Commit Graph

26039 Commits

Author SHA1 Message Date
Evan Hunt
9cf13ffaab [v9_12_0_patch] copyrights v9.12.0rc2 2018-01-04 18:00:47 -08:00
Evan Hunt
45c32001a4 [v9_12_0_patch] mem.c failed to compile if ISC_MEM_CHECKOVERRUN=0
(cherry picked from commit 4c33e133ca7eb0aa65986f0ea5d788007e70aaa9)
(cherry picked from commit 879e17b77d)
2018-01-04 17:56:43 -08:00
Evan Hunt
517505b0ce [v9_12_0_patch] unconditionally typedef summarystat_t for coverity
(cherry picked from commit a0e66ef6dd)
(cherry picked from commit b1e6c5d922)
2018-01-04 17:56:29 -08:00
Tinderbox User
dad61b9a50 regen v9_12_0_patch 2018-01-04 05:21:44 +00:00
Evan Hunt
8bbb34844c [v9_12_0_patch] prep 9.12.0rc2 2018-01-03 21:11:14 -08:00
Evan Hunt
4f5ed63aae [v9_12_0_patch] typo 2018-01-03 19:30:13 -08:00
Evan Hunt
d6376468bf [v9_12_0_patch] block validator deadlock and prevent use-after-free
4859.	[bug]		A loop was possible when attempting to validate
			unsigned CNAME responses from secure zones;
			this caused a delay in returning SERVFAIL and
			also increased the chances of encountering
			CVE-2017-3145. [RT #46839]

4858.	[security]	Addresses could be referenced after being freed
			in resolver.c, causing an assertion failure.
			(CVE-2017-3145) [RT #46839]
2018-01-03 19:18:08 -08:00
Mark Andrews
1b8a33b7e0 4849. [bug] Duplicate zones could appear in the .nzf file if
addzone failed. [RT #46435]

(cherry picked from commit 2d7f89b9c7)
2018-01-04 09:49:25 +11:00
Mark Andrews
90a152fe68 4850. [bug] Named failed to restart with multiple added zones in
lmdb database. [RT #46889]

(cherry picked from commit 9bec7facfb)
2018-01-04 09:35:18 +11:00
Mark Andrews
262f1c2e4e lowercase m in macOS
(cherry picked from commit 2cc7c4d62c)
2017-12-21 10:57:14 +11:00
Mark Andrews
ca9d1344d7 regen 2017-12-20 09:25:42 +11:00
Mark Andrews
d15b4f664d set AC_INIT to 9.11 2017-12-20 09:25:13 +11:00
Tinderbox User
eeb443b163 regen v9_12_0_patch 2017-12-14 01:08:06 +00:00
Evan Hunt
a76dbefad7 [v9_12_0_patch] prep and revise release notes for 9.12.0 final 2017-12-13 16:58:34 -08:00
Tinderbox User
33fe90429f regen v9_12_0_patch 2017-12-14 00:53:45 +00:00
Tinderbox User
f9c3aba9b3 regen master v9.12.0rc1 2017-12-06 17:32:49 +00:00
Evan Hunt
c4f9d720eb [master] copyrights 2017-12-06 09:24:36 -08:00
Evan Hunt
4bef07fd01 [master] move "released" tag for rc1 respin 2017-12-06 09:23:34 -08:00
Mark Andrews
9d5a0abe81 4841. [bug] Address -fsanitize=undefined warnings. [RT #46786] 2017-12-06 21:00:14 +11:00
Mark Andrews
a89f416017 remove autosign/ns3/inacksk3.example.db 2017-12-06 20:39:42 +11:00
Mark Andrews
32d09cd7e0 4840. [test] Add tests to cover fallback to using ZSK on inactive
KSK. [RT #46787]
2017-12-06 20:26:43 +11:00
Tinderbox User
7308316d92 regen master 2017-12-06 01:09:54 +00:00
Tinderbox User
69f5e5f815 update copyright notice / whitespace 2017-12-05 23:45:42 +00:00
Tinderbox User
cb056c84f3 newcopyrights 2017-12-05 23:30:13 +00:00
Curtis Blackburn
c7f663ca80 clarify "stage 1" and "stage 2" in autosign test 2017-12-05 09:59:21 -08:00
Mark Andrews
ecafa2ae50 set the DNSKEY deletion time to now+5 once we got all the zones into their initial state 2017-12-05 21:38:28 +11:00
Mark Andrews
77f9623439 add [RT #46774] 2017-12-05 16:14:15 +11:00
Mark Andrews
00f5ea91cf 4839. [bug] zone.c:zone_sign was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]
2017-12-05 16:09:47 +11:00
Tinderbox User
6074bd498f regen master 2017-12-05 01:08:12 +00:00
Evan Hunt
f30019645c [master] fix test descriptions 2017-12-04 15:46:56 -08:00
Evan Hunt
b695f77533 [master] revised release note 2017-12-04 15:37:09 -08:00
Tinderbox User
c912c10346 newcopyrights 2017-12-04 23:30:17 +00:00
Mark Andrews
9ff34db455 add note for [RT #46743] and [RT #46754] 2017-12-05 09:52:12 +11:00
Mark Andrews
6fa2a0691e 4838. [bug] zone.c:add_sigs was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]
2017-12-05 09:25:09 +11:00
Tinderbox User
a855b8d231 update copyright notice / whitespace 2017-12-03 23:45:35 +00:00
Tinderbox User
79398706f4 newcopyrights 2017-12-03 23:30:10 +00:00
Mark Andrews
196e01da5f 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]
2017-12-04 10:03:51 +11:00
Ondřej Surý
1b0ca5d5bb [master] Fix minor memory leak in rndc [RT #46739] 2017-12-01 14:48:32 +01:00
Evan Hunt
61c843815e [master] copyrights/whitespace 2017-11-30 14:51:50 -08:00
Tinderbox User
a30f8d214d regenerate 2017-11-30 22:51:12 +00:00
Tinderbox User
0b315a0b25 regen master 2017-11-30 22:46:39 +00:00
Evan Hunt
2f855055ed [master] prep 9.12.0rc1 2017-11-30 14:39:16 -08:00
Evan Hunt
49a8cd6c01 [master] silence compiler warning 2017-11-30 13:55:34 -08:00
Evan Hunt
f29ca5db28 [master] fix incorrect comment 2017-11-30 13:35:20 -08:00
Evan Hunt
e197a2bd15 [master] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]
2017-11-30 12:37:08 -08:00
Ondřej Surý
a4a148cf9a [master] Type the shifted values to isc_uint32_t so the top bit is unsigned (found by UBSAN) [RT #46740] 2017-11-30 18:23:35 +01:00
Michał Kępień
2c20fc0d13 [master] Fix LMDB support on OpenBSD; clean up and refactor LMDB-related code
4835.	[cleanup]	Clean up and refactor LMDB-related code. [RT #46718]

4834.	[port]		Fix LMDB support on OpenBSD. [RT #46718]
2017-11-30 14:34:04 +01:00
Tinderbox User
dc66c4a49c update copyright notice / whitespace 2017-11-29 23:45:31 +00:00
Mark Andrews
9ddf7d6c4c 4833. [bug] isc_event_free should check that the event is not
linked when called. [RT #46725]

4832.   [bug]           Events were not being removed from zone->rss_events.
                        [RT #46725]
2017-11-30 10:31:44 +11:00
Tinderbox User
6cc3c22534 newcopyrights 2017-11-29 23:30:06 +00:00