Commit Graph

159 Commits

Author SHA1 Message Date
tls 642c01f5cd Mollify NetBSD's lint (which brokenly doesn't define __STDC__ and thus
picks up a bogus assert() macro from assert.h) by not putting double
quotes too close to macro using assert().
2007-11-04 22:02:35 +00:00
christos 5b94024b59 Import bind 9.4.1-P1
2206.   [security]      "allow-query-cache" and "allow-recursion" now
                        cross inherit from each other.

                        If allow-query-cache is not set in named.conf then
                        allow-recursion is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        If allow-recursion is not set in named.conf then
                        allow-query-cache is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        [RT #16987]

2203.   [security]      Query id generation was cryptographically weak.
                        [RT # 16915]

2202.   [security]      The default acls for allow-query-cache and
                        allow-recursion were not being applied. [RT #16960]

2193.   [port]          win32: BINDInstall.exe is now linked statically.
                        [RT #16906]

2192.   [port]          win32: use vcredist_x86.exe to install Visual
                        Studio's redistributable dlls if building with
                        Visual Stdio 2005 or later.
2007-07-24 23:52:54 +00:00
christos 92b1ea3abe Import bind 9.4.1-P1 2007-07-24 23:32:11 +00:00
christos 2d0d2fc81d merge conflicts 2007-05-01 22:15:12 +00:00
christos 5f9b8877e1 Import bind 9.4.1 2007-05-01 21:51:06 +00:00
ghen 94364b1084 Resolve conflicts. 2007-03-30 19:40:47 +00:00
ghen cc483ecacb Import bind-9.4.0. 2007-03-30 19:15:20 +00:00
christos f987814949 include <types.h> 2007-01-30 18:12:48 +00:00
christos 03f10a71aa provide non-atomic versions so that things compile for now. 2007-01-30 00:46:52 +00:00
christos fd07b4b277 handle resolv_mt.h 2007-01-27 23:02:37 +00:00
christos d7aeceb511 deal with base64.c 2007-01-27 22:28:22 +00:00
christos 4455b59ff4 Use __inline consistently so that we avoid unused warnings. 2007-01-27 21:30:22 +00:00
christos 4674124bb1 resolve conflicts 2007-01-27 21:24:09 +00:00
christos c1a4ad93e3 Import bind-9.4.0-rc2 from ftp.isc.org 2007-01-27 21:02:43 +00:00
reed 93b5694767 Remove () from end of the BIND 9 ARM as it is not a man page.
(I am not committing the fix to dist/bind/bin/named/named.conf.docbook
as we don't use that docbook file.)
2006-12-14 02:17:14 +00:00
adrianp ee74a1421a Fixes for CVE-2006-4095 and CVE-2006-4096 from bind-9.3.2-P1
* Assertion failure in ISC BIND SIG query processing (CVE-2006-4095)

- Recursive servers
Queries for SIG records will trigger an assertion failure if more
than one RRset is returned. However exposure can be minimized by
restricting which sources can ask for recursion.

- Authoritative servers
If a nameserver is serving a RFC 2535 DNSSEC zone and is queried
for the SIG records where there are multiple RRsets, then the
named program will trigger an assertion failure when it tries
to construct the response.

* INSIST failure in ISC BIND recursive query handling code (CVE-2006-4096)

It is possible to trigger an INSIST failure by sending enough
recursive queries such that the response to the query arrives after
all the clients waiting for the response have left the recursion
queue. However exposure can be minimized by restricting which sources
can ask for recursion.

ok'ed christos@
2006-09-05 19:31:47 +00:00
jnemeth 50fe2341d5 force all assertions on when __COVERITY__ is set 2006-08-23 04:10:51 +00:00
jnemeth 79d79919df Coverity CID: 682 -- remove dead code 2006-07-26 06:23:59 +00:00
christos af2ae0aa2f Initialize rdataset. 2006-05-14 01:18:41 +00:00
mrg 3394a47b32 move is_zone initialisation earlier to avoid a GCC warning. 2006-05-11 09:28:45 +00:00
christos 2e0077c305 Add more coverity assertions. If this does not work, I will have to follow
a different tactic.
2006-04-02 00:53:56 +00:00
christos 1d00887f5d Insert coverity annotations [experimental; I don't know if those work
at the variable declaration level, but we'll see]
2006-03-29 16:40:50 +00:00
christos f252e17155 Coverity CID 2486: Fix uninitialized variable 2006-03-29 16:09:53 +00:00
elad 91ce49cce6 xref named.conf(5) after a complaint from tiocsti. okay veego@.
xml docbook change will be fed upstream as requested by hubertf@
and veego@.
2006-01-16 19:20:15 +00:00
christos deeaa98b3a make this compile when we don't use threads. 2005-12-22 15:14:12 +00:00
christos 719d30b842 resolve conflicts. 2005-12-22 00:26:23 +00:00
christos e471bad6c5 import the real 9.3.2 not 9.2.3. 2005-12-21 23:16:49 +00:00
christos 7ccb4c5f89 import the real 9.3.2 not 9.2.3. 2005-12-21 23:06:48 +00:00
christos 292526bfd4 Resolve conflicts. 2005-12-21 22:34:31 +00:00
christos 348525eba6 from ftp.isc.org 2005-12-21 19:50:15 +00:00
christos 85962585ac Remove inline from rotate_{left,right}. Breaks compilation with gcc-3.3
and macppc. It is fixed in gcc-3.4
2005-02-22 18:42:15 +00:00
itojun 3d34ee60f0 fix CERT VU#938617 (vulnerable to denial of service in validator code)
ftp://ftp.isc.org/isc/bind/9.3.0/9.3.0-patch1
2005-01-27 03:56:23 +00:00
christos 27fcc8bc02 2 more include files. 2004-11-07 17:25:38 +00:00
christos b69331bf9c Update instructions and include helper scripts 2004-11-07 01:26:10 +00:00
christos efbc48848e Resolve conflicts 2004-11-07 00:16:59 +00:00
christos dfd98c8a16 Import bind-9.3.0 2004-11-06 23:53:21 +00:00
dsl 238960af7e Add (unsigned char) cast to ctype function 2004-10-29 19:51:36 +00:00
christos 77e4a238b7 make this compile in the absense of threads. 2004-05-21 16:03:32 +00:00
itojun e36da74472 support kame-style fe80::1%interface. this part of the code is marked as
"up to OS designer".  from bind9-current/patches.
2004-05-19 19:19:58 +00:00
christos 178bd22d01 unsigned int initialized to ULONG_MAX? jeez. 2004-05-18 03:08:24 +00:00
christos b6ea89f1ee width arg in printf string must be int. 2004-05-18 03:08:00 +00:00
christos 4563e44b43 Include <sys/param.h> needed by <sys/sysctl.h> 2004-05-18 00:15:29 +00:00
christos 53a0028e47 Resolve conflicts 2004-05-18 00:03:56 +00:00
christos 1885fbb90d Import bind 9.3.0beta3 2004-05-17 23:43:04 +00:00
itojun dd1d0fe0c8 sync w/ bind837 2003-11-26 01:35:31 +00:00
itojun 2b424a6e81 sync w/ new cvs tree scheme, i.e. s/basesrc/src/ 2003-11-26 01:31:48 +00:00
agc 865595bdf3 Move UCB-licensed code from 4-clause to 3-clause licence.
Patches provided by Joel Baker in PR 22253, verified by myself.
2003-08-07 09:20:39 +00:00
wiz 64b68a3740 Fix rendering of the escape character. 2003-06-30 10:36:25 +00:00
itojun edc2bcfc9f resolve conflicts 2003-06-09 13:19:33 +00:00
itojun 821ebcfc5b resolve conflicts 2003-06-09 13:19:31 +00:00