Commit graph

4498 commits

Author SHA1 Message Date
Evan Hunt
06e0d6bb12 [master] address rpz bugs
3877.	[bug]		Inserting and deleting parent and child nodes
			in response policy zones could trigger an assertion
			failure. [RT #36272]
2014-06-11 20:00:19 -07:00
Evan Hunt
8d8f9f7f86 [master] suppress unnecessary db lookups in DLZ redirect zones
3876.	[bug]		Improve efficiency of DLZ redirect zones by
			suppressing unnecessary database lookups. [RT #35835]
2014-06-10 16:25:26 -07:00
Evan Hunt
7c9d11b654 [master] add print.h, CHANGES note 2014-06-10 08:54:16 -07:00
Mark Andrews
20dec973da 4. [test] Check that only "check-names master" is needed for
updates to be accepted.
2014-06-10 13:48:57 +10:00
Mark Andrews
3b187cad7a 3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210] 2014-06-10 09:32:43 +10:00
Mark Andrews
b16d99bac1 3872. [bug] Address issues found by static analysis. [RT #36209] 2014-06-10 09:17:15 +10:00
Mukund Sivaraman
79d27f505a [35063] Don't publish an activated key automatically before its publish time 2014-06-04 14:31:42 +05:30
Mukund Sivaraman
84dc4b3e7e [35942] Update random number generator to ChaCha based (and add tests)
Squashed commit of the following:

commit 219a904fea95c74016229b6f4436d4f09de1bfd0
Author: Evan Hunt <each@isc.org>
Date:   Mon Jun 2 12:20:54 2014 -0700

    [rt35942] style

commit 90bc77185e9798af4595989abb8698efef8c70d7
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 18:01:30 2014 +0530

    Return p-value=0 when prerequisite (monobit) fails

commit 5594669728f1181a447616f60b835e4a043d1b21
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:44:25 2014 +0530

    Print proportion of test sequences passing too

commit 9e94b67a4114651224a8285f7c4a7fb03907f376
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:34:03 2014 +0530

    Check uniform distribution of p-values

commit acf911b32dd84ac1c30c57d8937cfeb6b3ff972f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:17:39 2014 +0530

    Check proportion of sequences passing a test

commit 7289eb441fc4ec623364ad882e22b240ba8da308
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 04:33:37 2014 +0530

    Refactor common setup code into random_test()

    No behavioral change is made.

commit 51feef3e08c233d34a6b8b9d25a72d43110b4eed
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun Jun 1 17:31:57 2014 +0530

    Fix binary rank computation

commit 0ea3c03dea353f309d13c38e26aa0abbffdcff2b
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit eb4e7c53540ac97436d94714d30084907eeff01a
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 1292a06e0e09ebd37d4ecf5337814951dcacc4a4
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 16:21:51 2014 -0700

    [rt35942] style; check whether we need libm for exp()

commit c19788e5a89235e937a5aedf2ebea50f33406609
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 15:31:19 2014 -0700

    [rt35942] incidental spelling error fixed

commit c833326ad0df21e2a8b35958e85ccc0a692e38be
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:34:37 2014 +0530

    Revert "Add function to find rank of a binary matrix"

    This reverts commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb.

    This test will be added in RT#36125.

commit cf786a533d34fdcd9e1c5650356e56d33e93a29f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:33:18 2014 +0530

    Revert "Add binary matrix rank RNG test"

    This reverts commit dd843b9ca84fa9af80ec39631152f82778f0b97c.

    This test will be added in RT#36125.

commit dd843b9ca84fa9af80ec39631152f82778f0b97c
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 313c30088d6ba933bde3abb920f2a6d16b9b77e1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:38:44 2014 +0530

    Add block frequency random test

commit 0d279c60ed3eabe52cf3e1435bf14ec62752536f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:04:03 2014 +0530

    Add preconditions from NIST spec

commit 7a6c5f2ce5078814d5cf0fea30596e58171174c1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 12:51:03 2014 +0530

    Add functions to use in RNG tests

commit 8c5cb5594f904f6669cdffaa364f799b4a2c6b58
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 22 00:26:10 2014 +0530

    Add runs RNG test

commit 4882f078cc2596c0911066ffb783e4dd145a63ec
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:58:20 2014 +0530

    Pre-compute bitcounts LUT

commit 896db3809fba2d9884a4a3a2fa847a73e007ad7f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:30:23 2014 +0530

    Fix the bit value being checked (this shouldn't affect the test)

commit b932cbb5dae39eb819db29cf9490fb51d59b7c56
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 19:35:12 2014 +0530

    Add monobits RNG test

commit 7bef19fd8b095aa567a975ef5c97d5812162d92e
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:53:02 2014 +0530

    Add API documentation

commit 54483f7feb64b5646dd1da45b1fd396e7d04b926
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:39:03 2014 +0530

    Rename isc_rngctx_t to isc_rng_t

commit 7c5031b53555137a82c6b6218cd4dd5e95acf94d
Author: Evan Hunt <each@isc.org>
Date:   Tue May 20 23:29:53 2014 -0700

    [rt35942] use attach/detach with isc_rngctx_t

commit 8aabae5e09888e6af651ed27bd6b4e9f76334d55
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 20 18:32:42 2014 +0530

    Move RNG from dispatch.c to libisc

commit e6d4ad4f389998b91d46e95e258cf420cb21d977
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 12 19:16:27 2014 +0530

    Replace old arc4random with new ChaCha implementation from OpenBSD
2014-06-04 13:44:10 +05:30
Mark Andrews
93d4128dcd 3869. [doc] Document that in-view zones cannot be used for
response policy zones. [RT #35941]
2014-06-03 13:37:21 +10:00
Mark Andrews
50a7454174 3868. [bug] isc_mem_setwater incorrectly cleared hi_called
potentially leaving over memory cleaner running.
                        [RT #35270]
2014-06-02 16:31:42 +10:00
Evan Hunt
0cfb247368 [master] rndc nta
3867.	[func]		"rndc nta" can now be used to set a temporary
			negative trust anchor, which disables DNSSEC
			validation below a specified name for a specified
			period of time (not exceeding 24 hours).  This
			can be used when validation for a domain is known
			to be failing due to a configuration error on
			the part of the domain owner rather than a
			spoofing attack. [RT #29358]
2014-05-29 22:22:53 -07:00
Mark Andrews
fa6308bd57 3866. [bug] Named could die on disk full in generate_session_key.
[RT #36119]
2014-05-30 14:38:39 +10:00
Evan Hunt
a4d76e3f0b [master] add CHANGES entry for RBT tests 2014-05-29 07:44:47 -07:00
Mark Andrews
3d75189141 3864. [bug] RPZ didn't work well when being used as forwarder.
[RT #36060]
2014-05-29 17:02:10 +10:00
Mark Andrews
800d25b848 3863. [bug] The "E" flag was missing from the query log as a
unintended side effect of code rearrangement to
                        support EDNS EXPIRE. [RT #36117]
2014-05-29 08:04:55 +10:00
Jeremy C. Reed
a6d48ae493 fix typo/misspellings in CHANGES
Not reviewed
2014-05-28 12:56:11 -05:00
Mark Andrews
9b819daddf 3862. [cleanup] Return immediately if we are not going to log the
message in ns_client_dumpmessage.
2014-05-27 12:16:04 +10:00
Mark Andrews
f7ae6c8fdd add CVE-2014-3859 2014-05-26 09:43:00 +10:00
Mark Andrews
586d94eb74 3861. [security] Missing isc_buffer_availablelength check results
in a REQUIRE assertion when printing out a packet.
                        [RT #36078]
2014-05-25 12:39:03 +10:00
Mark Andrews
a569e1b321 3860. [bug] ioctl(DP_POLL) array size needs to be determined
at run time as it is limited to {OPEN_MAX}.
                        [RT #35878]
2014-05-23 13:05:23 +10:00
Mark Andrews
c6f7d2b5f1 placeholder 2014-05-23 11:30:58 +10:00
Mark Andrews
603a787083 3858. [bug] Disable GCC 4.9 "delete null pointer check".
[RT #35968]
2014-05-23 11:25:59 +10:00
Mark Andrews
ba586e9568 3857. [bug] Make it harder for a incorrect NOEDNS classification
to be made. [RT #36020]
2014-05-22 21:38:53 +10:00
Evan Hunt
570216f5a3 [master] grammar 2014-05-20 22:27:30 -07:00
Mark Andrews
a0f91e910b 3856. [bug] Configuring libjson without also configuring libxml
resulting in a REQUIRE assertion when retrieving
                        statistics using json. [RT #36009]
2014-05-21 12:06:00 +10:00
Mark Andrews
0fe0789181 3855. [bug] Limit smoothed round trip time aging to no more than
once a second. [RT #32909]
2014-05-21 10:08:52 +10:00
Tinderbox User
d319beb9d0 update copyright notice 2014-05-20 23:45:21 +00:00
Evan Hunt
ea58c563bc [master] report unrecognized configure options
3854.	[cleanup]	Report unrecognized options, if any, in the final
                        configure summary. [RT #36014]
2014-05-20 15:31:14 -07:00
Mark Andrews
27b09ceb12 3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out
the handling of a rdataset with no records. [RT #35968]
2014-05-20 11:36:03 +10:00
Tinderbox User
104f0e51ac update copyright notice 2014-05-16 23:45:21 +00:00
Evan Hunt
7f7d32d1e4 [master] change credit in change note 2014-05-16 07:18:19 -07:00
Evan Hunt
896f49f8bd [master] increase and allow configuration of lwresd tasks/clients
3852.	[func]		Increase the default number of clients available
			for servicing lightweight resolver queries, and
			make them configurable via the "lwres-tasks" and
			"lwres-clients" options.  (Thanks to Tomas Hozza.)
			[RT #35857]
2014-05-15 22:01:19 -07:00
Evan Hunt
6fa84a3e25 [master] enable libseccomp system call filtering
3851.	[func]		Allow libseccomp based system-call filtering
			on Linux; use "configure --enable-seccomp" to
			turn it on.  Thanks to Loganaden Velvindron for
			the contribution. [RT #35347]
2014-05-15 20:29:30 -07:00
Mark Andrews
ca84a056bd 3849. [doc] Alphabetized dig's +options. [RT #35992] 2014-05-15 16:57:41 +10:00
Mark Andrews
01f881c1c5 3849. [bug] Disabling forwarding could trigger a REQUIRE assertion.
[RT #35979]
2014-05-15 16:54:32 +10:00
Mark Andrews
a14fe85229 3848. [bug] Adjust 'statistics-channels specified but not effective'
error message to account for JSON support. [RT #36008]
2014-05-15 11:12:05 +10:00
Mark Andrews
5a8edcafd1 3847. [bug] 'configure --with-dlz-postgres' failed to fail when
there is not support available.
2014-05-14 17:20:14 +10:00
Mark Andrews
8114b0be01 remove reporter 2014-05-14 10:02:15 +10:00
Mark Andrews
05816676bb 3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
ixfr query. [RT #35980]
2014-05-14 09:59:02 +10:00
Mark Andrews
5cef2421bd switch 3827 and 3828 change numbers 2014-05-13 22:13:24 +10:00
Mark Andrews
2922577217 placeholder 2014-05-13 21:59:13 +10:00
Mark Andrews
0e338b60cd 3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
[RT #35969]

Conflicts:
	CHANGES
2014-05-13 21:57:40 +10:00
Francis Dupont
1b513b6120 CHANGES number conflict 2014-05-13 12:34:29 +02:00
Francis Dupont
761f60fc35 use vcredist_x64.exe for 64 bit Windows [#35973] 2014-05-13 12:31:50 +02:00
Mark Andrews
2c172a42b3 3842. [bug] Adjust RRL log-only logging category. [RT #35945] 2014-05-11 10:59:42 +10:00
Mark Andrews
fe148bca7e Add CVE-2014-3214 to change 3837
(cherry picked from commit 156d68fd2937d021ab343fca2d60c83a19b94c92)
2014-05-09 13:39:32 +10:00
Mark Andrews
faa01edd13 3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
[RT #35924]
2014-05-08 09:38:05 +10:00
Evan Hunt
1ea6e09c37 [master] check for arc4random_addrandom()
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]
2014-05-07 08:58:25 -07:00
Evan Hunt
60988462e5 [master] use posix-compatible shell in system tests
3839.	[test]		Use only posix-compatible shell in system tests.
			[RT #35625]
2014-05-06 22:06:04 -07:00
Mark Andrews
d3ca5999fe remove extraneous space 2014-05-06 11:50:29 +10:00