Mark Andrews
8f1ed05dc0
4885. [security] update-policy rules that otherwise ignore the name
...
field now require that it be set to "." to ensure
that any type list present is properly interpreted.
[RT #47126 ]
(cherry picked from commit ec771bbdc8 )
2018-02-07 13:50:00 +11:00
Tinderbox User
9b63f75476
update copyright notice / whitespace
2018-02-01 23:49:05 +00:00
Michał Kępień
40aa5cab12
[v9_11] Silence compiler warnings about comparisons between signed and unsigned integers [RT #46980 ]
...
(cherry picked from commit a3c2b8831e )
2018-02-01 21:29:17 +01:00
Tinderbox User
3c5862dfc7
update copyright notice / whitespace
2018-01-30 23:48:16 +00:00
Mark Andrews
73cf0ba4e8
4882. [bug] Address potential memory leak in
...
dns_update_signaturesinc. [RT #47084 ]
(cherry picked from commit 7817caa3c7 )
2018-01-30 15:28:56 +11:00
Mark Andrews
d8351dfc9b
4881. [bug] Only include dst_openssl.h when OpenSSL is required.
...
[RT #47068 ]
(cherry picked from commit a64503c736 )
2018-01-30 15:28:51 +11:00
Mark Andrews
5c78f1f50e
4879. [bug] dns_rdata_caa:value_len is was small. [RT #47086 ]
...
(cherry picked from commit 3ae586b857 )
2018-01-30 11:00:44 +11:00
Mark Andrews
5bcd0fe019
copyrights
2018-01-25 16:47:34 +11:00
Mark Andrews
31c7ab4fb3
4811. [bug] Revert api changes to use <isc/buffer.h> inline
...
macros. Provide a alternative mechanism to turn
on the use of inline macros when building BIND.
[RT #46520 ]
(cherry picked from commit a1a5145867 )
2018-01-25 16:42:37 +11:00
Tinderbox User
574176a88d
update copyright notice / whitespace
2018-01-24 23:47:27 +00:00
Evan Hunt
f6ea3eaf82
[v9_11] change uint to isc_uint to fix build failure on windows
2018-01-24 10:59:57 -08:00
Evan Hunt
a48e2d4155
[v9_11] update 9.11 api range
2018-01-24 10:24:17 -08:00
Evan Hunt
ad309e8dfa
[v9_11] prep 9.11.3b1
2018-01-24 10:21:04 -08:00
Evan Hunt
567aab801d
[v9_11] copyrights
2018-01-24 09:50:56 -08:00
Mark Andrews
635e4351b0
4876. [bug] Address deadlock with accessing a keytable. [RT #47000 ]
...
(cherry picked from commit b575c4ec42 )
2018-01-24 18:56:34 +11:00
Mark Andrews
fc04365d2f
4875. [bug] Address compile failures on older systems. [RT #47015 ]
...
(cherry picked from commit 99178b6329 )
2018-01-24 13:10:44 +11:00
Mark Andrews
7cbac360bf
4874. [bug] Wrong time display when reporting new keywarntime.
...
[RT #47042 ]
(cherry picked from commit 83d005de61 )
2018-01-24 08:00:30 +11:00
Tinderbox User
93ca8abdf8
update copyright notice / whitespace
2018-01-22 23:47:25 +00:00
Evan Hunt
92b0a89969
[v9_11] fix test failure by sorting "type" to the top of zone clauses
2018-01-22 13:19:19 -08:00
Evan Hunt
40354825af
[v9_11] silence warning
2018-01-22 13:07:41 -08:00
Evan Hunt
57137377ef
[v9_11] fix unresolved externals for win32
2018-01-22 11:46:45 -08:00
Evan Hunt
1cf118a656
[v9_11] automatically generate named.conf grammars for the ARM
...
4873. [doc] Grammars for named.conf included in the ARM are now
automatically generated by the configuration parser
itself. As a side effect of the work needed to
separate zone type grammars from each other, this
also makes checking of zone statements in
named-checkconf more correct and consistent.
[RT #36957 ]
(cherry picked from commit 129c4414cb )
(cherry picked from commit f662d5484e )
2018-01-22 19:40:00 +00:00
Mukund Sivaraman
6fb3db01ac
Don't permit loading meta RR types such as TKEY from master files ( #47009 )
...
(cherry picked from commit 8a4ce20172 )
(cherry picked from commit c8eb726046 )
2018-01-22 14:36:18 +05:30
Tinderbox User
b68401ccae
update copyright notice / whitespace
2018-01-21 23:47:14 +00:00
Mark Andrews
2cf0fe3b80
4869. [bug] Address some cases where NULL with zero length could
...
be passed to memmove which is undefined behaviour and
can lead to bad optimisation. [RT #46888 ]
(cherry picked from commit fdd8838bf9 )
2018-01-22 09:39:25 +11:00
Tinderbox User
9eb24f1f84
update copyright notice / whitespace
2018-01-17 23:47:10 +00:00
Francis Dupont
2d387429a1
bcmp -> memcmp
2018-01-17 15:32:43 +01:00
Francis Dupont
ded782a862
Merged rt46864 (check MD5 amd SHA1 support)
2018-01-17 14:41:58 +01:00
Francis Dupont
f9c410d937
Merged rt46864 (check MD5 amd SHA1 support)
2018-01-17 14:40:13 +01:00
Tinderbox User
2927284144
update copyright notice / whitespace
2018-01-15 23:47:32 +00:00
Michał Kępień
e526027287
[v9_11] Ensure all master definitions in a catalog zone contain an IP address
...
4864. [bug] named acting as a slave for a catalog zone crashed if
the latter contained a master definition without an IP
address. [RT #45999 ]
(cherry picked from commit ae51a676c9 )
2018-01-15 20:52:54 +01:00
Tinderbox User
a853d87fc4
update copyright notice / whitespace
2018-01-13 23:48:14 +00:00
Mukund Sivaraman
929329d2d6
Fix various bugs reported by valgrind --tool=memcheck ( #46978 )
...
(cherry picked from commit f96133826e )
(cherry picked from commit 0374e1c3fd )
2018-01-13 11:47:46 +05:30
Tinderbox User
82ddae820c
update copyright notice / whitespace
2018-01-10 23:50:06 +00:00
Mark Andrews
ec29d217ba
4862. [bug] The rdata flags for RRSIG was not being properly set
...
when constructing a rdataslab. [RT #46978 ]
(cherry picked from commit 7befb67af4 )
2018-01-11 09:54:20 +11:00
Tinderbox User
5470c1cc10
update copyright notice / whitespace
2018-01-09 23:47:12 +00:00
Mark Andrews
afefd75473
4861. [bug] The isc_crc64 unit test was not endian independent.
...
[RT #46973 ]
(cherry picked from commit 0ce212b9f5 )
2018-01-10 09:46:54 +11:00
Mark Andrews
f0353a586c
4860. [bug] isc_int8_t should be signed char. [RT #46973 ]
...
(cherry picked from commit 21f708c88c )
2018-01-10 08:42:21 +11:00
Tinderbox User
dc2a85bed7
update copyright notice / whitespace
2018-01-04 23:46:19 +00:00
Mark Andrews
3b8a3c43a0
unconditionally typedef summarystat_t for coverity
...
(cherry picked from commit a0e66ef6dd )
2018-01-05 10:11:21 +11:00
Evan Hunt
7ff28f5bef
[v9_11] block validator deadlock and prevent use-after-free
...
4859. [bug] A loop was possible when attempting to validate
unsigned CNAME responses from secure zones;
this caused a delay in returning SERVFAIL and
also increased the chances of encountering
CVE-2017-3145. [RT #46839 ]
4858. [security] Addresses could be referenced after being freed
in resolver.c, causing an assertion failure.
(CVE-2017-3145) [RT #46839 ]
2018-01-03 19:19:46 -08:00
Tinderbox User
d2017ba188
update copyright notice / whitespace
2018-01-03 23:46:13 +00:00
Mark Andrews
33506bef10
missing newline in comment
...
(cherry picked from commit 7258b852cf )
2018-01-03 17:11:50 +11:00
Tinderbox User
09b9db3c91
update copyright notice / whitespace
2018-01-02 23:46:09 +00:00
Mark Andrews
c3237dec87
4852. [bug] Handle strftime() failing in isc_time_formatISO8601ms.
...
Add REQUIRE's and INSIST's to isc_time_formattimestamp,
isc_time_formathttptimestamp, isc_time_formatISO8601,
isc_time_formatISO8601ms. [RT #46892 ]
2018-01-02 10:46:41 +11:00
Tinderbox User
335466db9e
regen v9_11
2017-12-29 02:23:11 +00:00
Mark Andrews
3c3d824db7
initalize sigsize to zero; ATF_CHECK_EQ(sigsize, tsig.siglen);
...
(cherry picked from commit 9f61f6b46b )
2017-12-22 08:59:03 +11:00
Mark Andrews
0c38c73c4c
don't attempt to call isc_buffer_free(&buf) twice; don't attempt to call dns_message_destroy(&msg) twice; don't test for key != NULL
...
(cherry picked from commit cb8650d875 )
2017-12-12 13:24:59 +11:00
Mark Andrews
2d82ed9456
4842. [bug] Conditionally compile opensslecdsa_link.c to avoid
...
warnings about unused function. [RT #46790 ]
(cherry picked from commit 63459cdc05 )
2017-12-07 13:31:57 +11:00
Tinderbox User
a1cf2291a9
update copyright notice / whitespace
2017-12-06 23:46:07 +00:00