2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00
Commit Graph

40440 Commits

Author SHA1 Message Date
Aram Sargsyan
ed879c41f2 Add a CHANGES note for [GL #1229] 2023-12-04 10:38:16 +00:00
Aram Sargsyan
4d529ee12a Emit "no servers could be reached" also for UDP setup failure
When all the servers are exhausted for UDP setup emit "no servers
could be reached" in udp_ready(). This message can also be emitted
for a recv_done() error and for TCP connection failure similarly.
2023-12-04 10:38:16 +00:00
Petr Špaček
2a14fa0a65 Merge branch '4417-stale-hyperlinks-in-the-arm' into 'main'
Fix stale hyperlinks in the ARM

Closes #4417

See merge request isc-projects/bind9!8525
2023-12-04 10:00:57 +00:00
Suzanne Goldlust
15eea792b9 Fix broken link to TLD DNSSEC stats 2023-12-04 10:00:30 +00:00
Suzanne Goldlust
1482f5b1ed Fix broken link to OMB memo 2023-12-04 10:00:30 +00:00
Tom Krizek
ae349ef2e8 Merge branch '4251-remove-legacy-test-runner' into 'main'
Remove legacy system test runner

Closes #4251

See merge request isc-projects/bind9!8514
2023-12-01 14:21:34 +00:00
Tom Krizek
1e181cf61d Remove -U 4 from system tests
This option doesn't appear to be needed for any of the tests, so remove
it to keep things simple.
2023-12-01 14:03:35 +01:00
Tom Krizek
519e77d067 Add CHANGES note for [GL #4251] 2023-12-01 14:03:34 +01:00
Tom Krizek
fba295600b Update system test documentation
Rewrite and reorganize the test documentation to focus on the pytest
runner, omit any mentions of the legacy runner which are no longer
relevant, and mention a few pytest tricks.
2023-12-01 14:03:33 +01:00
Tom Krizek
3e26d99c3c Remove obsolete system test lists
These were used by deleted legacy runner utility scripts.
2023-12-01 13:47:29 +01:00
Tom Krizek
910440d9b6 Remove legacy runner control scripts
These scripts have been used exclusively by the legacy test runner and
they're no longer needed.
2023-12-01 13:47:27 +01:00
Ondřej Surý
235659b95a Merge branch '4451-use-only-single-method-for-overmem-condition' into 'main'
Refactor the handling of isc_mem overmem condition

Closes #4451

See merge request isc-projects/bind9!8523
2023-11-29 13:21:09 +00:00
Ondřej Surý
022f1d8573 Add CHANGES note for [GL #4451] 2023-11-29 14:16:20 +01:00
Ondřej Surý
0b865c781a Add isc_mem_overmem unit test
The new unit isc_mem_overmem unit test sets hi and lo water marks and
then does allocations to go over:

0. x < lo_water
1. lo_water < x < hi_water
2. x > hi_water
3. lo_water < x < hi_water
4. < lo_water
2023-11-29 14:16:20 +01:00
Ondřej Surý
3383331d06 Cleanup unused stats_bucket() macro 2023-11-29 14:16:20 +01:00
Ondřej Surý
14bdd21e0a Refactor the handling of isc_mem overmem condition
Previously, there were two methods of working with the overmem
condition:

1. hi/lo water callback - when the overmem condition was reached
   for the first time, the water callback was called with HIWATER
   mark and .is_overmem boolean was set internally.  Similarly,
   when the used memory went below the lo water mark, the water
   callback would be called with LOWATER mark and .is_overmem
   was reset.  This check would be called **every** time memory
   was allocated or freed.

2. isc_mem_isovermem() - a simple getter for the internal
   .is_overmem flag

This commit refactors removes the first method and move the hi/lo water
checks to the isc_mem_isovermem() function, thus we now have only a
single method of checking overmem condition and the check for hi/lo
water is removed from the hot path for memory contexts that doesn't use
overmem checks.
2023-11-29 14:16:20 +01:00
Michal Nowak
669800342d Merge branch 'mnowak/drop-named-alt3.conf.in-leftover' into 'main'
Drop the last remnant of ns2/named-alt3.conf.in

See merge request isc-projects/bind9!8506
2023-11-28 20:15:10 +00:00
Matthijs Mekking
00fa7483b9 Renumber the ns2/named-alt*.conf.in files
Now that some configuration input files have been removed, rename
the filenames.
2023-11-28 17:03:08 +01:00
Matthijs Mekking
3119164e29 Drop ns2/named-alt1.conf.in and ns2/named-alt2.conf.in
These files were not being used in the system test.
2023-11-28 17:03:08 +01:00
Michal Nowak
236e5bf519 Drop the last remnant of ns2/named-alt3.conf.in
The ns2/named-alt3.conf.in config file was removed in
f8e264ba6d. From then on, system test
reports:

    sed: can't read ns2/named-alt3.conf.in: No such file or directory"

Drop the last remnant of ns2/named-alt3.conf.in.
2023-11-28 17:03:08 +01:00
Michał Kępień
de2009e3c2 Merge branch 'michal/minor-gitlab-ci-cleanup' into 'main'
Minor GitLab CI cleanup

See merge request isc-projects/bind9!8505
2023-11-21 09:29:09 +00:00
Michał Kępień
192cceba5a Move job definitions to the proper place
The definitions of the "ci-variables" and "cross-version-config-tests"
GitLab CI jobs were accidentally added in the .gitlab-ci.yml section
that claims to only contain job templates.  Move the definitions of
these two jobs to a more appropriate location in .gitlab-ci.yml, without
changing the job definitions themselves.
2023-11-21 10:18:52 +01:00
Michał Kępień
832c7d4396 Drop the TARBALL_EXTENSION variable
All currently supported BIND 9 branches use xz-packed tarballs for
source code distribution.  Having a variable with a lengthy name that
only holds two characters does not improve readability - it was only
useful for maintaining .gitlab-ci.yml consistency between BIND 9.11 and
all the newer branches, but that era has come to an end a while ago.

Replace all occurrences of the TARBALL_EXTENSION variable in
.gitlab-ci.yml with a fixed string ("xz") to simplify the contents of
that file.
2023-11-21 10:18:52 +01:00
Mark Andrews
a1da698103 Merge branch '4432-pointers-dereferenced-before-being-checked' into 'main'
Resolve "Pointers Dereferenced before Being Checked"

Closes #4432

See merge request isc-projects/bind9!8508
2023-11-21 05:40:17 +00:00
Mark Andrews
decc17d3b0 Ineffective DbC protections
Dereference before NULL checks.  Thanks to Eric Sesterhenn from X41
D-Sec GmbH for reporting this.
2023-11-21 14:48:43 +11:00
Matthijs Mekking
a819d36446 Merge branch 'matthijs-lexopt-escape-public-key' into 'main'
Recognize escapes when reading the public key

See merge request isc-projects/bind9!8502
2023-11-20 08:48:06 +00:00
Matthijs Mekking
53657591fa Add CHANGES 2023-11-20 08:32:29 +01:00
Matthijs Mekking
6a4f3ec242 Add a DNSSEC policy test case for a special zone
Try to create a key for a zone, and then sign it, that has some special
characters in the name.
2023-11-20 08:31:39 +01:00
Matthijs Mekking
71f023a1c3 Recognize escapes when reading the public key
Escapes are valid in DNS names, and should be recognized when reading
the public key from disk.
2023-11-20 08:31:39 +01:00
Mark Andrews
7cace4fb61 Merge branch '4396-dig-does-not-display-yaml-output-for-errors-when-using-protocols-other-than-udp' into 'main'
Resolve "dig does not display YAML output for errors when using protocols other than UDP"

Closes #4396

See merge request isc-projects/bind9!8442
2023-11-20 02:35:57 +00:00
Mark Andrews
f813795c6f Add CHANGES for [GL #4396] 2023-11-20 12:24:19 +11:00
Mark Andrews
831efa40d6 Emit "no servers could be reached" for TCP as well as UDP
When all the servers are exhausted for TCP emit "no servers could
be reached" in tcp_connected.  This message is already emitted for
UDP.
2023-11-20 12:23:27 +11:00
Ondřej Surý
8876b2d8a9 Merge branch '4414-shutdown-crash-in-control_recvmessage' into 'main'
Make sure we shutdown the controlconf listeners and connections once

Closes #4414

See merge request isc-projects/bind9!8470
2023-11-16 16:26:24 +00:00
Ondřej Surý
5734d6c826 Make sure we shutdown the controlconf listeners and connections once
It was possible that controlconf connections could be shutdown twice
when shutting down the server, because they would receive the
signal (ISC_R_SHUTTINGDOWN result) from netmgr and then the shutdown
procedure would be called second time via controls_shutdown().

Split the shutdown procedure from control_recvmessage(), so we can call
it independently from netmgr callbacks and make sure it will be called
only once.  Do the similar thing for the listeners.
2023-11-16 16:58:12 +01:00
Michał Kępień
f4ca058a06 Merge branch 'michal/update-release-and-cve-checklists' into 'main'
Update release and CVE checklists

See merge request isc-projects/bind9!8500
2023-11-16 10:47:08 +00:00
Michał Kępień
fe503854f0 Remove steps related to the post-mortem meeting
The post-mortem meeting is now considered an on-demand event.  The past
few security release cycles proved that there is rarely a need to
discuss things in this form, so there is little point in carrying out
the relevant steps for every single vulnerability - which does not
prevent us from doing so if the actual need arises.
2023-11-16 11:39:51 +01:00
Vicky Risk
2db9ab405c Revise responsibilities in the CVE checklist
Update the CVE checklist to reflect agreed-upon changes between Support
and Marketing responsibilities.
2023-11-16 11:39:51 +01:00
Michał Kępień
b9443d81cb Rebase -S branches after version bumps
Applying version bumps in open source branches breaks automatic rebasing
of the bind-9.x-sub branches.  Ensure the latter are manually rebased
after each version bump to prevent the "rebase" job in GitLab CI from
failing.
2023-11-16 11:39:51 +01:00
Michał Kępień
9c744e6613 Reassign release (pre-)publishing to QA 2023-11-16 11:39:51 +01:00
Michał Kępień
c8c974059d Prepare the patches/ subdirectory earlier
The patches/ subdirectory needs to be present in each prerelease
directory before the ASN releases get pre-published or else the latter
will not contain standalone patches.
2023-11-16 11:39:51 +01:00
Vicky Risk
a90409bf4d Revise responsibilities in the release checklist
Update the release checklist to reflect agreed-upon changes between
Support and Marketing responsibilities.
2023-11-16 11:39:51 +01:00
Evan Hunt
0e3a75798b Merge branch '3983-secondary-loadtime' into 'main'
set loadtime during initial transfer of a secondary zone

Closes #3983

See merge request isc-projects/bind9!8485
2023-11-16 02:02:15 +00:00
Evan Hunt
9643281453 set loadtime during initial transfer of a secondary zone
when transferring in a non-inline-signing secondary for the first time,
we previously never set the value of zone->loadtime, so it remained
zero. this caused a test failure in the statschannel system test,
and that test case was temporarily disabled.  the value is now set
correctly and the test case has been reinstated.
2023-11-15 17:23:25 -08:00
Mark Andrews
f17b94fb72 Merge branch '4433-supplied-buffer-too-large-in-wire_test-c' into 'main'
Resolve "Supplied Buffer Too Large in wire_test.c"

Closes #4433

See merge request isc-projects/bind9!8496
2023-11-16 01:19:33 +00:00
Mark Andrews
560c245971 Adjust comment to have correct message limit value 2023-11-16 11:22:47 +11:00
Mark Andrews
cbfcdbc199 Adjust message buffer sizes in test code 2023-11-16 11:22:02 +11:00
Mark Andrews
a069513234 Check that buffer length in dns_message_renderbegin
The maximum DNS message size is 65535 octets. Check that the buffer
being passed to dns_message_renderbegin does not exceed this as the
compression code assumes that all offsets are no bigger than this.
2023-11-16 11:15:49 +11:00
Michał Kępień
dc25df18f3 Merge tag 'v9.19.18' 2023-11-15 14:54:10 +01:00
Ondřej Surý
101fad490b Merge branch '4421-remove-AES-based-DNS-cookies' into 'main'
Remove AES algorithm for DNS cookies

Closes #4421

See merge request isc-projects/bind9!8471
2023-11-15 09:36:22 +00:00
Ondřej Surý
8e230d8908 Add CHANGES and release note for [GL #4421] 2023-11-15 10:31:34 +01:00