Evan Hunt
6cb5e36ca3
[master] Squashed commit of the following:
...
4561. [port] Silence a warning in strict C99 compilers. [RT #44414 ]
2017-02-01 17:31:11 -08:00
Tinderbox User
ed1f93cc24
update copyright notice / whitespace
2017-01-31 23:45:34 +00:00
Evan Hunt
a2bd99a959
[master] address portability issues
2017-01-30 16:52:18 -08:00
Mark Andrews
1d8995d226
add a REQUIRE to catch the NULL pointer dereference that triggered CVE-2017-3135
2017-01-31 11:20:03 +11:00
Evan Hunt
cd668ea57f
[master] change 4558 was incomplete
2017-01-30 14:10:30 -08:00
Tinderbox User
b5808abc69
update copyright notice / whitespace
2017-01-24 23:45:30 +00:00
Mark Andrews
3e9f874e1f
win32: add consts
2017-01-24 22:44:25 +11:00
Mark Andrews
25da687db7
4560. [bug] mdig: add -m option to enable memory debugging rather
...
than have in on all the time. [RT #44509 ]
4559. [bug] Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
was turned off. [RT #44509 ]
2017-01-24 17:48:31 +11:00
Mark Andrews
9f4bf43b79
4558. [bug] Synthesised CNAME before matching DNAME was still
...
being cached when it should have been. [RT #44318 ]
2017-01-24 17:40:12 +11:00
Evan Hunt
4f744a027f
[master] fix dig +ednsopt padding error
...
4556. [bug] Sending an EDNS Padding option using "dig
+ednsopt" could cause a crash in dig. [RT #44462 ]
2017-01-19 23:52:41 -08:00
Tinderbox User
6084b738bc
update copyright notice / whitespace
2017-01-14 23:45:36 +00:00
Mark Andrews
5dfa5221d5
4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
...
[RT #44336 ]
2017-01-14 13:12:00 +11:00
Tinderbox User
7b665158e9
update copyright notice / whitespace
2017-01-13 23:45:35 +00:00
Mark Andrews
b8eee0f48d
make e's declaration unconditional. [RT #44324 ]
2017-01-13 16:10:25 +11:00
Tinderbox User
a9e8198788
update copyright notice / whitespace
2017-01-12 23:45:41 +00:00
Evan Hunt
364f064837
[master] fix function/prototype mismatch in dns_dt_send()
2017-01-12 09:22:53 -08:00
Mark Andrews
d2e1b47d4f
4553. [bug] Named could deadlock there were multiple changes to
...
NSEC/NSEC3 parameters for a zone being processed at
the same time. [RT #42770 ]
2017-01-12 14:25:45 +11:00
Mark Andrews
7b9e28f1a5
4552. [bug] Named could trigger a assertion when sending notify
...
messages. [RT #44019 ]
2017-01-12 14:12:05 +11:00
Tinderbox User
052551c423
update copyright notice / whitespace
2017-01-10 23:45:34 +00:00
Evan Hunt
2e703d7b61
[master] expand the flags field in dns_master_style
...
4550. [cleanup] Increased the number of available master file
output style flags from 32 to 64. [RT #44043 ]
2017-01-10 10:40:47 -08:00
Tinderbox User
9748633ce6
update copyright notice / whitespace
2017-01-06 23:45:26 +00:00
Mark Andrews
ea7d5332a6
address memory leak [RT #44072 ]
2017-01-06 18:48:37 +11:00
Tinderbox User
f557aeef7c
update copyright notice / whitespace
2017-01-05 23:45:24 +00:00
Evan Hunt
6d25cd0502
[master] remove inline variable declaration (broke win32)
2017-01-04 11:17:06 -08:00
Evan Hunt
8dd5224034
[master] update libdns.def
2017-01-04 10:46:33 -08:00
Evan Hunt
5804332588
[master] EDNS padding and keepalive support
...
4549. [func] Added support for the EDNS TCP Keepalive option
(RFC 7828). [RT #42126 ]
4548. [func] Added support for the EDNS Padding option (RFC 7830).
[RT #42094 ]
2017-01-04 09:16:30 -08:00
Evan Hunt
185d680e1a
[master] add support for native pkcs11 on keyper
...
4547. [port] Add support for --enable-native-pkcs11 on the AEP
Keyper HSM. [RT #42463 ]
2017-01-03 16:42:18 -08:00
Tinderbox User
ed07d7a8f5
update copyright notice / whitespace
2016-12-30 23:46:36 +00:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Evan Hunt
b3aebb5890
[master] silence warning
2016-12-28 17:54:16 -08:00
Mark Andrews
6adf421e7e
4510. [security] Named mishandled some responses where covering RRSIG
...
records are returned without the requested data
resulting in a assertion failure. (CVE-2016-9147)
[RT #43548 ]
2016-12-29 11:47:19 +11:00
Mark Andrews
2c1c4b99a1
4508. [security] Named incorrectly tried to cache TKEY records which
...
could trigger a assertion failure when there was
a class mismatch. (CVE-2016-9131) [RT #43522 ]
2016-12-29 11:07:40 +11:00
Tinderbox User
4ef83f4333
update copyright notice / whitespace
2016-12-28 23:48:39 +00:00
Mark Andrews
f3bf3905c3
4517. [security] Named could mishandle authority sections that were
...
missing RRSIGs triggering an assertion failure.
(CVE-2016-9444) [RT # 43632]
(cherry picked from commit 1df30cfd27c5a3c57fce357c54aaf6c702227d51)
2016-12-29 10:39:51 +11:00
wpk
c4ecf87d21
[master] Remove spurious entry in lib/dns/win32/libdns.def.in
2016-12-28 19:21:36 +01:00
wpk
e910d18007
4545. [func] Make dnstap-read output more functionally usable.
...
[RT #43642 ]
4544. [func] Add message/payload size to dnstap-read YAML output.
[RT #43622 ]
2016-12-28 11:57:28 +01:00
Mark Andrews
6f94747270
4543. [bug] dns_client_startupdate now delays sending the update
...
request until isc_app_ctxrun has been called.
[RT #43976 ]
2016-12-28 15:50:22 +11:00
Tinderbox User
c43f150d0a
update copyright notice / whitespace
2016-12-26 23:46:20 +00:00
Mark Andrews
8e333f42ef
4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
...
[RT #43601 ]
2016-12-27 09:49:02 +11:00
Mark Andrews
762c4fc5a8
4539. [bug] Referencing a nonexistant zone with rpz could lead
...
to a assertion failure when configuring. [RT #43787 ]
2016-12-27 08:59:07 +11:00
Mark Andrews
aceabacdb8
4538. [bug] Call dns_client_startresolve from client->task.
...
[RT #43896 ]
2016-12-27 07:02:33 +11:00
Mark Andrews
e17d2f98be
if gen fails remove the file [RT #43949 ]
2016-12-23 09:19:31 +11:00
Mark Andrews
c1870d0e44
freeaddrinfo is called too early.
2016-12-15 09:38:12 +11:00
Tinderbox User
29916e6d7c
update copyright notice / whitespace
2016-12-13 23:46:28 +00:00
Mark Andrews
37a8db0ba4
4535. [bug] Address race condition in setting / testing of
...
DNS_REQUEST_F_SENDING. [RT #43889 ]
2016-12-14 10:31:26 +11:00
Mark Andrews
def6b33bad
4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879 ]
2016-12-13 16:27:18 +11:00
Mark Andrews
8ca45ba01a
4533. [bug] dns_client_update should terminate on prerequiste
...
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
and also on BADZONE. [RT #43865 ]
2016-12-13 15:47:03 +11:00
Mark Andrews
60cb462c56
4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
...
in responses resulting in SERVFAIL being returned.
[RT #43779 ]
2016-12-09 12:50:18 +11:00
Evan Hunt
f2c7ae114a
[master] silence DSCP probing error
...
4529. [cleanup] Silence noisy log warning when DSCP probe fails
due to firewall rules. [RT #43847 ]
2016-12-08 08:44:20 -08:00
Mark Andrews
c1619b8420
4528. [bug] Only set the flag bits for the i/o we are waiting
...
for on EPOLLERR or EPOLLHUP. [RT #43617 ]
2016-12-08 16:59:46 +11:00