Commit Graph
6120 Commits
Author SHA1 Message Date
Mark Andrews 0faee78f98 9.9.10b1 2016-12-29 13:36:32 +11:00
Evan Hunt 3204e83716 [v9_9] silence warning
(cherry picked from commit b3aebb5890)
2016-12-28 17:54:52 -08:00
Mark Andrews a14b7f0187 4510. [security] Named mishandled some responses where covering RRSIG
records are returned without the requested data
                        resulting in a assertion failure. (CVE-2016-9147)
                        [RT #43548]

(cherry picked from commit 6adf421e7e)
2016-12-29 11:53:58 +11:00
Mark Andrews d372472f60 4508. [security] Named incorrectly tried to cache TKEY records which
could trigger a assertion failure when there was
                            a class mismatch. (CVE-2016-9131) [RT #43522]

(cherry picked from commit 2c1c4b99a1)
2016-12-29 11:35:54 +11:00
Tinderbox User c38b1c7115 update copyright notice / whitespace 2016-12-28 23:58:02 +00:00
Mark Andrews 69cb8ebf15 4517. [security] Named could mishandle authority sections that were
missing RRSIGs triggering an assertion failure.
                        (CVE-2016-9444) [RT # 43632]

(cherry picked from commit 1df30cfd27c5a3c57fce357c54aaf6c702227d51)
2016-12-29 10:46:44 +11:00
Mark Andrews c161d54a65 4543. [bug] dns_client_startupdate now delays sending the update
request until isc_app_ctxrun has been called.
                        [RT #43976]

(cherry picked from commit 6f94747270)
2016-12-28 15:56:30 +11:00
Tinderbox User 7429284419 update copyright notice / whitespace 2016-12-26 23:51:09 +00:00
Mark Andrews 2af18c1396 4538. [bug] Call dns_client_startresolve from client->task.
[RT #43896]

(cherry picked from commit aceabacdb8)
2016-12-27 07:15:23 +11:00
Mark Andrews 0e43b24249 if gen fails remove the file [RT #43949]
(cherry picked from commit e17d2f98be)
2016-12-23 09:21:26 +11:00
Mark Andrews 3fe3359031 4535. [bug] Address race condition in setting / testing of
DNS_REQUEST_F_SENDING. [RT #43889]

(cherry picked from commit 37a8db0ba4)
2016-12-14 10:34:43 +11:00
Mark Andrews bcdf316ca5 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:38:50 +11:00
Mark Andrews 0aa9619f9e 4533. [bug] dns_client_update should terminate on prerequiste
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
2016-12-13 16:12:45 +11:00
Mark Andrews 2c74ad28ef 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:40 +11:00
Mark Andrews 2b97639b9b use isc_mem_create2 2016-11-09 16:24:48 +11:00
Mark Andrews 01b507f4b4 missing semicolon 2016-11-09 15:49:33 +11:00
Tinderbox User ff69a0423e update copyright notice / whitespace 2016-11-08 23:57:34 +00:00
Mark Andrews 193c1e2618 back port alway use a private memory pool with openssl 2016-11-09 10:22:35 +11:00
Mark Andrews 8176815e04 back port alway use a private memory pool with openssl 2016-11-09 10:17:28 +11:00
Mark Andrews 964e19cea8 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] 2016-11-09 09:59:32 +11:00
Mark Andrews 344911083f remove spurious newline [RT #43585]
(cherry picked from commit fed2f7e4c1)
2016-11-09 08:27:37 +11:00
Tinderbox User fc6f778fd8 update copyright notice / whitespace 2016-11-03 23:51:28 +00:00
Tinderbox User a06917d08f update copyright notice / whitespace 2016-11-02 23:51:39 +00:00
Mark Andrews bd3a5fe9c1 add dns_db_getsize, dns_rdataslab_count, dns_zone_getmaxrecords, dns_zone_setmaxrecords
(cherry picked from commit aee76db9e3)
2016-11-03 10:48:33 +11:00
Mark Andrews 51fe40fd59 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 10:46:37 +11:00
Evan Hunt 5106233113 [v9_9] typo 2016-11-02 09:43:22 -07:00
Mark Andrews a4156963f0 4507. [bug] Name could incorrectly log 'allows updates by IP
address, which is insecure' [RT #43432]

(cherry picked from commit 2b2b85c897)
2016-11-02 18:22:04 +11:00
Evan Hunt 60814deed8 [v9_9] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
(cherry picked from commit 398f8c32f3)
2016-11-01 20:22:35 -07:00
Evan Hunt 61a01f4860 [v9_9] 4496. [func] dig: add +idnout to control whether labels are
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]

(cherry picked from commit 42470b0b87)
(cherry picked from commit 6552f33198)
(cherry picked from commit 7aec46a5ef)
2016-10-31 23:01:38 -07:00
Mark Andrews 97f909b7f4 4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
(cherry picked from commit 3b7cb2c5b1)
2016-10-21 22:44:55 +11:00
Mark Andrews bbb7c613b3 4489. [security] It was possible to trigger assertions when processing
a response. (CVE-2016-8864) [RT #43465]

(cherry picked from commit bd6f27f5c3)
2016-10-21 14:56:32 +11:00
Mark Andrews 311060a573 4482. [bug] Address use before require check and remove extraneous
dns_message_gettsigkey call in dns_tsig_sign.
                        [RT #43374]

(cherry picked from commit 61463ab7a4)
2016-10-11 14:42:04 +11:00
Tinderbox User 0e5efd5369 update copyright notice / whitespace 2016-10-05 23:47:17 +00:00
Mark Andrews 90fe0b9474 4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
getprotobyname and getservbyname work.  [RT #43197]

(cherry picked from commit 82a50a619a)
2016-10-05 12:30:10 +11:00
Mark Andrews 51bcc28543 4467. [security] It was possible to trigger a assertion when rendering
a message. [RT #43139]

(cherry picked from commit 2bd0922cf9)
2016-09-09 11:32:22 +10:00
Tinderbox User 7e8f6348fc update copyright notice / whitespace 2016-09-07 23:46:39 +00:00
Mark Andrews 867ddf62f4 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]
2016-09-07 14:53:02 +10:00
Mukund Sivaraman 05f676f3e6 Update assertions to be more correct, and also remove use of a reserved word (#43090)
Note: this doesn't actually fix #43090.
(cherry picked from commit becac651e8)
(cherry picked from commit ce78690029)
(cherry picked from commit 0edca7b6cd)
2016-08-29 18:58:09 +05:30
Mark Andrews d04daf6177 4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
(cherry picked from commit c55b572ccf)
2016-08-29 10:17:07 +10:00
Evan Hunt 211517ce9a [v9_9] add aaaa for b.root-servers.net
4423.	[maint]		Added missing IPv6 address 2001:500:84::b for
			B.ROOT-SERVERS.NET. [RT #42898]

Patch submitted by Xoze Vazquez Perez (xose.vazquez@gmail.com).
2016-07-21 20:02:58 -07:00
Witold Krecicki 846c2d8235 4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879] 2016-07-21 12:19:55 +02:00
Tinderbox User e52e476295 update copyright notice / whitespace 2016-07-14 23:54:00 +00:00
Mark Andrews 456d497196 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
2016-07-14 15:08:36 +10:00
Tinderbox User 6fe5304a51 update copyright notice / whitespace 2016-07-13 23:47:37 +00:00
Mukund Sivaraman 995cda9432 Some general cleanup (#42827)
(cherry picked from commit e65cd99461)
(cherry picked from commit 47ed813864)
(cherry picked from commit e7a3b8948f)
2016-07-13 15:00:36 +05:30
Mukund Sivaraman 01ccf0d480 Make fixes for GCC 6 (#42721)
(cherry picked from commit 4116177ac4)
(cherry picked from commit 2d5581de6e)
(cherry picked from commit 48ed0dec09)
2016-07-13 14:04:23 +05:30
Tinderbox User 434ff87fcb update copyright notice / whitespace 2016-07-06 23:49:15 +00:00
Mark Andrews d9cc1ed8ea 4405. [bug] Change 4342 introduced a regression where you could
not remove a delegation in a NSEC3 signed zone using
                        OPTOUT via nsupdate. [RT #42702]

(cherry picked from commit d811a7d9ef)
2016-07-06 10:26:02 +10:00
Tinderbox User 0d801f20ce update copyright notice / whitespace 2016-06-29 23:46:06 +00:00
Mark Andrews 5ccb7b6341 4403. [bug] Rename variables and arguments that shadow: basename,
clone and gai_error.

(cherry picked from commit ecfa005085)
(cherry picked from commit c8f34dbca6)
2016-06-29 11:28:50 +10:00