Mark Andrews
f240f4a5de
Reimplement:
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
2017-03-01 12:01:16 +11:00
Tinderbox User
ed5bf0e581
update copyright notice / whitespace
2017-02-28 23:45:28 +00:00
Tinderbox User
0aa6c1b1ff
newcopyrights
2017-02-28 23:30:04 +00:00
Mark Andrews
02fa49a4d8
fix nsupdate reference
2017-03-01 08:33:09 +11:00
Tinderbox User
a06081491c
regen master
2017-02-24 01:04:54 +00:00
Evan Hunt
a1365a0042
[master] remove unnecessary INSIST
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
2017-02-23 14:34:33 -08:00
Tinderbox User
e04dff4bfd
update copyright notice / whitespace
2017-02-21 23:45:37 +00:00
Tinderbox User
4aa492de85
newcopyrights
2017-02-21 23:30:06 +00:00
Evan Hunt
18d49392fb
[master] use isc_uint32_t instead of uint32_t
2017-02-21 10:45:02 -08:00
Witold Krecicki
0790f8a361
4577. [func] Make qtype of resolver fuzzing packet configurable via command line. [RT #43540 ]
2017-02-21 03:49:55 -08:00
Tinderbox User
c4dbad7b36
regen master
2017-02-21 01:04:58 +00:00
Tinderbox User
e66aaccfd8
update copyright notice / whitespace
2017-02-20 23:45:32 +00:00
Tinderbox User
cc94177d80
newcopyrights
2017-02-20 23:30:05 +00:00
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Mark Andrews
87ff6241e4
dns_master_styleflags returns dns_masterstyle_flags_t
2017-02-20 17:39:20 +11:00
Tinderbox User
a32fa1246e
regen master
2017-02-16 01:05:00 +00:00
Tinderbox User
42039110be
newcopyrights
2017-02-15 04:43:32 +00:00
Mark Andrews
bd75947af7
reserve block for 9.12
2017-02-15 14:29:33 +11:00
Mark Andrews
009c98a1be
add CVE-2017-3136 note
...
(cherry picked from commit d77eadc261
2017-02-15 12:45:38 +11:00
Mark Andrews
06eb85992e
update description
2017-02-15 12:38:08 +11:00
Mark Andrews
3bce12e4b6
4575. [security] Dns64 with break-dnssec yes; can result in a
...
assertion failure. (CVE-2017-3136) [RT #44653 ]
2017-02-15 12:18:51 +11:00
Mark Andrews
af2b20ee3f
4574. [bug] Dig leaked memory with multiple +subnet options.
...
[RT #44683 ]
2017-02-14 15:52:40 +11:00
Evan Hunt
1df7a6fed6
[master] call flow description was incomplete
2017-02-09 13:52:45 -08:00
Evan Hunt
d16500cece
[master] restore some code from change 4556
2017-02-08 17:33:13 -08:00
Tinderbox User
a95dc83de5
regen master
2017-02-09 01:04:58 +00:00
Tinderbox User
f929677ed8
update copyright notice / whitespace
2017-02-08 23:45:32 +00:00
Tinderbox User
8262a144ec
newcopyrights
2017-02-08 23:30:05 +00:00
wpk
96912e44b0
4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability
2017-02-08 22:15:01 +01:00
Evan Hunt
7fcd72f574
[master] mismatched tag
2017-02-07 18:28:40 -08:00
Mark Andrews
dc9ed164e6
update
2017-02-08 13:11:42 +11:00
Evan Hunt
ef0ddc8ba3
[master] doc style
2017-02-07 08:18:15 -08:00
Evan Hunt
d8339932af
[master] fix memory leak from dnstap-output parsing
2017-02-06 22:13:51 -08:00
Mark Andrews
63f8c891d8
add dns_dt_setupfile
2017-02-07 13:21:20 +11:00
Mark Andrews
009aabd2e5
fix tag mismatch
2017-02-07 12:11:45 +11:00
Evan Hunt
c4e4bd6a09
[master] dnstap size and versions options
...
4572. [func] The "dnstap-output" option can now take "size" and
"versions" parameters to indicate the maximum size
a dnstap log file can grow before rolling to a new
file, and how many old files to retain. [RT #44502 ]
2017-02-06 16:34:58 -08:00
Evan Hunt
5b4d6d2ff8
[master] removed extra note about bind.keys update
2017-02-06 14:19:53 -08:00
Evan Hunt
56cccde22b
[master] fix build errors from inline macros (change 4565)
2017-02-06 10:41:45 -08:00
Tinderbox User
88ee987de6
update copyright notice / whitespace
2017-02-06 02:58:07 +00:00
Mark Andrews
3793e93fd9
remove redirect.db
2017-02-06 13:56:56 +11:00
Mark Andrews
3e48466e0a
4571. [bug] Out-of-tree builds of backtrace_test failed.
2017-02-06 13:46:00 +11:00
Tinderbox User
513cec7786
regen master
2017-02-05 01:04:55 +00:00
Tinderbox User
61f11922d3
update copyright notice / whitespace
2017-02-04 23:45:35 +00:00
Tinderbox User
85f41d0b00
newcopyrights
2017-02-04 23:30:05 +00:00
Evan Hunt
0f91e968c7
[master] fall back to builtin keys if bind.keys is empty
...
4570. [cleanup] named did not correctly fall back to the built-in
initializing keys if the bind.keys file was present
but empty. [RT #44531 ]
2017-02-04 00:37:37 -08:00
Evan Hunt
44e087b646
[master] revised comment
2017-02-04 00:24:06 -08:00
Evan Hunt
650b5e7592
[master] store local and remote addresses in dnstap
...
4569. [func] Store both local and remote addresses in dnstap
logging, and modify dnstap-read output format to
print them. [RT #43595 ]
2017-02-03 17:05:58 -08:00
Evan Hunt
adcdff94d9
[master] add "configure --with-bind" option to dnsperf
...
4568. [contrib] Added a --with-bind option to the dnsperf configure
script to specify BIND prefix path.
2017-02-03 16:28:45 -08:00
Tinderbox User
39f68aa480
update copyright notice / whitespace
2017-02-03 23:45:33 +00:00
Tinderbox User
90f82c95ac
newcopyrights
2017-02-03 23:30:04 +00:00
Tinderbox User
2cd2e915c3
regen
2017-02-03 23:30:02 +00:00
Mark Andrews
Tinderbox User
Evan Hunt
Witold Krecicki