upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-20 17:42:09 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
29218 commits 18 branches 854 tags 440 MiB
Commit graph

29218 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ondřej Surý
bdae8ed097 Merge branch '1044-include-config.h-in-gen.c-v9_14' into 'v9_14' 
Resolve "gen fails to generate headers on Debian buster"

See merge request isc-projects/bind9!1976
 2019-05-29 04:44:33 -04:00
Ondřej Surý
f7050fc728 Use getconf LFS_{CFLAGS,LDFLAGS,LIBS} to get flags to compile lib/dns/gen 
On some systems (namely Debian buster armhf) the readdir() call fails
with `Value too large for defined data type` unless the
_FILE_OFFSET_BITS=64 is defined.  The correct way to fix this is to
get the appropriate compilation parameters from getconf system
interface.

(cherry picked from commit 4c7345bcb6)
 2019-05-29 10:30:39 +02:00
Ondřej Surý
a17eb8dec4 Exit the ./gen program on failed readdir() call 
(cherry picked from commit 05b7c08a16)
 2019-05-29 10:30:39 +02:00
Mark Andrews
477515fb09 Merge branch '1056-misleading-error-message-when-trying-to-build-without-python-support-v9_14' into 'v9_14' 
Resolve "Misleading error message when trying to build without Python support"

See merge request isc-projects/bind9!1965
 2019-05-27 00:13:27 -04:00
Mark Andrews
1ceef52e21 fix configire error message to say --without-python 
(cherry picked from commit d70bf76d80)
 2019-05-27 14:00:04 +10:00
Witold Krecicki
43f5b94da6 Merge branch '1046-deadlock-in-tcp-code-v9_14' into 'v9_14' 
Fix a possible deadlock in TCP accepting

See merge request isc-projects/bind9!1961
 2019-05-24 07:03:05 -04:00
Witold Kręcicki
000fdd8fa5 Fix a possible deadlock in TCP accepting 
Each network thread holds an array of locks, indexed by a hash
of fd. When we accept a connection we hold a lock in accepting thread.
We then generate the thread number and lock bucket for the new
connection socket - if we hit the same thread and lock bucket as
accepting socket we get a deadlock. Avoid this by checking if we're
in the same thread/lock bucket and not locking in this case.

(cherry picked from commit 75815c1581)
 2019-05-24 12:50:15 +02:00
Mark Andrews
0fc9c25cd8 Merge branch '1028-dig-trace-should-not-set-rd-0-norecurse-for-the-initial-root-hints-query-v9_14' into 'v9_14' 
Resolve "dig +trace should not set RD=0 (+norecurse) for the initial root hints query"

See merge request isc-projects/bind9!1955
 2019-05-22 02:31:22 -04:00
Mark Andrews
98de15b780 Recurse to find the root server list with 'dig +trace'. 
(cherry picked from commit e65d4989a1)
 2019-05-22 16:05:25 +10:00
Evan Hunt
4b21ee60b6 Merge branch 'each-document-bug-ids-v9_14' into 'v9_14' 
update README to explain gitlab numbers

See merge request isc-projects/bind9!1948
 2019-05-17 02:44:47 -04:00
Evan Hunt
1aabcfc725 update README to explain gitlab numbers 
(cherry picked from commit 45d76498d9)
 2019-05-16 23:44:16 -07:00
Ondřej Surý
9088679e85 Merge branch '1003-SO_REUSEPORT-tweaks-v9_14' into 'v9_14' 
Resolve "socket.c error 'SO_REUSEPORT' undeclared"

See merge request isc-projects/bind9!1947
 2019-05-17 01:58:56 -04:00
Ondřej Surý
2b343d1fc1 Use SO_REUSEPORT_LB on FreeBSD if available 
(cherry picked from commit 94cb73d96c)
 2019-05-17 07:45:21 +02:00
Ondřej Surý
5d8d65bfdc Add safeguard against the other usage of SO_REUSEPORT 
(cherry picked from commit 1c672367a0)
 2019-05-17 07:45:21 +02:00
Ondřej Surý
110beba49c Merge branch '984-remove-dead-code-in-pkcs11-keygen-c-v9_14' into 'v9_14' 
Resolve "Remove dead code in pkcs11-keygen.c"

See merge request isc-projects/bind9!1929
 2019-05-13 00:35:44 -04:00
Mark Andrews
b61d6cde83 remove dead code and unnecessary call to pkcs_C_GetAttributeValue 
(cherry picked from commit 2e4986e2c4)
 2019-05-13 11:22:33 +07:00
Ondřej Surý
f433202a5e Merge branch '899-remove-unspec-v9_14' into 'v9_14' 
Remove UNSPEC rrtype

See merge request isc-projects/bind9!1932
 2019-05-13 00:20:11 -04:00
Witold Kręcicki
0617148792 Remove UNSPEC rrtype 
(cherry picked from commit a8e2ca6f7d)
 2019-05-13 10:52:48 +07:00
Mark Andrews
7ad719f45a Merge branch '981-armv5-build-is-broken-v9_14' into 'v9_14' 
Resolve "armv5 build is broken"

See merge request isc-projects/bind9!1930
 2019-05-12 23:05:45 -04:00
Mark Andrews
4de58ee1c8 arm: just use the compiler's default yield support 
(cherry picked from commit f546769b8b)
 2019-05-13 12:19:26 +10:00
Tinderbox User
354cf1f66f Merge branch 'prep-release' into v9_14 2019-05-10 04:51:34 +00:00
Tinderbox User
d7862ea81c prep 9.14.2 2019-05-10 04:51:22 +00:00
Evan Hunt
092b9d3cba Merge branch 'fix-changes' into 'v9_14' 
fix change number

See merge request isc-projects/bind9!1924
 2019-05-10 00:02:25 -04:00
Evan Hunt
3b7bf9ecac fix change number 2019-05-09 21:00:54 -07:00
Evan Hunt
ddb09b8046 Merge branch '997-make-ntas-work-with-validating-forwarders-v9_14' into 'v9_14' 
Make NTAs work with validating forwarders

See merge request isc-projects/bind9!1922
 2019-05-09 23:51:13 -04:00
Michał Kępień
9ca0c63f1f Add CHANGES entry 
5219.	[bug]		Negative trust anchors did not work with "forward only;"
			to validating resolvers. [GL #997]

(cherry picked from commit 5be7c6f4b3)
 2019-05-09 20:37:37 -07:00
Michał Kępień
c6bf43a821 Make NTAs work with validating forwarders 
If named is configured to perform DNSSEC validation and also forwards
all queries ("forward only;") to validating resolvers, negative trust
anchors do not work properly because the CD bit is not set in queries
sent to the forwarders.  As a result, instead of retrieving bogus DNSSEC
material and making validation decisions based on its configuration,
named is only receiving SERVFAIL responses to queries for bogus data.
Fix by ensuring the CD bit is always set in queries sent to forwarders
if the query name is covered by an NTA.

(cherry picked from commit 5e80488270)
 2019-05-09 20:37:37 -07:00
Evan Hunt
90c4e778d5 Merge branch '958-improve-message-about-python-ply-v9_14' into 'v9_14' 
Improve the error message about missing PLY Python package

See merge request isc-projects/bind9!1919
 2019-05-09 23:16:34 -04:00
Ondřej Surý
31fbfe56fd Improve the error message about missing PLY Python package 
Previously, only a message about missing Python was printed, which was
misleading to many users.  The new message clearly states that Python
AND PLY is required and prints basic instructions how to install PLY
package.

(cherry picked from commit 55b48700da)
 2019-05-09 19:55:53 -07:00
Ondřej Surý
c3162ac196 Merge branch 'ondrej/reproducible-build-v9_14' into 'v9_14' 
Make lib/dns/gen.c compatible with reproducible builds.

See merge request isc-projects/bind9!1912
 2019-05-09 05:26:34 -04:00
Ondřej Surý
c10f361f44 Make lib/dns/gen.c compatible with reproducible builds. 
The gen.c will now use SOURCE_DATE_EPOCH[1] if found in environment
to make the build more reproducible build friendly.

1. https://reproducible-builds.org/specs/source-date-epoch/

(cherry picked from commit c8cb612d39)
 2019-05-09 16:05:12 +07:00
Mark Andrews
ace60a3daa Merge branch '960-add-edns-client-tag-and-edns-server-tag-v9_14' into 'v9_14' 
Resolve "Add EDNS Client Tag and EDNS Server Tag"

See merge request isc-projects/bind9!1910
 2019-05-09 04:39:06 -04:00
Mark Andrews
07f8daf536 Recognise EDNS Client Tag and EDNS Server Tag 
(cherry picked from commit ee7cf180b3)
 2019-05-09 18:19:29 +10:00
Evan Hunt
b31a9ce95d Merge branch '868-fix-trusted-keys-handling-with-dnssec-validation-auto-v9_14' into 'v9_14' 
fix incorrect behavior mixing trusted-keys with validation auto

See merge request isc-projects/bind9!1904
 2019-05-09 01:19:23 -04:00
Evan Hunt
bfd646795d CHANGES, release notes 2019-05-08 21:59:35 -07:00
Evan Hunt
9b59425d06 warn about the use of trusted-keys and managed-keys for the same name 2019-05-08 21:59:35 -07:00
Mark Andrews
80d946e90e Merge branch '899-totext-fromtext-fuzz-v9_14' into 'v9_14' 
fuzz dns_rdata_fromwire

See merge request isc-projects/bind9!1907
 2019-05-08 21:00:08 -04:00
Mark Andrews
228a50a3f3 dns_rdata_fromwire_text fuzzer 
Fuzz input to dns_rdata_fromwire(). Then convert the result
to text, back to wire format, to multiline text, and back to wire
format again, checking for consistency throughout the sequence.

(cherry picked from commit 8ffdf6759e)
 2019-05-09 10:46:21 +10:00
Mark Andrews
0ae562e2af Merge branch '852-bind-returning-malformed-packet-error-when-sshfp-record-has-fingerprint-value-less-than-4-characters-v9_14' into 'v9_14' 
Resolve "Bind returning malformed packet error when sshfp record has fingerprint value less than 4 characters"

See merge request isc-projects/bind9!1905
 2019-05-08 18:59:55 -04:00
Mark Andrews
7dd4fa9da3 enforce known SSHFP finger print lengths 
(cherry picked from commit 1722728c80)
 2019-05-09 08:48:28 +10:00
Mark Andrews
b99c0f93b1 Merge branch '991-provide-ixfr-should-only-be-tests-on-tcp-clients-v9_14' into 'v9_14' 
Resolve "provide-ixfr should only be tested on TCP clients."

See merge request isc-projects/bind9!1900
 2019-05-07 00:28:40 -04:00
Mark Andrews
7098238039 add CHANGES 
(cherry picked from commit ba1d7f3a07)
 2019-05-07 13:43:15 +10:00
Mark Andrews
227b49a830 add test for 'provide-ixfr no;' ; add forensics support 
(cherry picked from commit d547465af5)
 2019-05-07 13:43:14 +10:00
Mark Andrews
8c7052e1cf only test provideixfr if the transport is TCP 
(cherry picked from commit 18c49853e3)
 2019-05-07 13:43:14 +10:00
Mark Andrews
ea9083647e Merge branch '1005-filter-aaaa-crash-in-9-14-1-v9_14' into 'v9_14' 
Resolve "filter-aaaa crash in 9.14.1"

See merge request isc-projects/bind9!1899
 2019-05-06 21:19:35 -04:00
Mark Andrews
0b6a698320 add CHANGES 
(cherry picked from commit bdc66eb5d9)
 2019-05-07 11:07:32 +10:00
Mark Andrews
a0feec3dbc lock accesses to hash table 
(cherry picked from commit 2483a8c76d)
 2019-05-07 11:07:32 +10:00
Mark Andrews
dbbbed29e9 clear pointer before hash table 
(cherry picked from commit 4886701c03)
 2019-05-07 11:07:32 +10:00
Mark Andrews
b01ebf8168 Merge branch '983-delv-www-isc-org-any-rtrace-multiline-leaks-memory-v9_14' into 'v9_14' 
Resolve "'delv www.isc.org ANY +rtrace +multiline' leaks memory"

See merge request isc-projects/bind9!1896
 2019-05-06 20:39:34 -04:00
Mark Andrews
83310317c7 add CHANGES note 
(cherry picked from commit ce5520b695)
 2019-05-07 10:27:18 +10:00