ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,811 Commits 589 Branches 805 Tags
e78e55f435e2ee901e609750595f94225cb3e369
Commit Graph

26811 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan Hunt
e78e55f435 caclulate nlabels and set *chainingp correctly 2018-07-24 10:21:52 -07:00
Tinderbox User
957ea4ad58 Merge branch 'prep-release' into security-v9_12_2_patch 2018-07-13 21:27:25 +00:00
Tinderbox User
61bb71e272 prep 9.12.2-P1 2018-07-13 21:27:05 +00:00
Evan Hunt
283cecb0c2 Merge branch '387-security-dname' into 'v9_12_2_patch' 2018-07-13 13:38:00 -07:00
Evan Hunt
ecb90158b6 CHANGES, release note 
(cherry picked from commit 9c492aba65c178f30baafeb5502013f95a9d5b9a)
 2018-07-13 13:21:14 -07:00
Evan Hunt
584a1cff8b test case 
(cherry picked from commit 73486c13f743407a50d5bbadde90c949a696506f)
 2018-07-13 13:16:07 -07:00
Evan Hunt
6e187b8656 explicit DNAME query could trigger a crash if deny-answer-aliases was set 
(cherry picked from commit a21c3810d3453548cc05ae19995125dabea9ca9c)
 2018-07-13 13:15:35 -07:00
Evan Hunt
3631aeb070 Merge branch 'prep-release-v9_12_2' into 'v9_12' 
prep 9.12.2

See merge request isc-projects/bind9!472
v9.12.2 		2018-07-03 03:08:14 -04:00
Tinderbox User
355c8f0e55 prep 9.12.2 2018-07-03 06:57:10 +00:00
Evan Hunt
3a84d617bf Merge branch 'fix-readme-v9_12' into 'v9_12' 
Fix README

See merge request isc-projects/bind9!465
 2018-07-02 20:23:13 -04:00
Evan Hunt
ec9e85260f fix version ordering 2018-07-02 17:19:05 -07:00
Evan Hunt
56cf466766 Merge branch 'prep-release-v9_12_2rc2' into 'v9_12' 
prep 9.12.2rc2

See merge request isc-projects/bind9!450
v9.12.2rc2 		2018-06-28 00:55:59 -04:00
Tinderbox User
bbf35634c0 prep 9.12.2rc2 2018-06-28 04:42:37 +00:00
Evan Hunt
17b51354f1 Merge branch '339-issues-with-large-journal-entries-v9_12' into 'v9_12' 
Fix handling of large journal entries.

See merge request isc-projects/bind9!444
 2018-06-27 21:33:46 -04:00
Evan Hunt
ded4119b36 CHANGES, release note 
(cherry picked from commit 2aee33f412)
 2018-06-27 18:26:53 -07:00
Witold Kręcicki
cbb73df1f9 Fallback to normal procedure if creating of ixfr-from-differences fails 
(cherry picked from commit b1254430df)
 2018-06-27 18:25:14 -07:00
Witold Kręcicki
1a5cba631e Fix some issues with large journal entries 
(cherry picked from commit 0db7130f2b)
 2018-06-27 18:25:13 -07:00
Mark Andrews
cebcdadad1 Merge branch '366-missing-dereference-in-require-statement-v9_12' into 'v9_12' 
Resolve "Missing dereference in REQUIRE statement?"

See merge request isc-projects/bind9!440
 2018-06-27 03:43:57 -04:00
Mark Andrews
df6951a2bb cfg_parse_boolean's REQUIRE test for ret was incomplete. 
(cherry picked from commit f1ee5e4a16)
 2018-06-27 17:37:00 +10:00
Evan Hunt
89f7c7230d Merge branch '275-add-permanent-option-to-disable-server-side-cookies-v9_12' into 'v9_12' 
[v9_12]: Resolve "Provide a mechanism (build or runtime) to turn off server-side support for RFC7873"

See merge request isc-projects/bind9!415
 2018-06-26 18:23:39 -04:00
Ondřej Surý
a7c5fad628 Un-deprecate the answer-cookie option 2018-06-26 15:16:40 -07:00
Evan Hunt
41e2423d37 Merge branch '260-queries-with-empty-question-section-return-noerror-v9_12' into 'v9_12' 
Resolve "Queries with empty question section (and otherwise query message of undetermined RDCLASS) return NOERROR instead of FORMERR"

See merge request isc-projects/bind9!435
 2018-06-26 17:43:09 -04:00
Evan Hunt
07a0638c94 CHANGES 
(cherry picked from commit 2b075c2881)
 2018-06-26 14:36:36 -07:00
Mukund Sivaraman
ed29b84e16 return FORMERR when question section is empty if COOKIE is not present 
(cherry picked from commit 06d3106002)
 2018-06-26 14:36:34 -07:00
Ondřej Surý
fbd85297eb Merge branch 'add-git-replay-merge-v9_12' into 'v9_12' 
Add git replay merge to v9_12

See merge request isc-projects/bind9!429
 2018-06-26 15:19:37 -04:00
Ondřej Surý
65144c4bf7 Add git-replay-merge.sh script to v9_12 2018-06-26 20:29:07 +02:00
Witold Krecicki
0d2172eeba Merge branch '180-fix-cmsgbuf-usage-v9_12' into 'v9_12' 
Resolve "Intermittent recursive resolver issues [socket.c:2135]"

See merge request isc-projects/bind9!427
 2018-06-26 14:25:39 -04:00
Witold Kręcicki
4007a9d020 Use completely static-sized buffers 
(cherry picked from commit 49f90025a0)
 2018-06-26 20:18:59 +02:00
Witold Kręcicki
da63e95612 Fix socket cmsg buffer usage 
(cherry picked from commit d79be7dd5e)
 2018-06-26 20:12:58 +02:00
Evan Hunt
9e85d16004 Merge branch '288-named-checkconf-does-not-recognize-errors-related-to-in-view-zones-v9_12' into 'v9_12' 
Resolve "named-checkconf does not recognize errors related to in-view zones"

See merge request isc-projects/bind9!423
 2018-06-26 12:53:55 -04:00
Mark Andrews
7f31e67c16 CHANGES, copyright 
(cherry picked from commit f7d346357e)
 2018-06-26 09:04:48 -07:00
Mark Andrews
665f9093d2 construct a symtab of valid in-view targets then check that the target exists 
(cherry picked from commit e01a4bcb20)
 2018-06-26 09:03:47 -07:00
Michał Kępień
7d993ffb0b Merge branch '321-only-request-permitted-capabilities-in-non-libcap-builds-v9_12' into 'v9_12' 
[v9_12] Only request permitted capabilities in non-libcap builds

See merge request isc-projects/bind9!417
 2018-06-26 08:03:26 -04:00
Michał Kępień
731b003854 Add CHANGES entry 
4979.	[bug]		Non-libcap builds were not checking whether all
			requested capabilities are present in the permitted
			capability set. [GL #321]
 2018-06-26 13:18:00 +02:00
Michał Kępień
8c66f32e53 Only request permitted capabilities in non-libcap builds 
While libcap-enabled builds check whether any capability named requests
is within the permitted capability set, non-libcap builds just try
requesting them, which potentially causes a misleading error message to
be output ("Operation not permitted: please ensure that the capset
kernel module is loaded").  Ensure non-libcap builds also check whether
any requested capability is within the permitted capability set.
 2018-06-26 13:18:00 +02:00
Michał Kępień
b7200143f4 Merge branch '312-fix-rpz-system-test-v9_12' into 'v9_12' 
[v9_12] Fix rpz system test

See merge request isc-projects/bind9!416
 2018-06-26 06:52:06 -04:00
Michał Kępień
80e8f4c366 Add CHANGES entry 
4978.	[test]		Fix error handling and resolver configuration in the
			"rpz" system test. [GL #312]

(cherry picked from commit 51522a2b84)
 2018-06-26 12:43:47 +02:00
Michał Kępień
6a2c606690 Do not use IANA DNSSEC keys in the "rpz" system test 
With "dnssec-validation" now defaulting to "auto", it needs to be
explicitly set to "yes" (the previous default value) for all validating
resolvers used in system tests.  Ensure that requirement is satisfied by
the resolvers used in the "rpz" system test.

(cherry picked from commit ff6b717955)
 2018-06-26 12:43:47 +02:00
Michał Kępień
cee0c23d0a Determine "rpz" system test mode based on $mode rather than $DNSRPS_TEST_MODE 
Change 4897 modified the way the $DNSRPS_TEST_MODE variable is used in
bin/tests/system/rpz/tests.sh without updating all references to it,
which i.a. causes the $native and $dnsrps variables to not be set in the
default testing mode, effectively preventing failed checks from being
propagated to the final result of the test.  Use $mode instead of
$DNSRPS_TEST_MODE where appropriate to fix error handling in the "rpz"
system test.

(cherry picked from commit 730c6651a0)
 2018-06-26 12:43:47 +02:00
Evan Hunt
90e762a1cf Merge branch '247-log-the-remaining-v-info-at-startup' into 'v9_12' 
Resolve "Log the remaining -V info at startup"

Closes #247

See merge request isc-projects/bind9!249
 2018-06-25 15:02:33 -07:00
Mark Andrews
74bfd11a5f log the remaining -V info at startup 
(cherry picked from commit 33ff03db58)
 2018-06-25 15:02:31 -07:00
Mark Andrews
9eb2ff6367 Merge branch '254-invalid-rpz-prefix-length-log-message-improperly-displays-the-prefix-labels-not-length-v9_12' into 'v9_12' 
Resolve ""invalid RPZ prefix length" log message improperly displays the prefix labels, not length"

See merge request isc-projects/bind9!408
 2018-06-25 03:39:54 -04:00
Mukund Sivaraman
a769e80796 Add CHANGES entry 
(cherry picked from commit 90e886cfc0)
 2018-06-25 17:33:15 +10:00
Mukund Sivaraman
19bad5a7f3 Add system test 
(cherry picked from commit 2bf388a31b)
 2018-06-25 17:33:15 +10:00
Mukund Sivaraman
82d5a44dfd Patch in trailing nul character to print just the length label (for various cases below) 
(cherry picked from commit 6a756ab654)
 2018-06-25 17:33:15 +10:00
Mark Andrews
e9f7ef733d Merge branch '343-casecompare-of-ninfo-tkey-txt-have-wrong-return-type-v9_12' into 'v9_12' 
Resolve "casecompare of NINFO, TKEY, TXT have wrong return type"

See merge request isc-projects/bind9!404
 2018-06-24 23:19:40 -04:00
Mark Andrews
537e3a0a14 fix casecompare return type for ninfo, tkey, txt 
(cherry picked from commit 3ba1d1e43b)
 2018-06-25 13:08:47 +10:00
Mark Andrews
393b974ed3 Merge branch '356-client-cookie-is-being-hashed-twice-when-computing-the-dns-server-cookie-v9_12' into 'v9_12' 
Resolve "Client cookie is being hashed twice when computing the DNS server cookie."

See merge request isc-projects/bind9!401
 2018-06-22 03:51:53 -04:00
Mark Andrews
cd1169b605 4975. [bug] The server cookie computation for sha1 and sha256 did 
not match the method described in RFC 7873. [GL #356]

(cherry picked from commit 8755a249bc)
 2018-06-22 17:45:02 +10:00
Mark Andrews
77496f0b88 the client cookie was being hashed twice when computing the server cookie for sha1 and sha256 
(cherry picked from commit 4795f0ca89)
 2018-06-22 17:45:02 +10:00