Commit Graph

58 Commits

Author SHA1 Message Date
spz 85afcc6138 increase libdns minor version 2011-07-05 22:05:36 +00:00
spz e69d9c6eb6 merge import of bind-9.8.0-P4 2011-07-05 21:59:18 +00:00
spz 6654acd7c3 Import of bind 9.8.0-P4
Upstream changelog:

        --- 9.8.0-P4 released ---

3124.   [bug]           Use an rdataset attribute flag to indicate
                        negative-cache records rather than using rrtype 0;
                        this will prevent problems when that rrtype is
                        used in actual DNS packets.  [RT #24777]

        --- 9.8.0-P3 released (withdrawn) ---

3126.   [security]      Using DNAME record to generate replacements caused
                        RPZ to exit with a assertion failure. [RT #23766]

3125.   [security]      Using wildcard CNAME records as a replacement with
                        RPZ caused named to exit with a assertion failure.
                        [RT #24715]

3123.   [security]      Change #2912 exposed a latent flaw in
                        dns_rdataset_totext() that could cause named to
                        crash with an assertion failure. [RT #24777]

3115.   [bug]           Named could fail to return requested data when
                        following a CNAME that points into the same zone.
                        [RT #2445]
2011-07-05 21:22:43 +00:00
joerg b58b5b09d9 Fix memset usage. XXX audit the rest where hard coded sizes are used 2011-07-01 02:24:14 +00:00
mrg 493d341048 various build fixes for gcc 4.5. from chuq. XXX i'm not sure all of
these work properly wtf pointer aliasing, but there are no casts at
least...

the lib/libpuffs/puffs_priv.h is definately a real bug fix.

from chuq.
2011-06-20 09:11:16 +00:00
mrg 75e42fa7da remove most of the remaining HAVE_GCC tests that are always true in
the modern world.
2011-06-20 07:43:56 +00:00
spz 1bddfb5091 fix up OPENSSL_VERSION_NUMBER check for entropy_add so it deals with the
current situation. Compile-checked by dholland, thanks.
2011-06-06 05:40:34 +00:00
spz f93f010473 merge 9.8.0-P2:
- fixes CVE-2011-1910: Large RRSIG RRsets and Negative Caching can crash named
- fixes CVE-2011-0414: bind lockup during IXFR
- return a more correct error in case of policy violation

bump version of libdns and libisc
2011-05-29 15:17:08 +00:00
spz fc67f3fcc1 Import bind 9.8.0-P2 2011-05-28 06:52:27 +00:00
joerg a216da57a6 Default to -Wno-sign-compare -Wno-pointer-sign for clang.
Push -Wno-array-bounds down to the cases that depend on it.
Selectively disable warnings for 3rd party software or non-trivial
issues to be reviewed later to get clang -Werror to build most of the
tree.
2011-05-26 12:56:24 +00:00
taca 0b00ab0979 Apply fix by BIND 9.8.0-P1: https://www.isc.org/CVE-2011-1907. 2011-05-06 15:28:19 +00:00
christos da96ddd961 PR/44928: Henning Petersen: Remove missing include dirs in Makefile.inc 2011-05-02 19:04:54 +00:00
ws 191e94cd7e Fix return values.
OK christos.
2011-02-20 19:05:32 +00:00
christos a913237f1e undo the thread and atomic lossage of the import. 2011-02-18 21:25:06 +00:00
christos 7c272055e8 - merge conflicts
- Fix UNUSED macro to not have "NULL EFFECT"
- Add /*CONSTCOND*/ to while (0) loops
- Change do while (1) loops to for (;;)
- remove stray continue from do while (0) loop.
- remove "" in comments that confuse lint
- fix strict aliases
- fix non ansi prototypes
2011-02-16 03:46:43 +00:00
christos 8e6786bbdd from ftp.isc.org 2011-02-15 19:38:54 +00:00
christos 85662ea508 from ftp.isc.org 2011-02-15 19:28:53 +00:00
christos 9f5adb9583 fix type-punned warnings on gcc-3.3.3 2010-12-25 18:23:39 +00:00
christos f2fd5dbad4 Fix non-threads compatibility code which was causing trouble even in the
threaded version.
2010-12-25 15:26:32 +00:00
enami 83d9249c3a Fix typo. 2010-12-15 07:36:51 +00:00
christos 83c933dca1 Use the source dir atomic.h 2010-12-15 02:08:16 +00:00
christos a9c38a6a96 Wrong rfc mentioned 2010-12-14 23:43:32 +00:00
christos c2a9dfd59e handle lack of <sys/atomic.h> 2010-12-14 23:19:23 +00:00
christos f4f6c00c90 silence gcc-3 uninitialized variable warning. 2010-12-14 23:18:31 +00:00
christos 30037bfd3f Handle NetBSD-5 and 4 lack of atomics by disabling threads. 2010-12-14 23:17:20 +00:00
christos 97caf9021f handle openssl versions less < 1. 2010-12-14 23:16:39 +00:00
christos dfcdd76889 merge changes 2010-12-02 14:52:17 +00:00
christos c27878d85f Import bind 9.7.2-P3 2010-12-02 14:22:18 +00:00
mrg 634cf7a288 fix NAMED_USE_PTHREADS != yes usage. 2010-11-06 21:32:49 +00:00
christos c11bdae3be Merge changes. 2010-08-06 10:58:03 +00:00
christos 68f14ab461 regen 2010-08-05 20:44:53 +00:00
christos 823dc9a3f5 Import bind 9.7.2b1 2010-08-05 19:51:05 +00:00
christos ded3e18dc8 adjust entropy_add signature. (From Kurt Schreiner) 2009-12-27 17:27:29 +00:00
christos e1523714f8 merge 9.7.0rc1 2009-12-26 23:08:21 +00:00
christos d12c9ec32b Import bind 9.7.0rc1 2009-12-26 22:18:13 +00:00
christos 493a2154bc paper over pointer aliasing problem 2009-10-25 20:53:43 +00:00
christos 74c9be690a fixes for 9.7.0-b1 2009-10-25 00:18:38 +00:00
christos 6cddd999c8 merge changes. 2009-10-25 00:14:31 +00:00
christos 10ca0cd585 import bind-9-7-0-b1 2009-10-25 00:01:26 +00:00
christos 1239419a9b one more paren from Anon Ymous 2009-10-22 14:30:05 +00:00
christos 65accd0021 fix typo on server-id; from Anon Ymous 2009-10-22 14:29:06 +00:00
joerg 5c824d0f03 Do not use .Xo/.Xc to work around ancient groff limits. 2009-10-14 19:08:55 +00:00
christos a24ab0f5cc elide type punned warning 2009-07-28 21:51:30 +00:00
christos 1291d32876 add no version date 2009-07-28 21:18:01 +00:00
christos 723a00ffef merge 9.6.1-P1 2009-07-28 21:17:11 +00:00
christos 8efd920cd3 from ftp.isc.org 2009-07-28 21:10:17 +00:00
christos 75efea6592 bump libcrypto and friends; OpenSSL abi change: do_cipher last argument
changed from u_int to size_t. Affects _LP64 only.
2009-07-20 17:30:52 +00:00
christos 5abcee2a8c find the correct libcrypto 2009-07-20 15:40:05 +00:00
christos 709ec5958a Don't log if "." is not writable. In the chrooted environment this is
"/var/chroot/named", and there is no reason whatsoever for this to be
writable!
2009-04-22 18:25:24 +00:00
christos 432ce7c95e At ad@'s request add support for native rwlocks. The XXX's should be addressed
before this is enabled, perhaps with _np functions.
2009-04-13 21:20:40 +00:00