Commit graph

10363 commits

Author SHA1 Message Date
Tinderbox User
5d52a1fe1b update copyright notice / whitespace 2017-04-24 23:46:02 +00:00
Evan Hunt
0d24df5c0b [v9_11] allow parallel make
4609.	[cleanup]	Rearrange makefiles to enable parallel execution
			(i.e. "make -j"). [RT #45078]
2017-04-23 23:04:34 -07:00
Evan Hunt
1ca2cf0243 [v9_11] update copyrights that had been missed recently 2017-04-23 17:07:59 -07:00
Mukund Sivaraman
5fb7dd046e Add missing types for non-threaded build
(cherry picked from commit b1568eeedc)
2017-04-22 19:59:59 +05:30
Evan Hunt
02989eceef [v9_11] openssl backward compatibility fix
4604.	[bug]		Don't use ERR_load_crypto_strings() when building
			with OpenSSL 1.1.0. [RT #45117]

(cherry picked from commit 4c31eda5e1)
2017-04-21 18:56:28 -07:00
Evan Hunt
0532602218 [v9_11] fix portability issue
(cherry picked from commit 8ee6a6afd8)
2017-04-21 18:16:16 -07:00
Evan Hunt
8b9c4592ed [v9_11] give threads unique names to assist debugging
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]

(cherry picked from commit d26ae7fc08)
2017-04-21 14:00:15 -07:00
Mukund Sivaraman
264e17e739 Reject incorrect RSA key lengths during key generation and and sign/verify context creation (#45043)
(cherry picked from commit 239e9dc81c)
2017-04-21 19:04:50 +05:30
Mukund Sivaraman
9a8b2b3ab3 Adjust RPZ trigger counts only when the entry being deleted exists (#43386)
(cherry picked from commit f23c10f925)
2017-04-21 17:13:45 +05:30
Mukund Sivaraman
eeb16584fb Fix inconsistencies in inline signing time comparisons (#42112)
(cherry picked from commit 4176d278e2)
2017-04-21 16:44:51 +05:30
Mukund Sivaraman
9540b42695 Ignore SHA-1 DS digest type when SHA-384 DS digest type is present (#45017)
(cherry picked from commit 5d01eab088)
2017-04-21 16:20:57 +05:30
Evan Hunt
527163f0e5 [v9_11] fix dispatch.c shutdown race
4952.	[bug]		A race condition on shutdown could trigger an
			assertion failure in dispatch.c. [RT #43822]

(cherry picked from commit 019132b70c)
2017-04-20 17:41:58 -07:00
Tinderbox User
d63ae51ba3 update copyright notice / whitespace 2017-04-20 23:46:08 +00:00
Mark Andrews
fd0d60b3a0 4587. [bug] named-checkzone failed to handle occulted data below
DNAMEs correctly. [RT #44877]

(cherry picked from commit 600b027731)
2017-04-20 13:29:53 +10:00
Mark Andrews
1bce43adcc 4585. [port] win32: Set CompileAS value. [RT #42474]
(cherry picked from commit 3742338a7b)
2017-04-20 12:42:39 +10:00
Mark Andrews
da4823c08a 4584. [bug] A number of memory usage statistics were not properly
reported when they exceeded 4G.  [RT #44750]

(cherry picked from commit ddac00e3e0)
2017-04-20 10:22:26 +10:00
Tinderbox User
dc524b82fc update copyright notice / whitespace 2017-04-17 23:46:03 +00:00
Evan Hunt
e2ab8249c4 [v9_11] fix out of tree build error
(cherry picked from commit 28cff4f924)
2017-04-17 14:31:50 -07:00
Tinderbox User
003e956a96 update copyright notice / whitespace 2017-03-24 23:46:02 +00:00
Mark Andrews
8c31a25f3f 4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
2017-03-25 02:01:10 +11:00
Mark Andrews
7fcbbd6fa9 4580. [bug] 4578 introduced a regression when handling CNAME to
referral below the current domain. [RT #44850]

(cherry picked from commit 638c7c635d)
2017-03-14 15:12:03 +11:00
Mark Andrews
c006cfc5a2 Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
2017-03-01 12:02:39 +11:00
Evan Hunt
559cbe04e7 [v9_11] remove unnecessary INSIST and prep 9.11.1rc2
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
2017-02-23 14:55:10 -08:00
Mark Andrews
fd71f5a87f dns_master_styleflags returns dns_masterstyle_flags_t 2017-02-20 17:38:56 +11:00
Mark Andrews
4acedf9e13 explicitly cast to (unsigned int) 2017-02-20 17:29:18 +11:00
Mark Andrews
1d0815a2b5 remove redundant $Id 2017-02-16 12:33:08 +11:00
Mark Andrews
ab92948efa record ranges; account for -P's 2017-02-16 12:20:59 +11:00
Evan Hunt
ece26dd7d7 [v9_11] fix build errors from inline macros (change 4565) 2017-02-06 10:42:31 -08:00
Evan Hunt
43769594c0 [v9_11] prep 9.11.1rc1 2017-02-04 22:30:16 -08:00
Tinderbox User
1617002c78 update copyright notice / whitespace 2017-02-04 23:46:08 +00:00
Evan Hunt
07b7a3eade [v9_11] store local and remote addresses in dnstap
4569.	[func]		Store both local and remote addresses in dnstap
			logging, and modify dnstap-read output format to
			print them. [RT #43595]

(cherry picked from commit 650b5e7592)
2017-02-03 17:11:06 -08:00
Tinderbox User
48ba8af30c update copyright notice / whitespace 2017-02-03 23:46:00 +00:00
Evan Hunt
a09e49f3f4 [v9_11] silence "unused value" warning
(cherry picked from commit f4d20b15a2)
2017-02-03 11:27:00 -08:00
Mark Andrews
a4240242cd remove outdated cvs $Id strings 2017-02-03 18:39:57 +11:00
Mark Andrews
4901f2c10b 4567. [port] Call getprotobyname and getservbyname prior to calling
chroot so that shared libraries get loaded. [RT #44537]

(cherry picked from commit c550e75ade)
2017-02-03 14:23:01 +11:00
Tinderbox User
e2ec0753ce update copyright notice / whitespace 2017-02-02 23:46:34 +00:00
Evan Hunt
8e9dbb6222 [v9_11] support autore in inline macro buffer functions
4565.	[cleanup]	The inline macro versions of isc_buffer_put*()
			did not implement automatic buffer reallocation.
			[RT #44216]

(cherry picked from commit 7769c92946)
2017-02-02 11:33:04 -08:00
Mark Andrews
da23e32e41 4563. [bug] Modified zones would occasionally fail to reload.
[RT #39424]

(cherry picked from commit dfe3068ef3)
2017-02-02 17:14:09 +11:00
Evan Hunt
18ab9a0a34 [v9_11] Squashed commit of the following:
4561.	[port]		Silence a warning in strict C99 compilers. [RT #44414]

(cherry picked from commit 6cb5e36ca3)
2017-02-01 17:31:22 -08:00
Tinderbox User
4269c36906 update copyright notice / whitespace 2017-01-31 23:46:16 +00:00
Evan Hunt
05fce8cfff [v9_11] address portability issues
(cherry picked from commit a2bd99a959)
2017-01-30 16:52:32 -08:00
Mark Andrews
c2c386119e add a REQUIRE to catch the NULL pointer dereference that triggered CVE-2017-3135
(cherry picked from commit 1d8995d226)
2017-01-31 11:21:09 +11:00
Evan Hunt
781f6daa74 [v9_11] change 4558 was incomplete
(cherry picked from commit cd668ea57f)
2017-01-30 14:11:17 -08:00
Tinderbox User
5688a47c15 update copyright notice / whitespace 2017-01-24 23:45:58 +00:00
Mark Andrews
832f5803f6 4560. [bug] mdig: add -m option to enable memory debugging rather
than have in on all the time. [RT #44509]

4559.   [bug]           Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
                        was turned off.  [RT #44509]

(cherry picked from commit 25da687db7)
2017-01-24 17:49:08 +11:00
Mark Andrews
4441328a1d 4558. [bug] Synthesised CNAME before matching DNAME was still
being cached when it should have been.  [RT #44318]

(cherry picked from commit 9f4bf43b79)
2017-01-24 17:41:17 +11:00
Tinderbox User
9b2743294c update copyright notice / whitespace 2017-01-14 23:46:06 +00:00
Mark Andrews
7bcba68b95 4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
[RT #44336]

(cherry picked from commit 5dfa5221d5)
2017-01-14 13:14:25 +11:00
Tinderbox User
00860eece0 update copyright notice / whitespace 2017-01-13 23:46:05 +00:00
Mark Andrews
1de3115e8c make e's declaration unconditional. [RT #44324]
(cherry picked from commit b8eee0f48d)
2017-01-13 16:10:39 +11:00