when sending notify
messages. [RT #44019]

(cherry picked from commit 7b9e28f1a5)
2017-01-12 14:14:05 +11:00
Mark Andrews da3532f41b 4551. [test] Add system tests for integrity checks of MX and
SRV records. [RT #43953]

(cherry picked from commit 750619b7a8)
2017-01-12 13:38:44 +11:00
Evan Hunt 7d73d9aafb [v9_9] expand the flags field in dns_master_style
4550.	[cleanup]	Increased the number of available master file
			output style flags from 32 to 64. [RT #44043]
2017-01-11 12:05:54 -08:00
Mark Andrews 0faee78f98 9.9.10b1 2016-12-29 13:36:32 +11:00
Mark Andrews 0d1a60ec03 spelling 2016-12-29 12:11:21 +11:00
Mark Andrews a14b7f0187 4510. [security] Named mishandled some responses where covering RRSIG
records are returned without the requested data
                        resulting in a assertion failure. (CVE-2016-9147)
                        [RT #43548]

(cherry picked from commit 6adf421e7e)
2016-12-29 11:53:58 +11:00
Mark Andrews d372472f60 4508. [security] Named incorrectly tried to cache TKEY records which
could trigger a assertion failure when there was
                            a class mismatch. (CVE-2016-9131) [RT #43522]

(cherry picked from commit 2c1c4b99a1)
2016-12-29 11:35:54 +11:00
Mark Andrews 69cb8ebf15 4517. [security] Named could mishandle authority sections that were
missing RRSIGs triggering an assertion failure.
                        (CVE-2016-9444) [RT # 43632]

(cherry picked from commit 1df30cfd27c5a3c57fce357c54aaf6c702227d51)
2016-12-29 10:46:44 +11:00
Evan Hunt 8a9a26e6a6 [v9_9] spelling 2016-12-28 11:52:52 -08:00
Mark Andrews c161d54a65 4543. [bug] dns_client_startupdate now delays sending the update
request until isc_app_ctxrun has been called.
                        [RT #43976]

(cherry picked from commit 6f94747270)
2016-12-28 15:56:30 +11:00
Mark Andrews 354f7b05ef 4541. [bug] rndc addzone should properly reject non master/slave
zones. [RT #43665]

(cherry picked from commit e20db12918)
2016-12-28 11:08:26 +11:00
Mark Andrews c8174a6268 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:41:14 +11:00
Mark Andrews 2af18c1396 4538. [bug] Call dns_client_startresolve from client->task.
[RT #43896]

(cherry picked from commit aceabacdb8)
2016-12-27 07:15:23 +11:00
Mark Andrews 8806de3986 4537. [bug] Handle timouts better in dig/host/nslookup. [RT #43576]
(cherry picked from commit 6089c8df71)
2016-12-14 15:45:43 +11:00
Mark Andrews 3fe3359031 4535. [bug] Address race condition in setting / testing of
DNS_REQUEST_F_SENDING. [RT #43889]

(cherry picked from commit 37a8db0ba4)
2016-12-14 10:34:43 +11:00
Mark Andrews bcdf316ca5 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:38:50 +11:00
Mark Andrews 25725d525d spelling 2016-12-13 16:19:41 +11:00
Mark Andrews 0aa9619f9e 4533. [bug] dns_client_update should terminate on prerequiste
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
2016-12-13 16:12:45 +11:00
Mark Andrews 05f16bb533 4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
[RT #43836]

(cherry picked from commit 043ae106d2)
2016-12-12 17:47:54 +11:00
Mark Andrews 2c74ad28ef 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:40 +11:00
Mark Andrews 87dbe24a4f 4528. [bug] Only set the flag bits for the i/o we are waiting
for on EPOLLERR or EPOLLHUP. [RT #43617]

(cherry picked from commit c1619b8420)
2016-12-08 17:00:55 +11:00
Mark Andrews 3cf6fa831e 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
(cherry picked from commit 1b8ce3b330)
2016-12-07 11:00:40 +11:00
Evan Hunt 1ce8089b2c [v9_9] fixed ARM grammars
4526.	[doc]		Corrected errors and improved formatting of
			grammar defintiions in the ARM. [RT #43739]
2016-12-05 10:01:22 -08:00
Evan Hunt 27dc8c9287 [v9_9] fix managed-keys doc
4525.	[doc]		Fixed outdated documentation on managed-keys.
			[RT #43810]

(cherry picked from commit e1ba21bd58)
(cherry picked from commit 9e42fd3420)
2016-12-04 20:25:30 -08:00
Mark Andrews 8b094c484c 4524. [bug] The net zero test was broken causing IPv4 servers
with addresses ending in .0 to be rejected. [RT #43776]

(cherry picked from commit df372d967e)
2016-12-05 10:50:36 +11:00
Mukund Sivaraman 67b62f0062 Add doc function for cfg_type_querysource4 and cfg_type_querysource6 (#43768)
(cherry picked from commit 5c843b384d)
(cherry picked from commit 6ae22c4119)
(cherry picked from commit 150ff959d1)
2016-12-02 11:30:13 +05:30
Mark Andrews c7948d9050 4522. [bug] Handle big gaps in log file version numbers better.
[RT #38688]

(cherry picked from commit cab871f1bc)
2016-11-30 11:29:34 +11:00
Evan Hunt f47c8aa6f7 [v9_9] log as error if entropy unavailable
4521.	[cleanup]	Log it as an error if an entropy source is not
			found and there is no fallback available. [RT #43659]

(cherry picked from commit 6bdb70057d)
2016-11-29 11:38:42 -08:00
Mark Andrews ef3856d2b2 4520. [cleanup] Alphabetise more of the grammar when printing it
out. Fix unbalanced indenting. [RT #43755]

(cherry picked from commit 4352551d23)
2016-11-29 15:50:27 +11:00
Mark Andrews c04ad8ac8a 4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
(cherry picked from commit a611e44f9a)
2016-11-29 11:31:06 +11:00
Tinderbox User 794b9fbd1a update copyright notice / whitespace 2016-11-19 23:51:53 +00:00
Curtis Blackburn bc3145ccd8 4515. [port] FreeBSD: Find readline headers when they are in
edit/readline/ instead of readline/. [RT #43658]
2016-11-18 11:39:11 -08:00
Mukund Sivaraman fec9998849 Update CHANGES entry to match KB article
(cherry picked from commit ea3c3afadc)
(cherry picked from commit bc03086838)
2016-11-14 14:24:34 +09:00
Mark Andrews 47e68339d2 4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
[RT #43566]

(cherry picked from commit 472e99cfa6)
2016-11-10 09:59:14 +11:00
Mark Andrews 964e19cea8 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] 2016-11-09 09:59:32 +11:00
Evan Hunt 4ba653c366 [v9_9] make rrl system test more robust
4508.	[test]		Make the rrl system test more reliable on slower
			machines by using mdig instead of dig. [RT #43280]

(cherry picked from commiti 1ecdb4d59e)
2016-11-02 20:53:59 -07:00
Mark Andrews 51fe40fd59 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 10:46:37 +11:00
Francis Dupont d5d31e2b8d Name -> Named 2016-11-02 09:28:44 +01:00
Mark Andrews a4156963f0 4507. [bug] Name could incorrectly log 'allows updates by IP
address, which is insecure' [RT #43432]

(cherry picked from commit 2b2b85c897)
2016-11-02 18:22:04 +11:00
Mark Andrews 2a6337f7bf 4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
(cherry picked from commit a61f252391)
2016-11-02 17:41:59 +11:00
Evan Hunt ce1db2d9ce [v9_9] typo 2016-11-01 20:31:21 -07:00
Evan Hunt 60814deed8 [v9_9] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
(cherry picked from commit 398f8c32f3)
2016-11-01 20:22:35 -07:00
Mark Andrews 43af4ab515 4502. [func] Report multiple and experimental options when printing
grammar. [RT #43134]

(cherry picked from commit 89286906dc)
2016-11-02 13:37:23 +11:00
Tinderbox User f90ff76872 update copyright notice / whitespace 2016-11-01 23:51:11 +00:00
Mark Andrews ee77245897 4501. [bug] Fix 'dig -4 -6'/'dig -6 -4' error handling. [RT #43259] 2016-11-02 09:16:48 +11:00
Mark Andrews efb91beba1 4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
(cherry picked from commit e200da5044)
2016-11-02 08:46:52 +11:00
Evan Hunt f1c484217a [v9_9] use arc4random_stir() when available
4499.	[port]		MacOSX: silence deprecated function warning
			by using arc4random_stir() when available
			instead of arc4random_addrandom(). [RT #43503]

(cherry picked from commit 3fb62a5a4e)
2016-11-01 14:01:05 -07:00
Evan Hunt 1b8d070f9a [v9_9] simplify prereq checks by using feature-test.c
4498.	[test]		Simplify prerequisite checks in system tests.
			[RT #43516]

(cherry picked from commit 5480a74b70)
(cherry picked from commit 45fd95544c)
(cherry picked from commit 6e09e18400)
2016-11-01 13:10:07 -07:00
Evan Hunt 61a01f4860 [v9_9] 4496. [func] dig: add +idnout to control whether labels are
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]

(cherry picked from commit 42470b0b87)
(cherry picked from commit 6552f33198)
(cherry picked from commit 7aec46a5ef)
2016-10-31 23:01:38 -07:00