10059 Commits

Author SHA1 Message Date
Tinderbox User
7af73b918e prep 9.9.12rc2 2018-03-02 21:53:47 +00:00
Evan Hunt
ce1114a95a temporarily revert change #4859
(cherry picked from commit 06b52cc939)
2018-03-02 12:18:03 -08:00
Evan Hunt
ff9f94f78a [v9_9] prep 9.9.12rc1 2018-02-15 11:20:01 -08:00
Evan Hunt
8ac589acc5 [rt43670] more emphatic warning 2018-02-09 12:29:29 +11:00
Mark Andrews
11221a5504 4889. [func] Warn about the use of old root keys without the new
root key being present.  Warn about dlv.isc.org's
                        key being present. Warn about both managed and
                        trusted root keys being present. [RT #43670]

(cherry picked from commit baef0ca988)
2018-02-09 12:16:30 +11:00
Tinderbox User
af6854e060 update copyright notice / whitespace 2018-02-08 23:53:55 +00:00
Mark Andrews
e004a9a491 [v9_9] fix nsupdate test on windows
4888.	[test]		Initialize sockets correctly in sample-update so
			that nsupdate system test will will run on Windows.
			[RT #47097]

(cherry picked from commit 6757dc6488)
2018-02-08 13:36:44 -08:00
Mark Andrews
676dafa28c add IgnoreImportLibrary 2018-02-08 18:30:37 +11:00
Tinderbox User
0cba4c94d4 update copyright notice / whitespace 2018-02-07 23:52:52 +00:00
Mark Andrews
274b1ae55a 4885. [security] update-policy rules that otherwise ignore the name
field now require that it be set to "." to ensure
                        that any type list present is properly interpreted.
                        [RT #47126]

(cherry picked from commit ec771bbdc8)
2018-02-07 13:51:05 +11:00
Tinderbox User
1cbeda829d update copyright notice / whitespace 2018-01-30 23:50:48 +00:00
Mark Andrews
e1994f4fd9 4882. [bug] Address potential memory leak in
dns_update_signaturesinc. [RT #47084]

(cherry picked from commit 7817caa3c7)
2018-01-30 15:29:41 +11:00
Mark Andrews
7e6d7232c7 4879. [bug] dns_rdata_caa:value_len is was small. [RT #47086]
(cherry picked from commit 3ae586b857)
2018-01-30 11:01:02 +11:00
Tinderbox User
763a9ad41f update copyright notice / whitespace 2018-01-24 23:49:40 +00:00
Evan Hunt
7fe379bf51 [v9_9] change uint to isc_uint 2018-01-24 11:02:45 -08:00
Evan Hunt
0712192947 [v9_9] update 9.11 api range 2018-01-24 10:24:48 -08:00
Evan Hunt
00947bf45d [v9_9] prep 9.9.12b1 2018-01-24 10:15:30 -08:00
Evan Hunt
12edba1c1b [v9_9] copyrights 2018-01-24 09:53:05 -08:00
Mark Andrews
cc30c2c06a 4876. [bug] Address deadlock with accessing a keytable. [RT #47000] 2018-01-24 21:43:52 +11:00
Mark Andrews
54945751e2 4874. [bug] Wrong time display when reporting new keywarntime.
[RT #47042]

(cherry picked from commit 83d005de61)
2018-01-24 08:01:17 +11:00
Tinderbox User
0478b1d205 update copyright notice / whitespace 2018-01-22 23:49:47 +00:00
Mukund Sivaraman
ef838436ef Don't permit loading meta RR types such as TKEY from master files (#47009)
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
(cherry picked from commit 6fb3db01ac)
(cherry picked from commit 96456c0834)
2018-01-22 15:03:31 +05:30
Tinderbox User
ecfc27bf6d update copyright notice / whitespace 2018-01-21 23:49:55 +00:00
Mark Andrews
2f346f4275 4869. [bug] Address some cases where NULL with zero length could
be passed to memmove which is undefined behaviour and
                        can lead to bad optimisation. [RT #46888]

(cherry picked from commit fdd8838bf9)
2018-01-22 09:42:25 +11:00
Tinderbox User
8d5a01a868 update copyright notice / whitespace 2018-01-13 23:50:30 +00:00
Mukund Sivaraman
4f47e5fd63 Fix various bugs reported by valgrind --tool=memcheck (#46978)
(cherry picked from commit f96133826e)
(cherry picked from commit 0374e1c3fd)
(cherry picked from commit 929329d2d6)
(cherry picked from commit d072be0691)
2018-01-13 12:02:18 +05:30
Tinderbox User
4c71ca4ae7 update copyright notice / whitespace 2018-01-10 23:57:36 +00:00
Mark Andrews
efb95afc6f 4862. [bug] The rdata flags for RRSIG was not being properly set
when constructing a rdataslab. [RT #46978]

(cherry picked from commit 7befb67af4)
2018-01-11 09:55:07 +11:00
Tinderbox User
536fe358af update copyright notice / whitespace 2018-01-09 23:49:31 +00:00
Mark Andrews
55c81d796c 4860. [bug] isc_int8_t should be signed char. [RT #46973]
(cherry picked from commit 21f708c88c)
2018-01-10 08:42:38 +11:00
Mark Andrews
455296d36a Revert "unconditionally typedef summarystat_t for coverity"
This reverts commit 59c2cad2f3.
2018-01-05 11:10:28 +11:00
Tinderbox User
f3e5a44f00 update copyright notice / whitespace 2018-01-04 23:47:43 +00:00
Mark Andrews
59c2cad2f3 unconditionally typedef summarystat_t for coverity
(cherry picked from commit a0e66ef6dd)
2018-01-05 10:12:16 +11:00
Evan Hunt
f6ec7f6b99 [v9_9] block validator deadlock and prevent use-after-free
4859.	[bug]		A loop was possible when attempting to validate
			unsigned CNAME responses from secure zones;
			this caused a delay in returning SERVFAIL and
			also increased the chances of encountering
			CVE-2017-3145. [RT #46839]

4858.	[security]	Addresses could be referenced after being freed
			in resolver.c, causing an assertion failure.
			(CVE-2017-3145) [RT #46839]
2018-01-03 19:19:59 -08:00
Tinderbox User
01dd316a95 update copyright notice / whitespace 2018-01-03 23:47:32 +00:00
Mark Andrews
26be82ee90 missing newline in comment
(cherry picked from commit 7258b852cf)
2018-01-03 17:12:04 +11:00
Tinderbox User
3d87b339d1 update copyright notice / whitespace 2018-01-02 23:47:41 +00:00
Mark Andrews
4d16a4653d 4852. [bug] Add REQUIRE's and INSIST's to isc_time_formattimestamp,
isc_time_formathttptimestamp, isc_time_formatISO8601.
                        [RT #46892]
2018-01-02 10:49:43 +11:00
Tinderbox User
bb69fd0a5e regen v9_9 2017-12-29 07:38:35 +00:00
Tinderbox User
7aeee801e6 regen v9_9 2017-12-29 02:41:20 +00:00
Mark Andrews
9711fe2244 initalize sigsize to zero; ATF_CHECK_EQ(sigsize, tsig.siglen);
(cherry picked from commit 9f61f6b46b)
2017-12-22 08:59:15 +11:00
Mark Andrews
2884abf6a1 don't attempt to call isc_buffer_free(&buf) twice; don't attempt to call dns_message_destroy(&msg) twice; don't test for key != NULL
(cherry picked from commit cb8650d875)
2017-12-12 13:25:12 +11:00
Mark Andrews
4e7801ebfd 4842. [bug] Conditionally compile opensslecdsa_link.c to avoid
warnings about unused function. [RT #46790]

(cherry picked from commit 63459cdc05)
(cherry picked from commit 2d82ed9456)
2017-12-07 13:41:50 +11:00
Tinderbox User
92c1063230 update copyright notice / whitespace 2017-12-06 23:48:04 +00:00
Mark Andrews
7b34ba54c9 4841. [bug] Address -fsanitize=undefined warnings. [RT #46786]
(cherry picked from commit 9d5a0abe81)
(cherry picked from commit 58c86991ee)
2017-12-06 21:05:34 +11:00
Mark Andrews
3666b9bfb6 4839. [bug] zone.c:zone_sign was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
2017-12-05 16:12:05 +11:00
Mark Andrews
2c0a365200 4838. [bug] zone.c:add_sigs was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
(cherry picked from commit 677f507de7)
2017-12-05 09:44:49 +11:00
Mark Andrews
5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
2017-12-04 10:09:45 +11:00
Tinderbox User
03674299c7 update copyright notice / whitespace 2017-11-30 23:50:30 +00:00
Tinderbox User
a0c8227d06 update copyright notice / whitespace 2017-11-29 23:47:59 +00:00