Commit Graph
28679 Commits
Author SHA1 Message Date
Tinderbox UserandMichał Kępień fc8107adca prep 9.11.20 2020-06-18 10:37:47 +02:00
Michał Kępień c947769913 Merge branch 'security-v9_11-docs' into 'security-v9_11'
Prepare documentation for BIND 9.11.20

See merge request isc-private/bind9!174
2020-06-18 10:37:36 +02:00
Michał Kępień 2aa29c1264 Tweak and reword release notes 2020-06-18 10:37:36 +02:00
Michał Kępień ed73a7215e Add release note for #1842 2020-06-18 10:37:36 +02:00
Michał Kępień 48804d31fd Add release note for #1834 2020-06-18 10:37:36 +02:00
Michał Kępień 7d8c09d05f Add release note for #1812 2020-06-18 10:37:36 +02:00
Michał Kępień 23371b85fc Add release note for #1714 2020-06-18 10:37:36 +02:00
Michał Kępień 7b28fcbb23 Tweak and reword recent CHANGES entries 2020-06-18 10:37:35 +02:00
Michał Kępień 8f5fa2572a Merge branch 'security-new_reference-insist-v9_11' into security-v9_11 2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 1ec39e73f8 Add CHANGES entry for #1718
(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 0ab902b4b2 Add release note for #1718
(cherry picked from commit 2f9d6d4f7eb624986db914a2825bbcc4e6d378b1)
2020-06-18 10:37:16 +02:00
Mark AndrewsandMichał Kępień 90a7416d15 Remove INSIST from from new_reference
RBTDB node can now appear on the deadnodes lists following the changes
to decrement_reference in 4db29f1f7d to
defer checking of node->down when the tree write lock is not held.  The
node should be unlinked instead.

(cherry picked from commit 569cc155b8680d8ed12db1fabbe20947db24a0f9)
2020-06-18 10:37:16 +02:00
Ondřej Surý a0231294ef Merge branch '1950-properly-handle-missing-kyua-v9_11' into 'v9_11'
Resolve "Build option for no unittest"

See merge request isc-projects/bind9!3709
2020-06-17 13:42:15 +00:00
Ondřej Surý 279b2eaa7e Add CHANGES and release note for #1950
(cherry picked from commit 4ab9e79e6f)
2020-06-17 15:37:13 +02:00
Ondřej Surý b9c6932793 Skip the unit tests when kyua is not available
The unittest.sh script tried to execute the unit tests when cmocka
development libraries was available, but kyua, the execution engine,
was not.  Now, both need to be installed in the system.

(cherry picked from commit 762a3c866e)
2020-06-17 15:31:44 +02:00
Ondřej Surý 9605a1ba79 Merge branch 'ondrej/switch-the-default-branch-name-to-main-v9_11' into 'v9_11'
Adjust the GitLab CI scripts for new default branch name

See merge request isc-projects/bind9!3708
2020-06-17 12:19:26 +00:00
Ondřej Surý 280720b151 Adjust the GitLab CI scripts for new default branch name
(cherry picked from commit b36cd06a0b)
2020-06-17 14:17:37 +02:00
Ondřej Surý c722ece5ea Merge branch '1945-system-clang-tsan-has-bad-symbolizer-v9_11' into 'v9_11'
Set the TSAN symbolizer path directly, the indirection via env doesn't work

See merge request isc-projects/bind9!3699
2020-06-16 08:55:00 +00:00
Ondřej Surý a4837430c0 Set the TSAN symbolizer path directly, the indirection via env doesn't work
(cherry picked from commit 39107365a7)
2020-06-16 10:52:44 +02:00
Mark Andrews 565709d377 Merge branch '1929-v9_11-drop-define-activeemtpynode-activeemtpynode64-from-lib-dns-rbtdb-c' into 'v9_11'
Resolve "[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.c"

See merge request isc-projects/bind9!3690
2020-06-12 06:21:24 +00:00
Mark Andrews dcf3941f17 Fix #define of activeemptynode for rbtdb64 2020-06-12 11:41:06 +10:00
Ondřej Surý d87f727636 Merge branch '1808-race-in-resolver-fetch-v9_11' into 'v9_11'
Resolve "assertion failure in bind 9.16.2"

See merge request isc-projects/bind9!3672
2020-06-06 07:16:33 +00:00
Ondřej Surý 724fd53643 Add release note for #1808
(cherry picked from commit 5a9f594629)
2020-06-06 07:10:13 +02:00
Witold KręcickiandOndřej Surý 530c04c33a Add CHANGES entry for #1808
(cherry picked from commit f0f859411f)
2020-06-06 07:10:13 +02:00
Witold KręcickiandOndřej Surý b0707ebba0 Fix a data access race in resolver
We were passing client address to dns_resolver_createfetch as a pointer
and it was saved as a pointer. The client (with its address) could be
gone before the fetch is finished, and in a very odd scenario
log_formerr would call isc_sockaddr_format() which first checks if the
address family is valid (and at this point it still is), then the
sockaddr is cleared, and then isc_netaddr_fromsockaddr is called which
fails an assertion as the address family is now invalid.

(cherry picked from commit 175c4d9055)
2020-06-06 07:10:13 +02:00
Ondřej Surý a5942f7438 Merge branch '1842-correct-the-bind-arm-to-say-that-the-default-session-key-for-use-with-update-policy-local-is-v9_11' into 'v9_11'
Edit documentation to indicate that the TSIG session key is automatically created on startup

See merge request isc-projects/bind9!3674
2020-06-05 14:42:20 +00:00
Suzanne GoldlustandOndřej Surý 31ed7fe55b Edit reference.rst to indicate that the TSIG session key is automatically created on startup
(cherry picked from commit 79920cea70)
2020-06-05 16:40:55 +02:00
Mark Andrews a00b3498f5 Merge branch '1835-add-yaml-for-ede-v9_11' into 'v9_11'
Add +yaml support for EDE

See merge request isc-projects/bind9!3667
2020-06-05 05:31:15 +00:00
Mark Andrews 1f1209e1f6 Add +yaml support for EDE
(cherry picked from commit 0ec77c2b92)
2020-06-05 12:10:53 +10:00
Mark Andrews a40a25697d Merge branch '1873-system-test-fails-on-single-stack-system' into 'v9_11'
Resolve "system test fails on single stack system"

See merge request isc-projects/bind9!3586
2020-06-05 01:16:32 +00:00
Mark Andrews dd43437388 Fix resolver system test on system without ipv6 (--disable-ipv6). 2020-06-05 10:42:55 +10:00
Ondřej Surý be69acfb07 Merge branch 'nsupdate-late-responses-v9_11' into 'v9_11'
Delay kserver cleanup until all tasks finish (v9.11)

See merge request isc-projects/bind9!3652
2020-06-04 11:14:43 +00:00
Ondřej Surý fcd27b397f Add CHANGES entry for !3316
(cherry picked from commit 72e78f0a4b)
2020-06-04 11:36:16 +02:00
Petr MensikandOndřej Surý d33aef43de Delay kserver cleanup until all tasks finishes
It might be possible some pending task would run when kserver is already
cleaned up. Postpone gsstsig structures cleanup after task and timer
managers are destroyed. No pending threads are possible after it.

Make action in maybeshutdown only if doshutdown was not already called.
Might be called from getinput event.

(cherry picked from commit 2685e69be8)
2020-06-04 11:35:07 +02:00
Ondřej Surý ded53d8762 Merge branch '1849-cidr-rejected-by-9-11-18-and-higher' into 'v9_11'
Resolve "CIDR rejected by 9.11.18 and higher"

See merge request isc-projects/bind9!3639
2020-06-04 06:39:27 +00:00
Ondřej Surý f35ffb0f4a Add CHANGES entry for #1849 2020-06-03 22:17:02 +02:00
Ondřej Surý 7e2d9531a7 Change the invalid CIDR from parser error to warning
In [RT #43367], the BIND 9 changed the strictness of address / prefix
length checks:

    Check prefixes in acls to make sure the address and
    prefix lengths are consistent.  Warn only in
    BIND 9.11 and earlier.

Unfortunately, a regression slipped in and the check was made an error
also in the BIND 9.11.  This commit fixes the regression, but turning
the error into a warning.
2020-06-03 22:17:02 +02:00
Michał Kępień d392679e24 Merge branch 'michal/misc-danger-tweaks-v9_11' into 'v9_11'
[v9_11] Miscellaneous Danger tweaks

See merge request isc-projects/bind9!3641
2020-06-03 14:01:21 +00:00
Michał Kępień dddb154ec7 Only run Danger if DANGER_GITLAB_API_TOKEN is set
Prevent the Danger GitLab CI job from failing when the GitLab API key to
use is not set.

(cherry picked from commit 2c90438583)
2020-06-03 15:54:12 +02:00
Michał Kępień 3dc4c81cad Prevent invalid warnings about missing identifiers
The Danger script inspects differences between the current version of a
given merge request's target branch and the merge request branch.  If
the latter falls behind the former, the Danger script will wrongly warn
about missing GitLab/RT identifiers because it incorrectly treats the
"+++" diff marker as an indication of the merge request adding new lines
to a file.  Tweak the relevant conditional expression to prevent such
invalid warnings from being raised.

(cherry picked from commit e062812c38)
2020-06-03 15:54:11 +02:00
Michał Kępień 53b3c53d73 Make fetching target branch reliable
As GitLab Runner Docker executor caches Git repositories between jobs,
prevent the Danger script from attempting to update local refs to ensure
"git fetch" returns with an exit code of 0.  Use the FETCH_HEAD ref for
determining the differences between the merge request branch and its
target branch.

(cherry picked from commit d558c4cb78)
2020-06-03 15:54:11 +02:00
Michał Kępień ff90340598 Tweak condition for missing log message warning
Commits adding CHANGES entries and/or release notes do not need a commit
log message.  Do not warn about a missing commit log message for such
commits to make the warning more meaningful.

(cherry picked from commit c13944ca46)
2020-06-03 15:54:10 +02:00
Ondřej Surý bf3c6d793f Merge branch 'wpk/fix-socket-test-teardown-v9_11' into 'v9_11'
tests: fix isc/socket_test.c teardown

See merge request isc-projects/bind9!3637
2020-06-03 13:36:24 +00:00
Witold KręcickiandOndřej Surý c6ec2aaedc tests: fix isc/socket_test.c teardown
In case of a test failure we weren't tearing down sockets and tasks
properly, causing the test to hang instead of failing nicely.

(cherry picked from commit 4a8d9250cf)
2020-06-03 14:17:16 +02:00
Ondřej Surý 2d290220fd Merge branch 'marka-fix-ci-configure-v9_11' into 'v9_11'
fix CI configure for v9_11

See merge request isc-projects/bind9!3617
2020-06-03 10:16:46 +00:00
Mark Andrews d00fa6cc01 CI configure fixes for bad backports
remove --disable-maintainer-mode
rename --with-json to --with-libjson
2020-06-02 16:05:36 +10:00
Ondřej Surý 99ed4bc788 Merge branch '1164-add-danger-python-to-gitlab-ci-v9_11' into 'v9_11'
Add Danger Python to GitLab CI (v9.11)

See merge request isc-projects/bind9!3612
2020-06-01 11:59:28 +00:00
Michał KępieńandOndřej Surý 5190c42841 Add Danger Python to GitLab CI
Certain rules of the BIND development process are not codified anywhere
and/or are used inconsistently.  In an attempt to improve this
situation, add a GitLab CI job which uses Danger Python to add comments
to merge requests when certain expectations are not met.  Two categories
of feedback are used, only one of which - fail() - causes the GitLab CI
job to fail.  Exclude dangerfile.py from Python QA checks as the way the
contents of that file are evaluated triggers a lot of Flake8 and PyLint
warnings.

(cherry picked from commit 36bb45a8b6)
2020-06-01 13:49:05 +02:00
Mark Andrews 97cdeb2c41 Merge branch '1858-silence-tsan-in-bin-nsupdate-nsupdate-c-v9_11' into 'v9_11'
Lock access to 'answer' to silence TSAN

See merge request isc-projects/bind9!3598
2020-05-28 03:46:29 +00:00
Mark Andrews 919ea623aa Lock access to 'answer' to silence TSAN
(cherry picked from commit b3bd8a270b)
2020-05-28 11:13:37 +10:00