From 5470ba8d2b0f4487d33688ae2c4eefed6459cf61 Mon Sep 17 00:00:00 2001 From: Mukund Sivaraman Date: Thu, 21 May 2015 20:46:55 +0530 Subject: [PATCH] Update notes.xml and CHANGES for #39567 (cherry picked from commit 72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95) --- CHANGES | 13 +++++++++---- doc/arm/notes.xml | 13 +++++++------ 2 files changed, 16 insertions(+), 10 deletions(-) diff --git a/CHANGES b/CHANGES index a6a0a213b1..c6da7d67ca 100644 --- a/CHANGES +++ b/CHANGES @@ -3,10 +3,15 @@ unexpected action could be taken. This has been corrected. [RT #39481] -4121. [bug] When updating a response-policy zone via AXFR, - summary data about other policy zones could fall - out of sync. Ultimately this could trigger an - assertion failure in rpz.c. [RT #39567] +4121. [bug] On servers with one or more policy zones + configured as slaves, if a policy zone updated + during regular operation (rather than at + startup) using a full zone reload, such as via + AXFR, a bug could allow the RPZ summary data to + fall out of sync, potentially leading to an + assertion failure in rpz.c when further + incremental updates were made to the zone, such + as via IXFR. [RT #39567] 4120. [bug] A bug in RPZ could cause the server to crash if policy zones were updated while recursion was diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 1da3580dd7..22c2019027 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -152,12 +152,13 @@ - On servers with more than one policy zone configured, - if one policy zone was updated via AXFR (especially when - the zone was very large) a race condition could allow the - RPZ summary data to fall out of sync with the policy zones, - potentially leading to an assertion failure in rpz.c. - [RT #39567] + On servers with one or more policy zones configured as + slaves, if a policy zone updated during regular operation + (rather than at startup) using a full zone reload, such as + via AXFR, a bug could allow the RPZ summary data to fall out + of sync, potentially leading to an assertion failure in + rpz.c when further incremental updates were made to the + zone, such as via IXFR. [RT #39567]