Commit Graph

2911 Commits

Author SHA1 Message Date
Mark Andrews
5abe80ef13 4556. [security] Combining dns64 and rpz can result in dereferencing
a NULL pointer (read).  (CVE-2017-3135) [RT#44434]
2017-01-24 09:53:21 +11:00
Tinderbox User
7c9d578215 update copyright notice / whitespace 2017-01-19 23:46:35 +00:00
Mark Andrews
2fa1676380 use TCP macro 2017-01-18 09:54:46 +11:00
Tinderbox User
ff7d77ce73 update copyright notice / whitespace 2017-01-12 23:46:57 +00:00
Evan Hunt
809c79f42a [v9_10] more specific date for DLV shutdown warning 2017-01-12 09:11:51 -08:00
Tinderbox User
ad4e4b05f2 update copyright notice / whitespace 2016-12-28 23:52:29 +00:00
Mark Andrews
b92f7c2245 4541. [bug] rndc addzone should properly reject non master/slave
zones. [RT #43665]

(cherry picked from commit e20db12918)
2016-12-28 10:59:23 +11:00
Mark Andrews
a1f98389a3 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:29:32 +11:00
Mark Andrews
31da2eba56 4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
when reusing the event structure. [RT #43885]

(cherry picked from commit a678e70481)
2016-12-14 10:43:41 +11:00
Mark Andrews
83139f2a21 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:37:47 +11:00
Tinderbox User
37a5b3cfee regen v9_10 2016-12-08 01:14:21 +00:00
Tinderbox User
917aac759b update copyright notice / whitespace 2016-12-07 23:48:27 +00:00
Tinderbox User
43e5a815ba regen v9_10 2016-12-07 01:13:35 +00:00
Mark Andrews
e49bb92384 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
(cherry picked from commit 1b8ce3b330)
2016-12-07 10:56:40 +11:00
Mark Andrews
88ec925cfc added -T keepstderr to keep stderr open when daemonizing [RT #43736]
(cherry picked from commit c9ee977f31)
2016-12-05 10:38:59 +11:00
Evan Hunt
c549716739 [v9_10] log as error if entropy unavailable
4521.	[cleanup]	Log it as an error if an entropy source is not
			found and there is no fallback available. [RT #43659]

(cherry picked from commit 6bdb70057d)
2016-11-29 11:30:52 -08:00
Mark Andrews
a873ad10bd copyrights/whitespace 2016-11-03 12:47:03 +11:00
Tinderbox User
91cdb031b8 regen v9_10 2016-11-03 01:16:35 +00:00
Mark Andrews
1bbcfe2fc8 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 10:01:52 +11:00
Evan Hunt
398f8c32f3 [v9_10] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:35:44 -07:00
Mark Andrews
decd3bb79c copyright/whitespace 2016-11-02 10:43:07 +11:00
Evan Hunt
a2575e2796 [v9_10] system tests on windows
4487. [test] Make system tests work on Windows. [RT #42931]
2016-11-01 09:50:09 -07:00
Mark Andrews
b2c1d6f0a2 check for LIBRESSL_VERSION_NUMBER 2016-11-01 12:48:53 +11:00
Mark Andrews
4bee9dcc78 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
(cherry picked from commit 1fce0951ed)
2016-10-31 10:08:08 +11:00
Tinderbox User
93aa2380a0 update copyright notice / whitespace 2016-10-26 23:48:26 +00:00
Mark Andrews
159b383289 s/,/;/
(cherry picked from commit 856c77cc40)
2016-10-26 22:39:02 +11:00
Tinderbox User
ba52405256 regen v9_10 2016-10-16 01:14:48 +00:00
Mark Andrews
09851d5fde add managed keys to view section
(cherry picked from commit 7551ec1ebe)
2016-10-16 08:15:54 +11:00
Mark Andrews
e54d81ed00 4472. [bug] Named could fail to find the correct NSEC3 records when
a zone was update between looking for the answer and
                        looking for the NSEC3 records proving non-existance
                        of the answer. [RT #43247]
2016-10-05 10:39:13 +11:00
Evan Hunt
b9dc79840e [v9_10] revert accidental query logging format change
4471.   [cleanup]       Revert a query logging change inadvertently
                        backported from 9.11. [RT #43238]

(cherry picked from commit 00d496d9e20b2c8c1d4a5ce752a1f8efb3009ca0)
2016-09-21 11:22:27 -07:00
Mark Andrews
69f9ca5830 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]
2016-09-07 14:43:14 +10:00
Tinderbox User
f9b7b2b195 update copyright notice / whitespace 2016-08-29 23:46:23 +00:00
Evan Hunt
a3cee5460d Plug a geoip leak and some cleanup [RT #43106]
(cherry picked from commit a26a62cef2)
(cherry picked from commit af326c2e3f)
2016-08-30 00:38:39 +05:30
Mark Andrews
d847be96c1 4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
[RT #42587]

(cherry picked from commit 63fe88e8d8)
2016-08-26 15:49:58 +10:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Tinderbox User
2693dc0d72 regen v9_10 2016-08-12 01:12:03 +00:00
Mark Andrews
fdcca0a23e 4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
will not fit into a single IPv4 encapsulated IPv6
                        UDP packet when transmitted over a Ethernet link.
                        [RT #42871]

(cherry picked from commit 31ffec1541)
2016-08-12 09:44:02 +10:00
Mark Andrews
db46366e36 4434. [protocol] Return EDNS EXPIRE option for master zones in addition
to slave zones. [RT #43008]

(cherry picked from commit bf2238b064)
2016-08-12 09:33:30 +10:00
Evan Hunt
17de0f290c [v9_10] error on bad parameter to 'rndc dumpdb'
4433.	[cleanup]	Report an error when passing an invalid option or
			view name to "rndc dumpdb". [RT #42958]

(cherry picked from commit c38d989fdd)
2016-08-11 16:12:00 -07:00
Francis Dupont
7a4d54f6c6 Merged rt42840_10 (tcp-only backport) 2016-08-11 14:28:22 +02:00
Tinderbox User
afc53628ef update copyright notice / whitespace 2016-08-09 00:26:15 +00:00
Mark Andrews
a191925df6 4430. [bug] Lwresd died if a search list was not defined.
Found by 0x710DDDD At Alibaba Security. [RT #42895]

(cherry picked from commit 3146be6fd6)
2016-08-08 10:30:16 +10:00
Tinderbox User
7a90fc75f5 update copyright notice / whitespace 2016-07-22 23:48:53 +00:00
Mark Andrews
aa1a7e1e58 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:16:59 +10:00
Mark Andrews
55827dd5ca Visual Studio 2005 doesn't like named elements, construct addr using isc_netaddr_fromin6 2016-07-14 11:32:22 +10:00
Mark Andrews
fcf740d53d Windows doesn't like LLU use ULL instead
(cherry picked from commit 6b5d6472cdbdb57ee7d8247d85f07c42fb347663)
2016-07-14 11:14:03 +10:00
Tinderbox User
2b0cab5589 update copyright notice / whitespace 2016-07-13 23:47:02 +00:00
Mukund Sivaraman
48ed0dec09 Make fixes for GCC 6 (#42721)
(cherry picked from commit 4116177ac4)
(cherry picked from commit 2d5581de6e)
2016-07-13 14:00:27 +05:30
Tinderbox User
390881b8d4 update copyright notice / whitespace 2016-07-11 23:48:11 +00:00
Mark Andrews
8db11cd77b dns_iptable_addprefix2 -> dns_iptable_addprefix
(cherry picked from commit 9b93305605)
2016-07-11 18:40:58 +10:00