Commit Graph
29278 Commits
Author SHA1 Message Date
Diego Fronza e2e6fd4fa0 Resolve TSAN data race in zone_maintenance
Fix race between zone_maintenance and dns_zone_notifyreceive functions,
zone_maintenance was attempting to read a zone flag calling
DNS_ZONE_FLAG(zone, flag) while dns_zone_notifyreceive was updating
a flag in the same zone calling DNS_ZONE_SETFLAG(zone, ...).

The code reading the flag in zone_maintenance was not protected by the
zone's lock, to avoid a race the zone's lock is now being acquired
before an attempt to read the zone flag is made.
2021-04-07 10:48:12 -03:00
Ondřej Surý 58808db133 Merge branch '2607-remove-custom-spnego-v9_11' into 'v9_11'
Remove custom ISC SPNEGO implementation (v9.11)

See merge request isc-projects/bind9!4857
2021-04-01 14:14:58 +00:00
Mark AndrewsandOndřej Surý 858b2aaf00 Add CHANGES and release note for GL #2607 2021-04-01 16:12:41 +02:00
Ondřej SurýandOndřej Surý 224ce9e0c0 Move the dummy shims to single ifndef GSSAPI block
Previously, every function had it's own #ifdef GSSAPI #else #endif block
that defined shim function in case GSSAPI was not being used.  Now the
dummy shim functions have be split out into a single #else #endif block
at the end of the file.

This makes the gssapictx.c similar to 9.17.x code, making the backports
and reviews easier.
2021-04-01 10:39:48 +02:00
Mark AndrewsandOndřej Surý 57de8df75b Add Heimdal compatibility support
The Heimdal Kerberos library handles the OID sets in a different manner.
Unify the handling of the OID sets between MIT and Heimdal
implementations by dynamically creating the OID sets instead of using
static predefined set.  This is how upstream recommends to handle the
OID sets.
2021-04-01 10:39:48 +02:00
Mark AndrewsandOndřej Surý 383297f80b Request krb5 CFLAGS and LIBS from $KRB5_CONFIG
The GSSAPI now needs both gssapi and krb5 libraries, so we need to
request both CFLAGS and LIBS from the configure script.
2021-04-01 10:39:48 +02:00
Mark AndrewsandOndřej Surý 7f08c756aa Remove custom ISC SPNEGO implementation
The custom ISC SPNEGO mechanism implementation is no longer needed on
the basis that all major Kerberos 5/GSSAPI (mit-krb5, heimdal and
Windows) implementations support SPNEGO mechanism since 2006.

This commit removes the custom ISC SPNEGO implementation, and removes
the option from both autoconf and win32 Configure script.  Unknown
options are being ignored, so this doesn't require any special handling.
2021-04-01 10:39:48 +02:00
Mark AndrewsandOndřej Surý 0e9cd93c06 Handle expected signals in tsiggss authsock.pl script
When the authsock.pl script would be terminated with a signal,
it would leave the pidfile around.  This commit adds a signal
handler that cleanups the pidfile on signals that are expected.
2021-04-01 10:19:33 +02:00
Michal Nowak 4034b703fd Merge branch 'mnowak/web-run-gcc-tarball-ci-job-v9_11' into 'v9_11'
[v9_11] Run gcc:tarball CI job in web-triggered pipelines

See merge request isc-projects/bind9!4853
2021-03-31 15:04:22 +00:00
Michal Nowak de35d321f0 Run gcc:tarball CI job in web-triggered pipelines
The gcc:tarball CI job may identify problems with tarballs created by
"make dist" of the tarball-create CI job. Enabling the gcc:tarball CI
job in web-triggered pipelines provides developers with a test vector.

(cherry picked from commit 4d5d3b75da)
2021-03-31 16:55:34 +02:00
Michal Nowak 697e0c1178 Merge branch 'v9_11_29-release' into 'v9_11'
Merge 9.11.29 release branch

See merge request isc-projects/bind9!4822
2021-03-19 09:38:22 +00:00
Michal Nowak 136fc17bd3 Set up release notes for BIND 9.11.30 2021-03-18 18:27:34 +01:00
Michal Nowak 9dbd9c7abd Bump BIND_BASELINE_VERSION for ABI checks 2021-03-18 18:08:28 +01:00
Tinderbox User a35739f6ad Merge branch 'prep-release' into v9_11_29-release v9.11.29 2021-03-09 12:49:28 +00:00
Tinderbox User c06787e095 prep 9.11.29 2021-03-09 12:49:04 +00:00
Michal Nowak 8253f9829f Merge branch 'mnowak/prepare-documentation-for-bind-9.11.29' into 'v9_11_29-release'
Prepare documentation for BIND 9.11.29

See merge request isc-private/bind9!268
2021-03-09 09:18:13 +00:00
Michal Nowak ac1c862bb9 Prepare release notes for BIND 9.11.29 2021-03-08 18:28:02 +01:00
Michal Nowak 94e4c071c0 Tweak and reword release notes 2021-03-08 18:27:45 +01:00
Michal Nowak b44eca143b Tweak and reword recent CHANGES entries 2021-03-08 12:52:02 +01:00
Ondřej Surý ff463f375f Merge branch '2238-fix-back-port-issues-missing-checks' into 'v9_11'
Resolve "Fix back port issues:  missing checks."

See merge request isc-projects/bind9!4637
2021-02-25 08:16:15 +00:00
Mark Andrews dc88bd641d Address unchecked returns leading to NULL pointer dereferences
on out of memory conditions.
2021-02-25 11:44:28 +11:00
Michal Nowak cfcd42f6a2 Merge branch '2446-query-c-5430-16-runtime-error-v9_11' into 'v9_11'
[v9_11] Initialize checknames field in dns_view_create()

See merge request isc-projects/bind9!4736
2021-02-23 16:48:54 +00:00
Michal Nowak b9ef330fbe Initialize checknames field in dns_view_create()
The 'checknames' field wasn't initialized in dns_view_create(), but it
should otherwise AddressSanitizer identifies the following runtime error
in query_test.c.

    runtime error: load of value 190, which is not a valid value for type '_Bool'

(cherry picked from commit 0c6fa16477)
2021-02-23 16:48:10 +01:00
Michal Nowak aa4d0ab62d Merge branch 'mnowak/alpine-3.13-v9_11' into 'v9_11'
[v9_11] Add Alpine Linux 3.13

See merge request isc-projects/bind9!4733
2021-02-23 15:05:17 +00:00
Michal Nowak 85f7448c37 Add Alpine Linux 3.13
(cherry picked from commit 909c85f7a9)
2021-02-23 15:48:52 +01:00
Michal Nowak d16cba2698 Merge branch 'mnowak/pairwise-pict-keep-stderr-v9_11' into 'v9_11'
[v9_11] Do not remove stderr from pict output

See merge request isc-projects/bind9!4731
2021-02-23 14:32:35 +00:00
Michal Nowak eb576888da Do not remove stderr from pict output
Removing stderr from the pict tool serves no purpose and drops valuable
information, we might use when debugging failed pairwise CI job, such
as:

    Input Error: A parameter names must be unique

(cherry picked from commit 079debaa10)
2021-02-23 15:27:59 +01:00
Mark Andrews e42577800b Merge branch '2499-a-loc-record-with-a-invalid-direction-field-triggers-an-insist-v9_11' into 'v9_11'
Resolve "A LOC record with a invalid direction field triggers an INSIST"

See merge request isc-projects/bind9!4712
2021-02-19 01:07:26 +00:00
Mark Andrews 894f25082e Add release note for [GL #2499]
(cherry picked from commit 3d340ecfd2)
2021-02-19 11:44:08 +11:00
Mark Andrews 5e2b287f63 Add CHANGES for [GL #2499]
(cherry picked from commit 6f47e0956c)
2021-02-19 11:41:02 +11:00
Mark Andrews 0ee76590d6 Correctly detect when get_direction failed
(cherry picked from commit 009358d77d)
2021-02-19 11:40:05 +11:00
Mark Andrews 4af7a5f1b1 Test a LOC record with an invalid direction field
(cherry picked from commit 07902d9f9d)
2021-02-19 11:40:04 +11:00
Michal Nowak 4e8f6962f0 Merge branch 'mnowak/make-kyua-report-html-less-verbose-v9_11' into 'v9_11'
[v9_11] Make "kyua report-html" less verbose on stdout

See merge request isc-projects/bind9!4708
2021-02-18 14:58:05 +00:00
Michal Nowak b3cc0b6128 Make "kyua report-html" less verbose on stdout
"kyua report-html" command in CI generates more than two pages of output
to stdout, which is nothing but which HTML pages Kyua generated, e.g.:

  Generating kyua_html/context.html
  Generating kyua_html/lib_dns_tests_acl_test_main.html
  ...
  Generating kyua_html/lib_ns_tests_query_test_main.html
  Generating kyua_html/report.css
  Generating kyua_html/index.html

This is seldomly useful and requires the user to scroll three pages
upwards to get to unit test results.

(cherry picked from commit 74fa196286)
2021-02-18 15:49:37 +01:00
Michal Nowak 5a179636b2 Merge branch 'mnowak/system-test-check-for-file-not-removed-v9_11' into 'v9_11'
[v9_11] Check for "file not removed" in system test output

See merge request isc-projects/bind9!4705
2021-02-18 10:14:08 +00:00
Michal Nowak 936f7a2da9 Prevent Git to expand $systest
CentOS 8 "git status" unexpectedly expands search directory "tsig" to
also search in the "tsiggss" directory, thus incorrectly identifying
files as "not removed" in the "tsig" directory:

$ git status -su --ignored tsig
$ touch tsiggss/ns1/{named.run,named.memstats}
$ git status -su --ignored tsig
!! tsiggss/ns1/named.memstats
!! tsiggss/ns1/named.run

(cherry picked from commit f310b75250)
2021-02-18 10:16:30 +01:00
Michal Nowak c6fcb29a27 Clean omitted files from system tests
Any CI job:
- I:dns64:file ns1/Ksigned.+005+*.key not removed
- I:dns64:file ns1/Ksigned.ns1/Ksigned.+005+*.private
- I:dns64:file ns1/Ksigned.ns1/Ksigned.+005+*.key
- I:dns64:file ns1/Ksigned.ns1/Ksigned.+005+*.private
- I:dns64:file ns1/Ksigned.ns1/dsset-signed.
- I:dns64:file ns1/Ksigned.ns1/named.conf
- I:dns64:file ns1/Ksigned.ns1/signed.db
- I:dns64:file ns1/Ksigned.ns1/signed.db.signed
- I:dns64:file ns1/Ksigned.ns2/named.conf
- I:ixfr:file ns5/named.run.prev not removed
- I:legacy:file ns1/named_dump.db.test20 not removed

(cherry picked from commit 14a104d121)
2021-02-18 10:05:18 +01:00
Michal Nowak 588084a930 Check for "file not removed" in system test output
Run this check only when in Git repository, because run.sh produces the
"file not removed" warnings only when in Git repository.

(cherry picked from commit 4a2778abdf)
2021-02-18 09:44:31 +01:00
Michal Nowak eb26769b45 Add system test name to "file not removed" info
(cherry picked from commit 10bf725ee2)
2021-02-18 09:42:12 +01:00
Michał Kępień 146f62140c Merge branch 'michal/add-doc-arm-notes-9.11.29.xml-to-util-copyrights' into 'v9_11'
Add doc/arm/notes-9.11.29.xml to util/copyrights

See merge request isc-projects/bind9!4702
2021-02-17 22:05:23 +00:00
Michał Kępień 4d96e4cee0 Add doc/arm/notes-9.11.29.xml to util/copyrights
Commit 81446d61c3 did not update
util/copyrights as it should have.  Add the missing line to prevent the
"misc" GitLab CI job from failing.
2021-02-17 23:01:29 +01:00
Michał Kępień ae703e371b Merge branch 'v9_11_28-release' into 'v9_11'
Merge 9.11.28 release branch

See merge request isc-projects/bind9!4701
2021-02-17 21:55:48 +00:00
Michał Kępień 81446d61c3 Set up release notes for BIND 9.11.29 2021-02-17 22:51:34 +01:00
Michał Kępień fdd5b1df80 Bump BIND_BASELINE_VERSION for ABI checks 2021-02-17 22:51:34 +01:00
Tinderbox UserandMichał Kępień d90c8a098f Merge branch 'prep-release' into security-v9_11 2021-02-17 22:46:14 +01:00
Michał Kępień 6f24003573 Merge branch 'michal/prepare-documentation-for-bind-9.11.28' into 'security-v9_11'
Prepare release notes for BIND 9.11.28

See merge request isc-private/bind9!241
2021-02-17 22:46:14 +01:00
Tinderbox UserandMichał Kępień 43ef3488bf prep 9.11.28 2021-02-17 22:46:14 +01:00
Michał Kępień dc5f0e77ec Merge branch '2354-security-off-by-one-error-in-spnego-v9_11' into 'security-v9_11'
[v9_11] [CVE-2020-8625] Fix off-by-one bug in ISC SPNEGO implementation

See merge request isc-private/bind9!238
2021-02-17 22:46:14 +01:00
Michał Kępień ae6fc963b6 Prepare release notes for BIND 9.11.28 2021-02-17 22:46:14 +01:00
Ondřej SurýandMichał Kępień e145c40c93 Add CHANGES and release note for GL #2354 2021-02-17 22:46:14 +01:00