Commit Graph

5419 Commits

Author SHA1 Message Date
Tinderbox User
dc2a85bed7 update copyright notice / whitespace 2018-01-04 23:46:19 +00:00
Evan Hunt
5599d587e6 [v9_11] typo 2018-01-03 19:30:26 -08:00
Evan Hunt
7ff28f5bef [v9_11] block validator deadlock and prevent use-after-free
4859.	[bug]		A loop was possible when attempting to validate
			unsigned CNAME responses from secure zones;
			this caused a delay in returning SERVFAIL and
			also increased the chances of encountering
			CVE-2017-3145. [RT #46839]

4858.	[security]	Addresses could be referenced after being freed
			in resolver.c, causing an assertion failure.
			(CVE-2017-3145) [RT #46839]
2018-01-03 19:19:46 -08:00
Tinderbox User
350e5eecad regen v9_11 2017-12-16 01:27:21 +00:00
Tinderbox User
549ab75392 regen v9_11 2017-12-09 01:18:32 +00:00
Evan Hunt
77a2183961 [v9_11] document "fixedpoint" 2017-12-07 19:01:10 -08:00
Tinderbox User
266afc085a regen v9_11 2017-12-06 01:18:58 +00:00
Mark Andrews
6155978af5 add [RT #46774]
(cherry picked from commit 77f9623439)
2017-12-05 16:14:39 +11:00
Tinderbox User
bea02a4cc0 regen v9_11 2017-12-05 01:14:56 +00:00
Evan Hunt
b722ecd2f8 [v9_11] revised release note 2017-12-04 15:37:36 -08:00
Mark Andrews
15bc7f54ff add note for [RT #46743] and [RT #46754]
(cherry picked from commit 9ff34db455)
2017-12-05 09:53:37 +11:00
Tinderbox User
666b453b37 regen v9_11 2017-12-01 01:14:59 +00:00
Evan Hunt
f53e0bda46 [v9_11] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
2017-11-30 12:56:39 -08:00
Tinderbox User
17fdbf542a regen v9_11 2017-11-03 01:15:31 +00:00
Tinderbox User
9a769d8b16 update copyright notice / whitespace 2017-11-02 23:46:37 +00:00
Evan Hunt
8f98972067 [v9_11] clarify doc on zone refresh and expiry 2017-11-01 23:09:47 -07:00
Evan Hunt
17b7c60902 [v9_11] removed references to obsolete versions in documentation 2017-11-01 22:20:36 -07:00
Tinderbox User
d253648fe3 regen v9_11 2017-10-30 01:14:43 +00:00
Mark Andrews
7382f51602 Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:12:59 +11:00
Tinderbox User
c45e259c00 update copyright notice / whitespace 2017-10-26 23:46:46 +00:00
Evan Hunt
8e24455c8f [v9_11] some improvements in doc/dev [RT #46011]
- add info about rdatasets, etc, to dev.md (thanks to Tony Finch)
- convert rdata.html to markdown

(cherry picked from commit 63270d33f1)
2017-10-25 23:30:29 -07:00
Tinderbox User
811ccf37de regen v9_11 2017-10-26 01:17:56 +00:00
Tinderbox User
66ebd200f5 update copyright notice / whitespace 2017-10-25 23:50:03 +00:00
Evan Hunt
4ee7a74729 [v9_11] fix some documentation errors [RT #45527]
(cherry picked from commit 81570e84a2)
2017-10-25 11:05:13 -07:00
Evan Hunt
01967d1839 [v9_11] fixed libdns doc
4791.	[doc]		Fixed outdated documentation about export libraries.
			[RT #46341]

(cherry picked from commit 6a59e53a69)
2017-10-25 10:56:04 -07:00
Tinderbox User
2465dbb92d regen v9_11 2017-10-25 01:17:25 +00:00
Evan Hunt
415b410ae8 [v9_11] zone "file" option was undocumented
(cherry picked from commit b1042e011c)
2017-10-23 19:40:12 -07:00
Tinderbox User
58400e502e regen v9_11 2017-10-22 01:17:25 +00:00
Evan Hunt
b30ffd0a5b [v9_11] doc nit: Base64 is capitalized and not hyphenated
(cherry picked from commit 321b8429f5)
2017-10-21 13:29:45 -07:00
Tinderbox User
9efd8fc7e8 regen v9_11 2017-10-21 01:21:39 +00:00
Mark Andrews
317330c25a use correct tag 2017-10-20 19:05:52 +11:00
Tinderbox User
54517c79ed regen v9_11 2017-10-20 01:17:51 +00:00
Mark Andrews
a4ea78aa55 s/made/may/ 2017-10-20 10:29:15 +11:00
Mark Andrews
ff08ac42f7 note removal of <isc/util.h> from other header files
(cherry picked from commit 9e5439a6d8)
2017-10-20 10:27:08 +11:00
Tinderbox User
f14ce68ee5 regen v9_11 2017-10-19 01:16:52 +00:00
Evan Hunt
56e30ebae6 [v9_11] require writable managed keys directory
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]
2017-10-17 21:26:41 -07:00
Tinderbox User
3ca1a32241 regen v9_11 2017-10-18 01:19:23 +00:00
Evan Hunt
e609b6b32b [v9_11] README and relnote fixes
(cherry picked from commit 30419509dd)
2017-10-17 13:50:49 -07:00
Michał Kępień
ad9772c559 [v9_11] Doxygen fixes and cleanups
4773.	[doc]		Fixed generating Doxygen documentation for functions
			annotated using certain macros.  Miscellaneous
			Doxygen-related cleanups. [RT #46276]

(cherry picked from commit 2361003a88)
2017-10-17 06:58:05 +02:00
Tinderbox User
193749a4f5 regen v9_11 2017-10-09 01:14:44 +00:00
Evan Hunt
02af0069a1 [v9_11] add DOA to ARM 2017-10-07 19:34:39 -07:00
Tinderbox User
0d6a6642b2 regen v9_11 2017-10-08 01:16:06 +00:00
Evan Hunt
f592d2f76c [v9_11] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:43:18 -07:00
Mark Andrews
1c8aa38b53 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)
2017-10-06 13:53:50 +11:00
Evan Hunt
43d53a4e4b [v9_11] fix topology doc
4758.	[doc]		Remove documentation of unimplemented "topology".
			[RT #46161]
2017-10-05 18:52:11 -07:00
Tinderbox User
a0fb6a0980 regen v9_11 2017-10-06 01:15:42 +00:00
Evan Hunt
e9cb871d0b [v9_11] revise style guide information on bracing 2017-10-05 11:28:16 -07:00
Mark Andrews
2732d4922c 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]
2017-10-05 13:41:49 +11:00
Evan Hunt
73b52dd1f0 [v9_11] fix tag 2017-10-04 18:44:26 -07:00
Evan Hunt
1a35af8e47 [v9_11] remove spurious control character 2017-10-03 19:41:57 -07:00