Commit graph

10345 commits

Author SHA1 Message Date
Mark Andrews
23ac7e6634 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:13:40 +11:00
Mark Andrews
458e816ed0 4538. [bug] Call dns_client_startresolve from client->task.
[RT #43896]

(cherry picked from commit aceabacdb8)
2016-12-27 07:02:58 +11:00
Mark Andrews
641dede12a if gen fails remove the file [RT #43949]
(cherry picked from commit e17d2f98be)
2016-12-23 09:20:48 +11:00
Mark Andrews
b8e7abc50e freeaddrinfo is called too early.
(cherry picked from commit c1870d0e44)
2016-12-15 09:39:51 +11:00
Tinderbox User
8852646542 update copyright notice / whitespace 2016-12-13 23:47:43 +00:00
Mark Andrews
1160ea4c28 4535. [bug] Address race condition in setting / testing of
DNS_REQUEST_F_SENDING. [RT #43889]

(cherry picked from commit 37a8db0ba4)
2016-12-14 10:33:04 +11:00
Mark Andrews
348d80fb84 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:27:49 +11:00
Mark Andrews
45f206e6c1 4533. [bug] dns_client_update should terminate on prerequiste
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
2016-12-13 15:48:20 +11:00
Mark Andrews
d77cab69bf 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:09 +11:00
Evan Hunt
f1b29d8428 [v9_11] silence DSCP probing error
4529.	[cleanup]	Silence noisy log warning when DSCP probe fails
			due to firewall rules. [RT #43847]

(cherry picked from commit f2c7ae114a)
2016-12-08 08:44:44 -08:00
Mark Andrews
d0c5ff7f65 4528. [bug] Only set the flag bits for the i/o we are waiting
for on EPOLLERR or EPOLLHUP. [RT #43617]

(cherry picked from commit c1619b8420)
2016-12-08 17:00:37 +11:00
Tinderbox User
7911e6f9de regen v9_11 2016-12-07 01:09:50 +00:00
Mark Andrews
83a28ca274 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
(cherry picked from commit 1b8ce3b330)
2016-12-07 10:50:50 +11:00
Tinderbox User
9a4743fca8 update copyright notice / whitespace 2016-12-05 23:47:38 +00:00
Mark Andrews
5be93f5dff 4524. [bug] The net zero test was broken causing IPv4 servers
with addresses ending in .0 to be rejected. [RT #43776]

(cherry picked from commit df372d967e)
2016-12-05 10:47:38 +11:00
Mukund Sivaraman
6ae22c4119 Add doc function for cfg_type_querysource4 and cfg_type_querysource6 (#43768)
(cherry picked from commit 5c843b384d)
2016-12-02 11:17:14 +05:30
Mark Andrews
74d98566ed 4522. [bug] Handle big gaps in log file version numbers better.
[RT #38688]

(cherry picked from commit cab871f1bc)
2016-11-30 11:00:49 +11:00
Tinderbox User
2a2335a013 update copyright notice / whitespace 2016-11-29 23:47:26 +00:00
Mark Andrews
0c2d891abe 4520. [cleanup] Alphabetise more of the grammar when printing it
out. Fix unbalanced indenting. [RT #43755]

(cherry picked from commit 4352551d23)
2016-11-29 15:33:37 +11:00
Mark Andrews
fd017eea63 4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
(cherry picked from commit a611e44f9a)
2016-11-29 11:29:23 +11:00
Mark Andrews
6ef1cdec9a 4516. [bug] isc_socketmgr_renderjson was missing from the
windows build. [RT #43602]

(cherry picked from commit 358c6ecd26)
2016-11-22 12:08:26 +11:00
Mark Andrews
e0f1907562 locks are only need in OpenSSL < 1.1 2016-11-09 10:06:34 +11:00
Mark Andrews
704f73353d only call dns_test_begin once
(cherry picked from commit f13c7b01746a07bef87a386ceff93ccb2a7488a9)
(cherry picked from commit 56c6fc0dac)
2016-11-09 10:03:47 +11:00
Mark Andrews
a135cb62d3 remove spurious newline [RT #43585]
(cherry picked from commit fed2f7e4c1)
2016-11-09 08:27:27 +11:00
Evan Hunt
0fdb1e5cb7 [v9_11] typo in comment 2016-11-08 09:06:30 -08:00
Tinderbox User
9ab989b88c update copyright notice / whitespace 2016-11-02 23:48:10 +00:00
Mark Andrews
68770381db add dns_db_getsize, dns_rdataslab_count, dns_zone_getmaxrecords, dns_zone_setmaxrecords
(cherry picked from commit aee76db9e3)
2016-11-03 09:48:40 +11:00
Mark Andrews
744c1db635 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 09:48:26 +11:00
Evan Hunt
b7ae121eff [v9_11] typo 2016-11-02 09:43:01 -07:00
Francis Dupont
66f169daf5 Fixed IP_PMTUDISC_OMIT typos 2016-11-02 09:19:45 +01:00
Mark Andrews
2ea4ed1726 remove review fprintf
(cherry picked from commit a0caf66c97)
2016-11-02 18:04:20 +11:00
Mark Andrews
6db55b4ff9 4507. [bug] Name could incorrectly log 'allows updates by IP
address, which is insecure' [RT #43432]

(cherry picked from commit 2b2b85c897)
2016-11-02 17:54:37 +11:00
Mark Andrews
2ac8829a8a 4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
(cherry picked from commit a61f252391)
2016-11-02 17:40:27 +11:00
Evan Hunt
e1477f467f [v9_11] restore dropped #else block 2016-11-01 22:34:45 -07:00
Evan Hunt
8a5809527e [v9_11] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:17:23 -07:00
Mark Andrews
bd19cef223 4502. [func] Report multiple and experimental options when printing
grammar. [RT #43134]

(cherry picked from commit 89286906dc)
2016-11-02 12:50:39 +11:00
Mark Andrews
a0e34c90ea 4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
(cherry picked from commit e200da5044)
2016-11-02 08:46:39 +11:00
Evan Hunt
669e108d67 [v9_11] use arc4random_stir() when available
4499.	[port]		MacOSX: silence deprecated function warning
			by using arc4random_stir() when available
			instead of arc4random_addrandom(). [RT #43503]

(cherry picked from commit 3fb62a5a4e)
2016-11-01 14:00:54 -07:00
Evan Hunt
6552f33198 [v9_11] 4496. [func] dig: add +idnout to control whether labels are
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]

(cherry picked from commit 42470b0b87)
2016-10-31 20:17:28 -07:00
Mark Andrews
880fce6a74 add more LIBRESSL_VERSION_NUMBER checks
(cherry picked from commit 429b543086)
2016-11-01 12:37:29 +11:00
Mark Andrews
395fe33465 add more LIBRESSL_VERSION_NUMBER checks
(cherry picked from commit 3d38cfaf8a)
2016-11-01 12:25:03 +11:00
Mark Andrews
83baacd8ff update spelling in comment
(cherry picked from commit ace79092b3)
2016-11-01 10:51:53 +11:00
Tinderbox User
e356a7622a update copyright notice / whitespace 2016-10-30 23:47:21 +00:00
Mark Andrews
76af83c9ad 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
(cherry picked from commit 1fce0951ed)
2016-10-31 10:05:55 +11:00
Mark Andrews
c29c3e51b1 update copyrights 2016-10-28 11:28:44 +11:00
Mark Andrews
fb9cdee4af 4495. [bug] A isc_mutex_init call was it being checked. [RT #43391]
(cherry picked from commit f21645e137)
2016-10-28 11:15:18 +11:00
Francis Dupont
afa016c3c1 Merged rt43345 libisccfg spuriously depended on libisccc 2016-10-27 14:08:10 +02:00
Mark Andrews
d389069a39 4492. [bug] irs_resconf_load failed to initialise sortlistnxt
causing bad writes if resolv.conf contained a
                        sortlist directive. [RT #43459]

(cherry picked from commit 55b78fff62)
2016-10-27 13:18:47 +11:00
Mark Andrews
fd2f4551d9 4491. [bug] Improve message emitted when testing whether sendmsg
works with TOS/TCLASS fails. [RT #43483]

(cherry picked from commit 8eaf918adf)
2016-10-27 09:02:36 +11:00
Mark Andrews
c5e8808e35 4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
(cherry picked from commit 3b7cb2c5b1)
2016-10-21 22:44:42 +11:00
Mark Andrews
7c66fc9700 4489. [security] It was possible to trigger assertions when processing
a response. (CVE-2016-8864) [RT #43465]

(cherry picked from commit bd6f27f5c3)
2016-10-21 14:56:20 +11:00
Witold Krecicki
cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Tinderbox User
452a97a23d update copyright notice / whitespace 2016-10-11 23:47:26 +00:00
Mark Andrews
d2605df7e9 fix typo
(cherry picked from commit 6bb84df34d)
2016-10-11 17:05:57 +11:00
Mark Andrews
321f87f8ea don't require lctx to be non NULL
(cherry picked from commit 3793d848bd)
2016-10-11 17:03:16 +11:00
Mark Andrews
802e0662ef 4483. [func] Check prefixes in acls to make sure the address and
prefix lengths are consistent.  Warn only in
                        BIND 9.11 and earlier. [RT #43367]
2016-10-11 15:03:24 +11:00
Mark Andrews
af9b975ccc 4482. [bug] Address use before require check and remove extraneous
dns_message_gettsigkey call in dns_tsig_sign.
                        [RT #43374]

(cherry picked from commit 61463ab7a4)
2016-10-11 14:41:01 +11:00
Evan Hunt
94694e720a [v9_11] add cfg_parse_buffer3() function with linenum parameter
4482.	[cleanup]	Change #4455 was incomplete. [RT #43252]

(cherry picked from commit 676ac3cc82)
2016-10-10 17:12:30 -07:00
Tinderbox User
b9e0ed731a update copyright notice / whitespace 2016-10-05 23:46:11 +00:00
Mark Andrews
82a50a619a 4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
getprotobyname and getservbyname work.  [RT #43197]
2016-10-05 12:29:00 +11:00
Mark Andrews
2f1c460bea 4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
(cherry picked from commit fe4d0fbc7c)
2016-10-05 12:20:46 +11:00
Witold Krecicki
62f3453730 [master] Fix a minor bug in isc_netaddr_masktoprefixlen
(cherry picked from commit f78603b534)
2016-10-05 09:07:17 +11:00
Mark Andrews
47f8b47b8d 9.11.0rc3 2016-09-20 21:19:46 +10:00
Mark Andrews
db9781d4a2 4468. [bug] Address ECS option handling issues. [RT #43191]
(cherry picked from commit df17290113)
2016-09-14 08:23:07 +10:00
Mark Andrews
8269f06a0f 9.11.0rc2 2016-09-09 15:38:24 +10:00
Mark Andrews
700d3cb789 4467. [security] It was possible to trigger a assertion when rendering
a message. [RT #43139]

(cherry picked from commit 2bd0922cf9)
2016-09-09 11:31:59 +10:00
Mark Andrews
f024476161 4466. [bug] Interface scanning didn't work on a Windows system
without a non local IPv6 addresses. [RT #43130]

(cherry picked from commit 61ca100b80)
2016-09-08 14:26:09 +10:00
Mark Andrews
6aaf3d01a1 4462. [bug] Don't describe a returned EDNS COOKIE as "good"
when there isn't a valid server cookie. [RT #43167]

(cherry picked from commit 58d622d96d)
2016-09-08 11:35:11 +10:00
Mark Andrews
e51ba26500 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]

(cherry picked from commit 8eceb0bffe)
2016-09-07 14:14:40 +10:00
Mark Andrews
f51c0bba70 silence unused variable 'pollstate' warning [RT #43109]
(cherry picked from commit 9d11e46714)
2016-08-30 14:26:17 +10:00
Mukund Sivaraman
ce78690029 Update assertions to be more correct, and also remove use of a reserved word (#43090)
Note: this doesn't actually fix #43090.
(cherry picked from commit becac651e8)
2016-08-29 18:54:02 +05:30
Mark Andrews
d102ab1b84 4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
(cherry picked from commit c55b572ccf)
2016-08-29 10:16:30 +10:00
Mark Andrews
d6fa26d0ad 4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
[RT #42587]

(cherry picked from commit 63fe88e8d8)
2016-08-26 15:14:32 +10:00
Mark Andrews
1f65db3778 add isc_lex_setsourceline 2016-08-26 03:16:08 +00:00
Evan Hunt
f503aa345b [v9_11] pass source file and line to dyndb load function
4455.	[cleanup]	Allow dyndb modules to correctly log the filename
			and line number when processing configuration text
			from named.conf. [RT #43050]

(cherry picked from commit 02fb764681)
2016-08-25 18:09:45 -07:00
Tinderbox User
a3253fb44c update copyright notice / whitespace 2016-08-25 23:46:16 +00:00
Mark Andrews
6f36f2f7b8 rename ioqversion -> generation; move increment before fstrm_iothr_destroy
(cherry picked from commit 7535dd93a1)
2016-08-25 12:07:34 +10:00
Mark Andrews
7df3f06c0b 4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
(cherry picked from commit 726cddb564)
2016-08-25 10:05:07 +10:00
Mark Andrews
d1cacbb374 4453. [bug] Prefetching of DS records failed to update their
RRSIGs. [RT #42865]

(cherry picked from commit f431bf02a6)
2016-08-25 09:53:50 +10:00
Mark Andrews
a8cfd15880 update copyrights / whitespace 2016-08-23 09:50:22 +10:00
Evan Hunt
0b756d60e5 [v9_11] Added print.h include
(cherry picked from commit 76a3f42977)
2016-08-22 09:07:56 -07:00
Evan Hunt
22913d088f [v9_11] Merged rt43077 (new RSA verify unit test)
(cherry picked from commit fc41d120f0)
2016-08-22 09:07:52 -07:00
Evan Hunt
5026ac37c1 [v9_11] Merged rt43076 (log PKCS#11 provider load failure)
(cherry picked from commit 2f08617da9)
2016-08-22 09:07:45 -07:00
Witold Krecicki
892f238ace Prep for 9.11.0rc1 2016-08-19 11:34:11 +02:00
Francis Dupont
8425f3717a Fixed trivial typo
(cherry picked from commit fcb2309a9a)
2016-08-19 11:43:27 +10:00
Tinderbox User
7e09576b77 update copyright notice / whitespace 2016-08-19 01:23:39 +00:00
Evan Hunt
11435e83c6 [v9_11] clarify README.site
(cherry picked from commit 6d2963e4d4)
2016-08-18 17:52:56 -07:00
Mark Andrews
c40906dfad 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:05:47 +10:00
Mark Andrews
0350f56110 install isc/errno.h
(cherry picked from commit dec17fb662)
2016-08-18 22:12:49 +10:00
Mark Andrews
e8c70b0c35 4448. [bug] win32: ::1 was not being found when iterating
interfaces. [RT #42993]

(cherry picked from commit 6e4788dd12)
2016-08-18 21:59:45 +10:00
Mark Andrews
e722a7f2eb add dns_dt_getstats
(cherry picked from commit 81ace51190)
2016-08-18 12:22:14 +10:00
Mark Andrews
7204d08a31 4447. [tuning] Allow the fstrm_iothr_init() options to be set using
named.conf to control how dnstap manages the data
                        flow. [RT #42974]

(cherry picked from commit 934837913f)
2016-08-18 11:16:58 +10:00
Evan Hunt
6ce5279d0f [v9_11] check for STALE rdatasets in cache search
4446.	[bug]		The cache_find() and _findrdataset() functions
			could find rdatasets that had been marked stale.
			[RT #42853]

(cherry picked from commit 46e7763d19)
2016-08-17 11:44:41 -07:00
Evan Hunt
f5898cf348 [v9_11] fix dyndb issues; isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]

4444.	[bug]		Fixed some issues related to dyndb: A bug caused
			braces to be omitted when passing configuration text
			from named.conf to a dyndb driver, and there was a
			use-after-free in the sample dyndb driver. [RT #43050]

Patch for dyndb driver submitted by Petr Spacek at Red Hat.

(cherry picked from commit 3390d74e33)
2016-08-17 11:39:42 -07:00
Mark Andrews
a5c76d926c use explict casts to silence truncation warnings
(cherry picked from commit 4cb2ad343f)
2016-08-16 12:29:32 +10:00
Mark Andrews
c27c710939 4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
TCP sockets. [RT #42864]

(cherry picked from commit 7872d4d1c0)
2016-08-16 07:42:53 +10:00
Mark Andrews
4d09627fde don't return void
(cherry picked from commit 42a14518ac)
2016-08-16 07:37:10 +10:00
Mukund Sivaraman
4e9a1ad226 Fix RPZ CIDR tree insertion bug (#43035)
(cherry picked from commit 131307a70e)
2016-08-15 17:07:50 +05:30
Tinderbox User
911c11bf4b update copyright notice / whitespace 2016-08-12 23:45:53 +00:00
Mark Andrews
c5342425ea 4440. [func] Enable TCP fast open support when available on the
server side. [RT #42866]

(cherry picked from commit a977bc4c8e)
2016-08-12 15:32:00 +10:00