ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
23,628 Commits 589 Branches 805 Tags
v9.9.11b1
Commit Graph

9852 Commits

Author SHA1 Message Date
Evan Hunt
ad3d2229e4 [v9_9] complete change #4643 2017-06-28 09:12:18 -07:00
Tinderbox User
d009ac5ae2 update copyright notice / whitespace 2017-06-27 23:47:52 +00:00
Evan Hunt
adf886ca5b [v9_9] fix API ranges (170-179 was used for two branches) 2017-06-27 12:20:41 -07:00
Evan Hunt
a3f30d1aac [v9_9] address TSIG bypass/forgery vulnerabilities 
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
(cherry picked from commit a03f4b1ea4)
 2017-06-27 11:41:31 -07:00
Evan Hunt
ee44eb6448 [v9_9] enhanced rfc 5011 logging 
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]

(cherry picked from commit 0d90835d2a)
(cherry picked from commit a71114e8bd)
 2017-06-27 10:51:20 -07:00
Mark Andrews
d96a0f1e9b update api for 9.9.11b1 2017-06-26 12:33:52 +10:00
Mark Andrews
a2ffb897d1 'name' should be on isc_thread_setname argument not isc_thread_create 
(cherry picked from commit 15471a63a2)
 2017-06-26 12:30:29 +10:00
Tinderbox User
3bd0f5fc20 update copyright notice / whitespace 2017-06-13 23:47:54 +00:00
Mark Andrews
0b9020897d 4636. [bug] Normalize rpz policy zone names when checking for 
existence. [RT #45358]

(cherry picked from commit e85e95c19e)
 2017-06-13 13:15:06 +10:00
Tinderbox User
74ae478d95 update copyright notice / whitespace 2017-06-02 23:46:45 +00:00
Mark Andrews
8920aee710 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET. 
(cherry picked from commit 9c179a5607)
 2017-06-02 11:49:12 +10:00
Tinderbox User
77dd47b406 update copyright notice / whitespace 2017-05-30 23:47:42 +00:00
Mark Andrews
fbfaa3e731 4629. [bug] dns_client_startupdate could not be called with a 
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
 2017-05-30 10:07:15 +10:00
Tinderbox User
41dd796aff update copyright notice / whitespace 2017-05-21 23:47:32 +00:00
Evan Hunt
7cc666abf1 [v9_9] corrected a possible crash in isc_test_end() 
(cherry picked from commit 9e44639ae0)
 2017-05-21 15:44:39 -07:00
Tinderbox User
97c4ecec1b update copyright notice / whitespace 2017-05-11 23:47:22 +00:00
Mark Andrews
bd84d0a47a 4624. [bug] Check isc_mem_strdup results in dns_view_setnewzones. 
[RT #45210]

(cherry picked from commit 5049d09bca)
 2017-05-11 20:38:22 +10:00
Mark Andrews
b737849335 4622. [bug] Remove unnecessary escaping of semicolon in CAA and 
URI records. [RT #45216]

(cherry picked from commit 1611ceb8b2)
 2017-05-11 10:58:29 +10:00
Tinderbox User
dbd030a74a update copyright notice / whitespace 2017-05-10 23:47:30 +00:00
Mark Andrews
bc5403f4b0 4621. [port] Force alignment of oid arrays to silence loader 
warnings. [RT #45131]

(cherry picked from commit 2fb1a0bdef)
 2017-05-11 09:25:13 +10:00
Mark Andrews
c888ce0fa1 4620. [port] Handle EPFNOSUPPORT being returned when probing 
to see if a socket type is supported. [RT #45214]

(cherry picked from commit d352a9db95)
(cherry picked from commit e1be9253cb)
 2017-05-11 07:59:29 +10:00
Tinderbox User
8ebfb6cc9a update copyright notice / whitespace 2017-05-02 23:48:00 +00:00
Mark Andrews
d7d9376e61 4615. [bug] AD could be set on truncated answer with no records 
present in the answer and authority sections.
                        [RT #45140]

(cherry picked from commit 33e94f501f)
 2017-05-03 08:09:05 +10:00
Evan Hunt
7e48ed2240 [v9_9] error in sockaddr unit test 
4614.	[test]		Fixed an error in the sockaddr unit test. [RT #45146]

(cherry picked from commit d73c32c17f)
(cherry picked from commit 512765ba1e)
 2017-05-02 13:41:31 -07:00
Tinderbox User
116c184440 update copyright notice / whitespace 2017-05-01 23:47:23 +00:00
Mark Andrews
b2970c4a93 4612. [bug] Silence 'may be use uninitalised' warning and simplify 
the code in lwres/getaddinfo:process_answer.
                        [RT #45158]

(cherry picked from commit b09eb48f8a)
(cherry picked from commit 358aa43c8c)
 2017-05-02 09:25:08 +10:00
Evan Hunt
ab642c3bf0 [v9_9] add util.h 
(cherry picked from commit 532a001001)
 2017-05-01 13:29:05 -07:00
Tinderbox User
7cb8f844a9 update copyright notice / whitespace 2017-04-28 23:47:10 +00:00
Mark Andrews
4034a1176e silence 'may be used uninitialized' warning. [RT #45139] 
(cherry picked from commit d1554926d0)
 2017-04-28 11:02:25 +10:00
Tinderbox User
a658d80dc7 update copyright notice / whitespace 2017-04-24 23:47:23 +00:00
Evan Hunt
96762fdd4c [v9_9] allow parallel make 
4609.	[cleanup]	Rearrange makefiles to enable parallel execution
			(i.e. "make -j"). [RT #45078]
 2017-04-23 23:04:56 -07:00
Tinderbox User
65d4abb881 update copyright notice / whitespace 2017-04-23 23:47:17 +00:00
Mukund Sivaraman
9af94db1da Add missing types for non-threaded build 
(cherry picked from commit b1568eeedc)
(cherry picked from commit 5fb7dd046e)
(cherry picked from commit cb0c1c0b04)
 2017-04-22 20:03:40 +05:30
Evan Hunt
7f0127c111 [v9_9] openssl backward compatibility fix 
4604.	[bug]		Don't use ERR_load_crypto_strings() when building
			with OpenSSL 1.1.0. [RT #45117]

(cherry picked from commit 4c31eda5e1)
 2017-04-21 18:56:37 -07:00
Evan Hunt
0f9808291c [v9_9] fix portability issue 
(cherry picked from commit 8ee6a6afd8)
 2017-04-21 18:16:30 -07:00
Evan Hunt
9ad188ccaf [v9_9] give threads unique names to assist debugging 
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]

(cherry picked from commit d26ae7fc08)
(cherry picked from commit 8b9c4592ed)
 2017-04-21 14:00:54 -07:00
Mukund Sivaraman
4cf12b3916 Reject incorrect RSA key lengths during key generation and and sign/verify context creation (#45043) 
(cherry picked from commit 239e9dc81c)
(cherry picked from commit 264e17e739)
(cherry picked from commit 2540059b7b)
 2017-04-21 19:09:05 +05:30
Mukund Sivaraman
4973497287 Fix inconsistencies in inline signing time comparisons (#42112) 
(cherry picked from commit 4176d278e2)
(cherry picked from commit eeb16584fb)
(cherry picked from commit fb5c4bc94c)
 2017-04-21 16:49:03 +05:30
Mukund Sivaraman
3664176a73 Ignore SHA-1 DS digest type when SHA-384 DS digest type is present (#45017) 
(cherry picked from commit 5d01eab088)
(cherry picked from commit 9540b42695)
(cherry picked from commit 4ab28446c1)
 2017-04-21 16:24:23 +05:30
Evan Hunt
62fd7f8062 [v9_9] fix dispatch.c shutdown race 
4952.	[bug]		A race condition on shutdown could trigger an
			assertion failure in dispatch.c. [RT #43822]

(cherry picked from commit 019132b70c)
 2017-04-20 17:42:09 -07:00
Mark Andrews
3d61a6c12d 4587. [bug] named-checkzone failed to handle occulted data below 
DNAMEs correctly. [RT #44877]

(cherry picked from commit 600b027731)
 2017-04-20 13:30:57 +10:00
Mark Andrews
11a028ceb4 4585. [port] win32: Set CompileAS value. [RT #42474] 
(cherry picked from commit 3742338a7b)
 2017-04-20 13:01:35 +10:00
Tinderbox User
93830fbbf8 update copyright notice / whitespace 2017-04-17 23:47:45 +00:00
Evan Hunt
b70ae741bf [v9_9] fix out of tree build error 
(cherry picked from commit 28cff4f924)
 2017-04-17 14:32:13 -07:00
Tinderbox User
07967caf75 update copyright notice / whitespace 2017-03-24 23:47:23 +00:00
Mark Andrews
8c2d209f09 4582. [security] 'rndc ""' could trigger a assertion failure in named. 
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
 2017-03-25 02:08:26 +11:00
Mark Andrews
c43edd377b 4580. [bug] 4578 introduced a regression when handling CNAME to 
referral below the current domain. [RT #44850]

(cherry picked from commit 638c7c635d)
 2017-03-14 15:17:32 +11:00
Mark Andrews
b99d097cc4 Reimplement: 
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
 2017-03-01 12:07:56 +11:00
Evan Hunt
fcf1874867 [v9_9] remove unnecessary INSIST and prep 9.11.1rc2 
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
(cherry picked from commit 559cbe04e7)
 2017-02-23 15:26:55 -08:00
Mark Andrews
039a1489c8 explicitly cast to (unsigned int) 2017-02-20 17:05:53 +11:00