Mark Andrews
3f5f6afbd9
4563. [bug] Modified zones would occasionally fail to reload.
...
[RT #39424 ]
(cherry picked from commit dfe3068ef3 )
2017-02-02 17:14:23 +11:00
Evan Hunt
fc5e144446
[v9_10] Squashed commit of the following:
...
4561. [port] Silence a warning in strict C99 compilers. [RT #44414 ]
(cherry picked from commit 6cb5e36ca3 )
2017-02-01 17:31:29 -08:00
Tinderbox User
89abe04af5
update copyright notice / whitespace
2017-01-31 23:46:51 +00:00
Evan Hunt
5eca4fc646
[v9_10] address portability issues
...
(cherry picked from commit a2bd99a959 )
2017-01-30 16:52:37 -08:00
Mark Andrews
6106ed6841
add a REQUIRE to catch the NULL pointer dereference that triggered CVE-2017-3135
...
(cherry picked from commit 1d8995d226 )
2017-01-31 11:21:18 +11:00
Evan Hunt
a5a7e48035
[v9_10] change 4558 was incomplete
...
(cherry picked from commit cd668ea57f )
2017-01-30 14:11:25 -08:00
Tinderbox User
562244d395
update copyright notice / whitespace
2017-01-24 23:46:25 +00:00
Mark Andrews
f7903e4bcc
4560. [bug] mdig: add -m option to enable memory debugging rather
...
than have in on all the time. [RT #44509 ]
4559. [bug] Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
was turned off. [RT #44509 ]
(cherry picked from commit 25da687db7 )
2017-01-24 17:50:06 +11:00
Mark Andrews
e63f8e9467
4558. [bug] Synthesised CNAME before matching DNAME was still
...
being cached when it should have been. [RT #44318 ]
(cherry picked from commit 9f4bf43b79 )
2017-01-24 17:41:22 +11:00
Tinderbox User
28f72096e7
update copyright notice / whitespace
2017-01-14 23:46:28 +00:00
Mark Andrews
80d5fed95a
4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
...
[RT #44336 ]
(cherry picked from commit 5dfa5221d5 )
2017-01-14 13:14:35 +11:00
Tinderbox User
610b6f852e
update copyright notice / whitespace
2017-01-13 23:46:31 +00:00
Mark Andrews
26907d031e
make e's declaration unconditional. [RT #44324 ]
...
(cherry picked from commit b8eee0f48d )
2017-01-13 16:10:45 +11:00
Tinderbox User
ff7d77ce73
update copyright notice / whitespace
2017-01-12 23:46:57 +00:00
Mark Andrews
63fb01bb78
4553. [bug] Named could deadlock there were multiple changes to
...
NSEC/NSEC3 parameters for a zone being processed at
the same time. [RT #42770 ]
(cherry picked from commit d2e1b47d4f )
2017-01-12 14:26:11 +11:00
Tinderbox User
0cc74d59ab
update copyright notice / whitespace
2017-01-11 23:46:23 +00:00
Evan Hunt
7a326082ad
[v9_10] expand the flags field in dns_master_style
...
4550. [cleanup] Increased the number of available master file
output style flags from 32 to 64. [RT #44043 ]
2017-01-11 12:06:29 -08:00
Tinderbox User
b16ec7b570
update copyright notice / whitespace
2017-01-04 23:46:14 +00:00
Evan Hunt
44bbbfcca9
[v9_10] add support for native pkcs11 on keyper
...
4547. [port] Add support for --enable-native-pkcs11 on the AEP
Keyper HSM. [RT #42463 ]
2017-01-03 16:41:58 -08:00
Evan Hunt
655092507c
[v9_10] silence warning
...
(cherry picked from commit b3aebb5890 )
2016-12-28 17:54:47 -08:00
Mark Andrews
f204635d42
9.10.5b1
2016-12-29 12:39:00 +11:00
Mark Andrews
1ec66e6a83
4510. [security] Named mishandled some responses where covering RRSIG
...
records are returned without the requested data
resulting in a assertion failure. (CVE-2016-9147)
[RT #43548 ]
(cherry picked from commit 6adf421e7e )
2016-12-29 11:52:46 +11:00
Mark Andrews
2cfd915235
4508. [security] Named incorrectly tried to cache TKEY records which
...
could trigger a assertion failure when there was
a class mismatch. (CVE-2016-9131) [RT #43522 ]
(cherry picked from commit 2c1c4b99a1 )
2016-12-29 11:29:41 +11:00
Tinderbox User
ad4e4b05f2
update copyright notice / whitespace
2016-12-28 23:52:29 +00:00
Mark Andrews
6bed6ea11b
fix back port issue
2016-12-29 10:48:46 +11:00
Mark Andrews
04c7ee66b1
4517. [security] Named could mishandle authority sections that were
...
missing RRSIGs triggering an assertion failure.
(CVE-2016-9444) [RT # 43632]
(cherry picked from commit 1df30cfd27c5a3c57fce357c54aaf6c702227d51)
2016-12-29 10:41:19 +11:00
Mark Andrews
3c3cba0a63
4543. [bug] dns_client_startupdate now delays sending the update
...
request until isc_app_ctxrun has been called.
[RT #43976 ]
(cherry picked from commit 6f94747270 )
2016-12-28 15:55:47 +11:00
Tinderbox User
a263f19bff
update copyright notice / whitespace
2016-12-26 23:48:48 +00:00
Mark Andrews
74685182f7
4538. [bug] Call dns_client_startresolve from client->task.
...
[RT #43896 ]
(cherry picked from commit aceabacdb8 )
2016-12-27 07:14:56 +11:00
Mark Andrews
e9b393d2f2
if gen fails remove the file [RT #43949 ]
...
(cherry picked from commit e17d2f98be )
2016-12-23 09:21:17 +11:00
Mark Andrews
4043669112
4535. [bug] Address race condition in setting / testing of
...
DNS_REQUEST_F_SENDING. [RT #43889 ]
(cherry picked from commit 37a8db0ba4 )
2016-12-14 10:33:13 +11:00
Mark Andrews
83139f2a21
4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879 ]
...
(cherry picked from commit def6b33bad )
2016-12-13 16:37:47 +11:00
Mark Andrews
42c58e5580
4533. [bug] dns_client_update should terminate on prerequiste
...
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
and also on BADZONE. [RT #43865 ]
(cherry picked from commit 8ca45ba01a )
2016-12-13 15:53:49 +11:00
Mark Andrews
df9832fd9e
4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
...
in responses resulting in SERVFAIL being returned.
[RT #43779 ]
(cherry picked from commit 60cb462c56 )
2016-12-09 12:51:16 +11:00
Tinderbox User
9423b4f701
update copyright notice / whitespace
2016-11-08 23:51:48 +00:00
Mark Andrews
a22b4b9ed9
locks are only need in OpenSSL < 1.1
2016-11-09 10:06:39 +11:00
Mark Andrews
8cb6771585
only call dns_test_begin once
...
(cherry picked from commit f13c7b01746a07bef87a386ceff93ccb2a7488a9)
(cherry picked from commit 56c6fc0dac )
2016-11-09 10:03:53 +11:00
Mark Andrews
11088c8f65
remove spurious newline [RT #43585 ]
...
(cherry picked from commit fed2f7e4c1 )
2016-11-09 08:27:32 +11:00
Mark Andrews
a873ad10bd
copyrights/whitespace
2016-11-03 12:47:03 +11:00
Tinderbox User
4282468058
update copyright notice / whitespace
2016-11-02 23:49:23 +00:00
Mark Andrews
0fab2ebfb8
add dns_db_getsize, dns_rdataslab_count, dns_zone_getmaxrecords, dns_zone_setmaxrecords
...
(cherry picked from commit aee76db9e3 )
2016-11-03 10:02:18 +11:00
Mark Andrews
1bbcfe2fc8
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
(cherry picked from commit 5f8412a4cb )
2016-11-03 10:01:52 +11:00
Evan Hunt
0f254a61f9
[v9_10] typo
2016-11-02 09:43:16 -07:00
Mark Andrews
58a1bcad5f
4507. [bug] Name could incorrectly log 'allows updates by IP
...
address, which is insecure' [RT #43432 ]
(cherry picked from commit 2b2b85c897 )
2016-11-02 18:17:39 +11:00
Evan Hunt
398f8c32f3
[v9_10] make uninstall
...
4503. [cleanup] "make uninstall" now removes file installed by
BIND. (This currently excludes Python files
due to lack of support in setup.py.) [RT #42912 ]
(cherry picked from commit 6087f87afb )
2016-11-01 19:35:44 -07:00
Evan Hunt
a2575e2796
[v9_10] system tests on windows
...
4487. [test] Make system tests work on Windows. [RT #42931 ]
2016-11-01 09:50:09 -07:00
Evan Hunt
7aec46a5ef
[v9_10] 4496. [func] dig: add +idnout to control whether labels are
...
display in punycode or not. Requires idn support
to be enabled at compile time. [RT #43398 ]
(cherry picked from commit 42470b0b87 )
(cherry picked from commit 6552f33198 )
2016-10-31 22:54:41 -07:00
Mark Andrews
60d267ac10
add more LIBRESSL_VERSION_NUMBER checks
...
(cherry picked from commit 429b543086 )
2016-11-01 12:37:39 +11:00
Mark Andrews
9489afeed3
add more LIBRESSL_VERSION_NUMBER checks
...
(cherry picked from commit 3d38cfaf8a )
2016-11-01 12:25:09 +11:00
Tinderbox User
de7069b725
update copyright notice / whitespace
2016-10-30 23:48:17 +00:00