upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-12 21:39:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

[v9_9] address race conditions with removing inline zones

Browse source 
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
(cherry picked from commit 927e4c9fec)
This commit is contained in:
Evan Hunt 2013-07-09 17:50:43 -07:00
parent 72cdd1b118
commit c2cb8c8fc0
10 changed files with 65 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGES
View file

@ -1,3 +1,6 @@
3513. [bug] named could crash when deleting inline-signing
zones with "rndc delzone". [RT #34066]
3611. [bug] Improved resistance to a theoretical authentication
attack based on differential timing. [RT #33939]

2
bin/named/server.c
View file

@ -8442,6 +8442,8 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
isc_buffer_add(text, n);
}
if (!first && isc_buffer_availablelength(text) > 0)
isc_buffer_putuint8(text, 0);
if (result == ISC_R_NOMORE)
result = ISC_R_SUCCESS;

7
bin/rndc/rndc.c
View file

@ -265,9 +265,10 @@ rndc_recvdone(isc_task_t *task, isc_event_t *event) {
progname, isc_result_totext(result));
result = isccc_cc_lookupstring(data, "text", &textmsg);
if (result == ISC_R_SUCCESS)
printf("%s\n", textmsg);
else if (result != ISC_R_NOTFOUND)
if (result == ISC_R_SUCCESS) {
if (strlen(textmsg) != 0U)
printf("%s\n", textmsg);
} else if (result != ISC_R_NOTFOUND)
fprintf(stderr, "%s: parsing response failed: %s\n",
progname, isc_result_totext(result));

4
bin/tests/system/inline/clean.sh
View file

@ -71,3 +71,7 @@ rm -f dig.out.ns*.test*
rm -f signing.out*
rm -f freeze.test*
rm -f thaw.test*
rm -f */*.nzf
rm -f ns3/test-?.bk
rm -f ns3/test-?.bk.signed
rm -f ns3/test-?.bk.signed.jnl

5
bin/tests/system/inline/ns2/named.conf
View file

@ -18,7 +18,9 @@
// NS2
controls { /* empty */ };
include "../../common/rndc.key";
controls { inet 10.53.0.2 port 9953 allow { any; } keys { rndc_key; }; };
options {
query-source address 10.53.0.2;
@ -31,6 +33,7 @@ options {
recursion no;
notify yes;
notify-delay 0;
allow-new-zones yes;
};
zone "bits" {

1
bin/tests/system/inline/ns3/named.conf
View file

@ -34,6 +34,7 @@ options {
notify yes;
try-tcp-refresh no;
notify-delay 0;
allow-new-zones yes;
};
zone "bits" {

13
bin/tests/system/inline/ns3/sign.sh
View file

@ -73,3 +73,16 @@ rm -f K${zone}.+*+*.private
keyname=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 768 -n zone $zone`
keyname=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 1024 -n zone -f KSK $zone`
$DSFROMKEY -T 1200 $keyname >> ../ns1/root.db
for s in a c d h k l m q z
do
zone=test-$s
keyname=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 768 -n zone $zone`
done
for s in b f i o p t v
do
zone=test-$s
keyname=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 768 -n zone $zone`
keyname=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 1024 -n zone -f KSK $zone`
done

16
bin/tests/system/inline/tests.sh
View file

@ -776,4 +776,20 @@ done
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
ret=0
echo "I:test add/del zone combinations"
for zone in a b c d e f g h i j k l m n o p q r s t u v w x y z
do
$RNDC -c ../common/rndc.conf -s 10.53.0.2 -p 9953 addzone test-$zone \
'{ type master; file "bits.db.in"; allow-transfer { any; }; };'
$DIG $DIGOPTS @10.53.0.2 -p 5300 test-$zone SOA > dig.out.ns2.$zone.test$n
grep "status: NOERROR," dig.out.ns2.$zone.test$n > /dev/null || { ret=1; cat dig.out.ns2.$zone.test$n; }
$RNDC -c ../common/rndc.conf -s 10.53.0.3 -p 9953 addzone test-$zone \
'{ type slave; masters { 10.53.0.2; }; file "'test-$zone.bk'"; inline-signing yes; auto-dnssec maintain; allow-transfer { any; }; };'
$RNDC -c ../common/rndc.conf -s 10.53.0.3 -p 9953 delzone test-$zone
done
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
exit $status

2
lib/dns/view.c
View file

@ -1427,6 +1427,8 @@ dns_viewlist_findzone(dns_viewlist_t *list, dns_name_t *name,
dns_zone_t **zp = NULL;;
REQUIRE(list != NULL);
REQUIRE(zonep != NULL && *zonep == NULL);
for (view = ISC_LIST_HEAD(*list);
view != NULL;
view = ISC_LIST_NEXT(view, link)) {

24
lib/dns/zone.c
View file

@ -7340,8 +7340,13 @@ zone_sign(dns_zone_t *zone) {
}
ZONEDB_LOCK(&zone->dblock, isc_rwlocktype_read);
dns_db_attach(zone->db, &db);
if (zone->db != NULL)
dns_db_attach(zone->db, &db);
ZONEDB_UNLOCK(&zone->dblock, isc_rwlocktype_read);
if (db == NULL) {
result = ISC_R_FAILURE;
goto failure;
}
result = dns_db_newversion(db, &version);
if (result != ISC_R_SUCCESS) {
@ -12891,12 +12896,16 @@ receive_secure_db(isc_task_t *task, isc_event_t *event) {
rawdb = ((struct secure_event *)event)->db;
isc_event_free(&event);
REQUIRE(inline_secure(zone));
dns_fixedname_init(&fname);
name = dns_fixedname_name(&fname);
dns_rdataset_init(&rdataset);
LOCK_ZONE(zone);
if (DNS_ZONE_FLAG(zone, DNS_ZONEFLG_EXITING) || !inline_secure(zone)) {
result = ISC_R_SHUTTINGDOWN;
goto unlock;
}
TIME_NOW(&loadtime);
if (zone->db != NULL) {
result = dns_db_getsoaserial(zone->db, NULL, &oldserial);
@ -12967,14 +12976,13 @@ receive_secure_db(isc_task_t *task, isc_event_t *event) {
/*
* Lock hierarchy: zmgr, zone, raw.
*/
LOCK_ZONE(zone);
if (inline_secure(zone))
LOCK_ZONE(zone->raw);
INSIST(zone != zone->raw);
LOCK_ZONE(zone->raw);
DNS_ZONE_SETFLAG(zone, DNS_ZONEFLG_NEEDNOTIFY);
result = zone_postload(zone, db, loadtime, ISC_R_SUCCESS);
zone_needdump(zone, 0); /* XXXMPA */
if (inline_secure(zone))
UNLOCK_ZONE(zone->raw);
UNLOCK_ZONE(zone->raw);
unlock:
UNLOCK_ZONE(zone);
failure: