2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

25113 Commits

Author SHA1 Message Date
Tinderbox User
08046df1f8 newcopyrights 2017-03-01 01:51:12 +00:00
Mark Andrews
f240f4a5de Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]
2017-03-01 12:01:16 +11:00
Tinderbox User
ed5bf0e581 update copyright notice / whitespace 2017-02-28 23:45:28 +00:00
Tinderbox User
0aa6c1b1ff newcopyrights 2017-02-28 23:30:04 +00:00
Mark Andrews
02fa49a4d8 fix nsupdate reference 2017-03-01 08:33:09 +11:00
Tinderbox User
a06081491c regen master 2017-02-24 01:04:54 +00:00
Evan Hunt
a1365a0042 [master] remove unnecessary INSIST
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]
2017-02-23 14:34:33 -08:00
Tinderbox User
e04dff4bfd update copyright notice / whitespace 2017-02-21 23:45:37 +00:00
Tinderbox User
4aa492de85 newcopyrights 2017-02-21 23:30:06 +00:00
Evan Hunt
18d49392fb [master] use isc_uint32_t instead of uint32_t 2017-02-21 10:45:02 -08:00
Witold Krecicki
0790f8a361 4577. [func] Make qtype of resolver fuzzing packet configurable via command line. [RT #43540] 2017-02-21 03:49:55 -08:00
Tinderbox User
c4dbad7b36 regen master 2017-02-21 01:04:58 +00:00
Tinderbox User
e66aaccfd8 update copyright notice / whitespace 2017-02-20 23:45:32 +00:00
Tinderbox User
cc94177d80 newcopyrights 2017-02-20 23:30:05 +00:00
Witold Krecicki
fa9b4de716 4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449] 2017-02-20 11:57:28 +01:00
Mark Andrews
87ff6241e4 dns_master_styleflags returns dns_masterstyle_flags_t 2017-02-20 17:39:20 +11:00
Tinderbox User
a32fa1246e regen master 2017-02-16 01:05:00 +00:00
Tinderbox User
42039110be newcopyrights 2017-02-15 04:43:32 +00:00
Mark Andrews
bd75947af7 reserve block for 9.12 2017-02-15 14:29:33 +11:00
Mark Andrews
009c98a1be add CVE-2017-3136 note
(cherry picked from commit d77eadc26113486f32fea25320ae4c6f1f2e7fb2)
2017-02-15 12:45:38 +11:00
Mark Andrews
06eb85992e update description 2017-02-15 12:38:08 +11:00
Mark Andrews
3bce12e4b6 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]
2017-02-15 12:18:51 +11:00
Mark Andrews
af2b20ee3f 4574. [bug] Dig leaked memory with multiple +subnet options.
[RT #44683]
2017-02-14 15:52:40 +11:00
Evan Hunt
1df7a6fed6 [master] call flow description was incomplete 2017-02-09 13:52:45 -08:00
Evan Hunt
d16500cece [master] restore some code from change 4556 2017-02-08 17:33:13 -08:00
Tinderbox User
a95dc83de5 regen master 2017-02-09 01:04:58 +00:00
Tinderbox User
f929677ed8 update copyright notice / whitespace 2017-02-08 23:45:32 +00:00
Tinderbox User
8262a144ec newcopyrights 2017-02-08 23:30:05 +00:00
wpk
96912e44b0 4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability 2017-02-08 22:15:01 +01:00
Evan Hunt
7fcd72f574 [master] mismatched tag 2017-02-07 18:28:40 -08:00
Mark Andrews
dc9ed164e6 update 2017-02-08 13:11:42 +11:00
Evan Hunt
ef0ddc8ba3 [master] doc style 2017-02-07 08:18:15 -08:00
Evan Hunt
d8339932af [master] fix memory leak from dnstap-output parsing 2017-02-06 22:13:51 -08:00
Mark Andrews
63f8c891d8 add dns_dt_setupfile 2017-02-07 13:21:20 +11:00
Mark Andrews
009aabd2e5 fix tag mismatch 2017-02-07 12:11:45 +11:00
Evan Hunt
c4e4bd6a09 [master] dnstap size and versions options
4572.	[func]		The "dnstap-output" option can now take "size" and
			"versions" parameters to indicate the maximum size
			a dnstap log file can grow before rolling to a new
			file, and how many old files to retain. [RT #44502]
2017-02-06 16:34:58 -08:00
Evan Hunt
5b4d6d2ff8 [master] removed extra note about bind.keys update 2017-02-06 14:19:53 -08:00
Evan Hunt
56cccde22b [master] fix build errors from inline macros (change 4565) 2017-02-06 10:41:45 -08:00
Tinderbox User
88ee987de6 update copyright notice / whitespace 2017-02-06 02:58:07 +00:00
Mark Andrews
3793e93fd9 remove redirect.db 2017-02-06 13:56:56 +11:00
Mark Andrews
3e48466e0a 4571. [bug] Out-of-tree builds of backtrace_test failed. 2017-02-06 13:46:00 +11:00
Tinderbox User
513cec7786 regen master 2017-02-05 01:04:55 +00:00
Tinderbox User
61f11922d3 update copyright notice / whitespace 2017-02-04 23:45:35 +00:00
Tinderbox User
85f41d0b00 newcopyrights 2017-02-04 23:30:05 +00:00
Evan Hunt
0f91e968c7 [master] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:37:37 -08:00
Evan Hunt
44e087b646 [master] revised comment 2017-02-04 00:24:06 -08:00
Evan Hunt
650b5e7592 [master] store local and remote addresses in dnstap
4569.	[func]		Store both local and remote addresses in dnstap
			logging, and modify dnstap-read output format to
			print them. [RT #43595]
2017-02-03 17:05:58 -08:00
Evan Hunt
adcdff94d9 [master] add "configure --with-bind" option to dnsperf
4568.	[contrib]	Added a --with-bind option to the dnsperf configure
			script to specify BIND prefix path.
2017-02-03 16:28:45 -08:00
Tinderbox User
39f68aa480 update copyright notice / whitespace 2017-02-03 23:45:33 +00:00
Tinderbox User
90f82c95ac newcopyrights 2017-02-03 23:30:04 +00:00