Evan Hunt
06e0d6bb12
[master] address rpz bugs
...
3877. [bug] Inserting and deleting parent and child nodes
in response policy zones could trigger an assertion
failure. [RT #36272 ]
2014-06-11 20:00:19 -07:00
Evan Hunt
8d8f9f7f86
[master] suppress unnecessary db lookups in DLZ redirect zones
...
3876. [bug] Improve efficiency of DLZ redirect zones by
suppressing unnecessary database lookups. [RT #35835 ]
2014-06-10 16:25:26 -07:00
Evan Hunt
7c9d11b654
[master] add print.h, CHANGES note
2014-06-10 08:54:16 -07:00
Mark Andrews
20dec973da
4. [test] Check that only "check-names master" is needed for
...
updates to be accepted.
2014-06-10 13:48:57 +10:00
Mark Andrews
3b187cad7a
3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210 ]
2014-06-10 09:32:43 +10:00
Mark Andrews
b16d99bac1
3872. [bug] Address issues found by static analysis. [RT #36209 ]
2014-06-10 09:17:15 +10:00
Mukund Sivaraman
79d27f505a
[35063] Don't publish an activated key automatically before its publish time
2014-06-04 14:31:42 +05:30
Mukund Sivaraman
84dc4b3e7e
[35942] Update random number generator to ChaCha based (and add tests)
...
Squashed commit of the following:
commit 219a904fea95c74016229b6f4436d4f09de1bfd0
Author: Evan Hunt <each@isc.org>
Date: Mon Jun 2 12:20:54 2014 -0700
[rt35942] style
commit 90bc77185e9798af4595989abb8698efef8c70d7
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 18:01:30 2014 +0530
Return p-value=0 when prerequisite (monobit) fails
commit 5594669728f1181a447616f60b835e4a043d1b21
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:44:25 2014 +0530
Print proportion of test sequences passing too
commit 9e94b67a4114651224a8285f7c4a7fb03907f376
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:34:03 2014 +0530
Check uniform distribution of p-values
commit acf911b32dd84ac1c30c57d8937cfeb6b3ff972f
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:17:39 2014 +0530
Check proportion of sequences passing a test
commit 7289eb441fc4ec623364ad882e22b240ba8da308
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 04:33:37 2014 +0530
Refactor common setup code into random_test()
No behavioral change is made.
commit 51feef3e08c233d34a6b8b9d25a72d43110b4eed
Author: Mukund Sivaraman <muks@isc.org>
Date: Sun Jun 1 17:31:57 2014 +0530
Fix binary rank computation
commit 0ea3c03dea353f309d13c38e26aa0abbffdcff2b
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 27 06:01:10 2014 +0530
Add binary matrix rank RNG test
commit eb4e7c53540ac97436d94714d30084907eeff01a
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 15:45:31 2014 +0530
Add function to find rank of a binary matrix
commit 1292a06e0e09ebd37d4ecf5337814951dcacc4a4
Author: Evan Hunt <each@isc.org>
Date: Thu May 29 16:21:51 2014 -0700
[rt35942] style; check whether we need libm for exp()
commit c19788e5a89235e937a5aedf2ebea50f33406609
Author: Evan Hunt <each@isc.org>
Date: Thu May 29 15:31:19 2014 -0700
[rt35942] incidental spelling error fixed
commit c833326ad0df21e2a8b35958e85ccc0a692e38be
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 29 11:34:37 2014 +0530
Revert "Add function to find rank of a binary matrix"
This reverts commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb.
This test will be added in RT#36125.
commit cf786a533d34fdcd9e1c5650356e56d33e93a29f
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 29 11:33:18 2014 +0530
Revert "Add binary matrix rank RNG test"
This reverts commit dd843b9ca84fa9af80ec39631152f82778f0b97c.
This test will be added in RT#36125.
commit dd843b9ca84fa9af80ec39631152f82778f0b97c
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 27 06:01:10 2014 +0530
Add binary matrix rank RNG test
commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 15:45:31 2014 +0530
Add function to find rank of a binary matrix
commit 313c30088d6ba933bde3abb920f2a6d16b9b77e1
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 13:38:44 2014 +0530
Add block frequency random test
commit 0d279c60ed3eabe52cf3e1435bf14ec62752536f
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 13:04:03 2014 +0530
Add preconditions from NIST spec
commit 7a6c5f2ce5078814d5cf0fea30596e58171174c1
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 12:51:03 2014 +0530
Add functions to use in RNG tests
commit 8c5cb5594f904f6669cdffaa364f799b4a2c6b58
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 22 00:26:10 2014 +0530
Add runs RNG test
commit 4882f078cc2596c0911066ffb783e4dd145a63ec
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 23:58:20 2014 +0530
Pre-compute bitcounts LUT
commit 896db3809fba2d9884a4a3a2fa847a73e007ad7f
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 23:30:23 2014 +0530
Fix the bit value being checked (this shouldn't affect the test)
commit b932cbb5dae39eb819db29cf9490fb51d59b7c56
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 19:35:12 2014 +0530
Add monobits RNG test
commit 7bef19fd8b095aa567a975ef5c97d5812162d92e
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 16:53:02 2014 +0530
Add API documentation
commit 54483f7feb64b5646dd1da45b1fd396e7d04b926
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 16:39:03 2014 +0530
Rename isc_rngctx_t to isc_rng_t
commit 7c5031b53555137a82c6b6218cd4dd5e95acf94d
Author: Evan Hunt <each@isc.org>
Date: Tue May 20 23:29:53 2014 -0700
[rt35942] use attach/detach with isc_rngctx_t
commit 8aabae5e09888e6af651ed27bd6b4e9f76334d55
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 20 18:32:42 2014 +0530
Move RNG from dispatch.c to libisc
commit e6d4ad4f389998b91d46e95e258cf420cb21d977
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 12 19:16:27 2014 +0530
Replace old arc4random with new ChaCha implementation from OpenBSD
2014-06-04 13:44:10 +05:30
Mark Andrews
93d4128dcd
3869. [doc] Document that in-view zones cannot be used for
...
response policy zones. [RT #35941 ]
2014-06-03 13:37:21 +10:00
Mark Andrews
50a7454174
3868. [bug] isc_mem_setwater incorrectly cleared hi_called
...
potentially leaving over memory cleaner running.
[RT #35270 ]
2014-06-02 16:31:42 +10:00
Evan Hunt
0cfb247368
[master] rndc nta
...
3867. [func] "rndc nta" can now be used to set a temporary
negative trust anchor, which disables DNSSEC
validation below a specified name for a specified
period of time (not exceeding 24 hours). This
can be used when validation for a domain is known
to be failing due to a configuration error on
the part of the domain owner rather than a
spoofing attack. [RT #29358 ]
2014-05-29 22:22:53 -07:00
Mark Andrews
fa6308bd57
3866. [bug] Named could die on disk full in generate_session_key.
...
[RT #36119 ]
2014-05-30 14:38:39 +10:00
Evan Hunt
a4d76e3f0b
[master] add CHANGES entry for RBT tests
2014-05-29 07:44:47 -07:00
Mark Andrews
3d75189141
3864. [bug] RPZ didn't work well when being used as forwarder.
...
[RT #36060 ]
2014-05-29 17:02:10 +10:00
Mark Andrews
800d25b848
3863. [bug] The "E" flag was missing from the query log as a
...
unintended side effect of code rearrangement to
support EDNS EXPIRE. [RT #36117 ]
2014-05-29 08:04:55 +10:00
Jeremy C. Reed
a6d48ae493
fix typo/misspellings in CHANGES
...
Not reviewed
2014-05-28 12:56:11 -05:00
Mark Andrews
9b819daddf
3862. [cleanup] Return immediately if we are not going to log the
...
message in ns_client_dumpmessage.
2014-05-27 12:16:04 +10:00
Mark Andrews
f7ae6c8fdd
add CVE-2014-3859
2014-05-26 09:43:00 +10:00
Mark Andrews
586d94eb74
3861. [security] Missing isc_buffer_availablelength check results
...
in a REQUIRE assertion when printing out a packet.
[RT #36078 ]
2014-05-25 12:39:03 +10:00
Mark Andrews
a569e1b321
3860. [bug] ioctl(DP_POLL) array size needs to be determined
...
at run time as it is limited to {OPEN_MAX}.
[RT #35878 ]
2014-05-23 13:05:23 +10:00
Mark Andrews
c6f7d2b5f1
placeholder
2014-05-23 11:30:58 +10:00
Mark Andrews
603a787083
3858. [bug] Disable GCC 4.9 "delete null pointer check".
...
[RT #35968 ]
2014-05-23 11:25:59 +10:00
Mark Andrews
ba586e9568
3857. [bug] Make it harder for a incorrect NOEDNS classification
...
to be made. [RT #36020 ]
2014-05-22 21:38:53 +10:00
Evan Hunt
570216f5a3
[master] grammar
2014-05-20 22:27:30 -07:00
Mark Andrews
a0f91e910b
3856. [bug] Configuring libjson without also configuring libxml
...
resulting in a REQUIRE assertion when retrieving
statistics using json. [RT #36009 ]
2014-05-21 12:06:00 +10:00
Mark Andrews
0fe0789181
3855. [bug] Limit smoothed round trip time aging to no more than
...
once a second. [RT #32909 ]
2014-05-21 10:08:52 +10:00
Tinderbox User
d319beb9d0
update copyright notice
2014-05-20 23:45:21 +00:00
Evan Hunt
ea58c563bc
[master] report unrecognized configure options
...
3854. [cleanup] Report unrecognized options, if any, in the final
configure summary. [RT #36014 ]
2014-05-20 15:31:14 -07:00
Mark Andrews
27b09ceb12
3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out
...
the handling of a rdataset with no records. [RT #35968 ]
2014-05-20 11:36:03 +10:00
Tinderbox User
104f0e51ac
update copyright notice
2014-05-16 23:45:21 +00:00
Evan Hunt
7f7d32d1e4
[master] change credit in change note
2014-05-16 07:18:19 -07:00
Evan Hunt
896f49f8bd
[master] increase and allow configuration of lwresd tasks/clients
...
3852. [func] Increase the default number of clients available
for servicing lightweight resolver queries, and
make them configurable via the "lwres-tasks" and
"lwres-clients" options. (Thanks to Tomas Hozza.)
[RT #35857 ]
2014-05-15 22:01:19 -07:00
Evan Hunt
6fa84a3e25
[master] enable libseccomp system call filtering
...
3851. [func] Allow libseccomp based system-call filtering
on Linux; use "configure --enable-seccomp" to
turn it on. Thanks to Loganaden Velvindron for
the contribution. [RT #35347 ]
2014-05-15 20:29:30 -07:00
Mark Andrews
ca84a056bd
3849. [doc] Alphabetized dig's +options. [RT #35992 ]
2014-05-15 16:57:41 +10:00
Mark Andrews
01f881c1c5
3849. [bug] Disabling forwarding could trigger a REQUIRE assertion.
...
[RT #35979 ]
2014-05-15 16:54:32 +10:00
Mark Andrews
a14fe85229
3848. [bug] Adjust 'statistics-channels specified but not effective'
...
error message to account for JSON support. [RT #36008 ]
2014-05-15 11:12:05 +10:00
Mark Andrews
5a8edcafd1
3847. [bug] 'configure --with-dlz-postgres' failed to fail when
...
there is not support available.
2014-05-14 17:20:14 +10:00
Mark Andrews
8114b0be01
remove reporter
2014-05-14 10:02:15 +10:00
Mark Andrews
05816676bb
3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
...
ixfr query. [RT #35980 ]
2014-05-14 09:59:02 +10:00
Mark Andrews
5cef2421bd
switch 3827 and 3828 change numbers
2014-05-13 22:13:24 +10:00
Mark Andrews
2922577217
placeholder
2014-05-13 21:59:13 +10:00
Mark Andrews
0e338b60cd
3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
...
[RT #35969 ]
Conflicts:
CHANGES
2014-05-13 21:57:40 +10:00
Francis Dupont
1b513b6120
CHANGES number conflict
2014-05-13 12:34:29 +02:00
Francis Dupont
761f60fc35
use vcredist_x64.exe for 64 bit Windows [ #35973 ]
2014-05-13 12:31:50 +02:00
Mark Andrews
2c172a42b3
3842. [bug] Adjust RRL log-only logging category. [RT #35945 ]
2014-05-11 10:59:42 +10:00
Mark Andrews
fe148bca7e
Add CVE-2014-3214 to change 3837
...
(cherry picked from commit 156d68fd2937d021ab343fca2d60c83a19b94c92)
2014-05-09 13:39:32 +10:00
Mark Andrews
faa01edd13
3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
...
[RT #35924 ]
2014-05-08 09:38:05 +10:00
Evan Hunt
1ea6e09c37
[master] check for arc4random_addrandom()
...
3840. [port] Check for arc4random_addrandom() before using it;
it's been removed from OpenBSD 5.5. [RT #35907 ]
2014-05-07 08:58:25 -07:00
Evan Hunt
60988462e5
[master] use posix-compatible shell in system tests
...
3839. [test] Use only posix-compatible shell in system tests.
[RT #35625 ]
2014-05-06 22:06:04 -07:00
Mark Andrews
d3ca5999fe
remove extraneous space
2014-05-06 11:50:29 +10:00