Commit Graph

47 Commits

Author SHA1 Message Date
christos 85962585ac Remove inline from rotate_{left,right}. Breaks compilation with gcc-3.3
and macppc. It is fixed in gcc-3.4
2005-02-22 18:42:15 +00:00
itojun 3d34ee60f0 fix CERT VU#938617 (vulnerable to denial of service in validator code)
ftp://ftp.isc.org/isc/bind/9.3.0/9.3.0-patch1
2005-01-27 03:56:23 +00:00
christos efbc48848e Resolve conflicts 2004-11-07 00:16:59 +00:00
christos dfd98c8a16 Import bind-9.3.0 2004-11-06 23:53:21 +00:00
dsl 238960af7e Add (unsigned char) cast to ctype function 2004-10-29 19:51:36 +00:00
christos 77e4a238b7 make this compile in the absense of threads. 2004-05-21 16:03:32 +00:00
itojun e36da74472 support kame-style fe80::1%interface. this part of the code is marked as
"up to OS designer".  from bind9-current/patches.
2004-05-19 19:19:58 +00:00
christos 4563e44b43 Include <sys/param.h> needed by <sys/sysctl.h> 2004-05-18 00:15:29 +00:00
christos 53a0028e47 Resolve conflicts 2004-05-18 00:03:56 +00:00
christos 1885fbb90d Import bind 9.3.0beta3 2004-05-17 23:43:04 +00:00
agc 865595bdf3 Move UCB-licensed code from 4-clause to 3-clause licence.
Patches provided by Joel Baker in PR 22253, verified by myself.
2003-08-07 09:20:39 +00:00
itojun edc2bcfc9f resolve conflicts 2003-06-09 13:19:33 +00:00
itojun 8912e04d45 sync w/ 8.3.5 2003-06-03 07:33:24 +00:00
itojun 261b3b5bbe ISC BIND 8.3.5
Highlights vs. 8.3.4
        Maintenance release.

        --- 8.3.5-REL released --- (Mon Jun  2 03:15:53 PDT 2003)
1540.	[bug]		remove potential memory leak from net_data_create().
1537.	[bug]		dig buffer overrun with large command lines.
1535.	[bug]		winnt: large zone transfers failed.
1536.	[cleanup]	use NS_MAXMSG to define TCP buffers.
1534.	[func]		The advertised EDNS UDP buffer size can now be set
			via named.conf (edns-udp-size).
1533.	[bug]		don't artificially restrict the update message size.
1532.	[bug]		use maximum sized answer buffers in res_findzonecut().
1530.	[bug]		nslookup computed incorrect reverse lookup for IPv6.
1529.	[lint]		unused variable in dnsquery.c::main().
1528.	[bug]		getaddrinfo() incorrectly rejected a numeric service
			under certian circumstances.
1527.	[proto]		add ns_t_apl (42).
1526.	[doc]		res_{get,set}servers().
1523.	[bug]		getipnodebyname with AI_ADDRCONFIG set was broken
			on HPUX 11.11.  Detect IPv6 interfaces under linux.
1519.	[port]		decunix: conflicting setnetgrent() and innetgr()
			prototypes.
1518.	[cleanup]	silence "No root nameservers for class XX" when
			"forward only;" is set in options.
1517.	[cleanup]	stop using putshort/putlong internally.
1513.	[bug]		use ipnodes.{byname,byaddr} for IPv6 NIS lookups.
			Add support for "YP_MULTI_".
1511.	[cleanup]	don't use argument names in function prototypes.
1510.	[port]		openbsd uses /bsd not /kernel.
1506.	[bug]		named could sometimes set tc incorrectly.
1505.	[bug]		potential overflow if pointer arithmetic wrapped.
1503.	[bug]		named could make unnecessary queries for glue if the
			additional section was full.
1501.	[port]		decunix: OSF 3.2 does not have native 64 bit support.
1500.	[port]		linux: namespace collision.
1499.	[port]		linux: #include <time.h> bin/dig/dig.c
1498.	[bug]		ns_makecanon() could under read its destination buffer
			by one character and fail to properly canonicalise.
1497.	[bug]		res_mkupdate() used compression pointers when it
			shouldn't.
1496.	[bug]		res_mkupdate() didn't support NAPTR.
1494.	[bug]		memory leak on thread destruction if gethostbyname() /
			getnetbyname() have been called by the thread.
1493.	[bug]		check scope for link local servers.
1492.	[placeholder]
1491.	[cleanup]	indentation problems.
1490.	[bug]		the seek offset was miscalculated when truncating
			the ixfr log.
1489.	[func]		named no longer queries for missing additional A6
			records.
1488.	[port]		decunix: TruCluster support.
			See port/decunix/TruCluster.
1487.	[bug]		getnetgroup() takes (char **) not (const char **).
1486.	[func]		res_query() now generates more/better debug on failure
1485.	[func]		res_send() records the nameserver the response came
			from.  Dig retrieves this rather than reporting the
			first address.
1484.	[bug]		dig use sin.sin_port for IPv4.
1483.	[bug]		nslookup could dereference a NULL pointer under certain
			circumstances.
1482.	[bug]		provide local storage for localtime_r result.
1481.	[bug]		tv.tv_sec and time_t are not always the same type.
1480.	[bug]		gethostbyname(), getaddrinfo() could drop address
			if the previous call contained one of the new
			addresses.
1479.	[func]		try known lame servers if all other servers have
			failed.
1478.	[cleanup]	libbind: don't look for A6 records, don't follow
			DNAME record (use the CNAMES), remove some bitstring
			related functions.
1477.	[cleanup]	libbind: namespace cleanup (irs_* to __irs*,
			dst_* to __dst_* and tree_* to __tree*)
1476.	[bug]		dig wasn't using a random query id.
1475.	[bug]		"query-source address <listening interface> port *"
			failed to use a system assigned port as documented.
1474.	[bug]		named wasn't seeing cached NODATA CNAME records.
1473.	[bug]		nslookup: buffer overrun when looking up reverse
			IPv6 addresses under IP6.INT when not found under
			IP6.ARPA.
1472.	[port]		freebsd; current has pselect().
1471.	[port]		'dig -P' failed on some platforms.
1470.	[bug]		J.ROOT-SERVERS.NET is now 192.58.128.30.
1467.	[deleted]
1461.	[func]		return referrals for glue (NS/A/AAAA) if recursion is
			disabled (recursion no;).
1460.	[bug]		NS_MD5RSA_MAX_BITS was not correct.
1459.	[bug]		ns_sign2() could fail to compute a correct signature
			if the TSIG ownername was compressed.
1458.	[bug]		host: spurious "Unknown algorithm" message with default
			zone listing.  missing white space before '(' in SOA
			format.
1457.	[bug]		bison didn't like ns_parser.y.
1456.	[doc]		document auth-nxdomain default is "no" (see # 524).
1455.	[bug]		named failed to allow a cached NODATA response for
			a ANY query to be retrieved.
1454.	[contrib]	nsverifier from Bob.Whelton@qwest.com.
1453.	[bug]		SOA answers should only be cached for the current
			tick.
1452.	[bug]		don't cache -ve response SOA record.
1451.	[port]		bsdos: maybe_fix_includes is not required.
1450.	[bug]		hint zones don't need to be reloaded when a "child"
			zone is removed.
1449.	[bug]		it was possible to orphan glue records.  this could
			lead to panics in stale().
1438.	[bug]		glue from a parent zone beneath a child zone could
			be deleted by loading a child zone.
1437.	[bug]		linux: probe_ipv6 was broken.
1436.	[port]		decunix: update sys/bitypes.h
1435.	[func]		named-xfer: log the zone name when reporting query
			sent.
1434.	[doc]		the man page for dn_expand failed to document eomorig.
1433.	[lint]		remove unused variable.
1432.	[func]		log TSIG key name if used with zone transfer.
1431.	[func]		new category "update-security".
1430.	[func]		libbind: the default nameservers now include ::1/::
			as well as 127.0.0.1/0.0.0.0 if none are specified in
			resolv.conf.
1429.	[port]		libbind: use strlcat/strlcpy if available.
1428.	[port]		eventlib.c: cast tv_sec to long when calling *printf().
1427.	[func]		define INT8SZ
1426.	[port]		res_dprintf() now supports format checking w/ gcc.
1425.	[bug]		'aa' was not being set appropriately with cross zone
			CNAMES.
1424.	[cleanup]	ip6_str2scopeid() now returns u_int32_t.
1423.	[bug]		'ndc restart' could fail to restart named if there
			were no arguments to named.
1422.	[cleanup]	optarg() etc. are declared in unistd.h.
1421.	[bug]		clear and check errno when calling strtoul().
1420.	[cleanup]	use %p instead of %#x for printing pointers.
1419.	[cleanup]	getinfo(): kill buflen manipulation.
1418.	[port]		cast pointers to (size_t) when aligning.
1417.	[cleanup]	make1101inaddr(): kill size manipulation.
1416.	[port]		log_vwrite() now supports format checking w/ gcc.
1415.	[port]		irix: probe for in6addr_any.
1414.	[bug]		strtoul() cast (char*) to (unsigned char*).
1413.	[bug]		host: soa values are not signed.
1412.	[bug]		fix numeric port range check in getaddrinfo().
1411.	[port]		freebsd/netbsd/openbsd: #define USE_IFNAMELINKID.
1410.	[port]		probe for sin6_scope_id when probing for IPv6 structs.
1409.	[bug]		dig: reverse6 computed a incorrect nibble string.
1408.	[cleanup]	res_mkquery.c: kill buflen manipulation.
1407.	[port]		namespace clash EV_ERR -> EV_SETERR
2003-06-03 07:04:45 +00:00
he 07b4ce5d12 Track type changes in <arpa/inet.h>, so that BIND compiles again. 2003-05-06 07:31:43 +00:00
itojun 729df1257b sync with bind 8.3.4. 2002-11-17 14:09:52 +00:00
itojun 90a2edbc75 apply http://www.isc.org/products/BIND/patches/bind833.diff to fix recent
vulnerabilities:

* BIND: Remote Execution of Code (BIND 4 & 8)
* BIND: Multiple Denial of Service (BIND 8 only)
2002-11-14 02:04:27 +00:00
jdolecek 580acd6b37 Fix bug introduced in previous rev 1.5 - the for() body in decode_bitstring()
needs to be wrapped with curly braces.
Pointed out by Greg A. Woods in bin/17525.
2002-07-10 19:30:14 +00:00
itojun 44f496c00a sync with audit result from kame.
- sprintf() can return negative value on error, so p += sprintf(p, blah)
  is unsafe
- signed/unsigned mixup
- wrong assumption: sizeof(time_t) <= sizeof(int)
- need to init errno to 0 before strtoul()
2002-07-04 23:30:39 +00:00
itojun 7b2c9d8551 be consistent with libc getaddr/nameinfo. 2002-06-28 06:40:51 +00:00
itojun 9421d2b57a patch from pkgsrc - initialize *res to NULL 2002-06-28 06:21:29 +00:00
itojun 2adbce1610 kill one more use of tandem variable. 2002-06-28 06:20:55 +00:00
itojun 2200386ee7 sync with 8.3.3. 2002-06-28 06:11:47 +00:00
itojun ce924b0f55 sync with 8.3.2. 99% of conflicts were due to $NetBSD$ tag. 2002-06-20 11:42:53 +00:00
itojun 123de7c9ca ISC BIND 8.3.2. various IPv6 fixes and correctins. 2002-06-20 10:29:14 +00:00
kleink f7d2af261c Sync with libc implementation (change size argument from size_t to
socklen_t); pointed out by Chris Gilbert.
2002-05-15 20:58:19 +00:00
bjh21 c701db92ac Remove .cvsignore file.
<URL:http://www.netbsd.org/developers/cvs-repos/notes.html#cvsignore>
2002-04-04 17:08:24 +00:00
bjh21 dca4ae94d6 When checking that a potentially-unsigned enum is >= 0, assign it to an int
first.  This is necessary to avoid warnings with -fshort-enums.  Casting
to an int really should be enough, but turns out not to be.

This change will be documented in doc/HACKS.
2002-03-09 13:22:52 +00:00
wiz 4c99916337 va_{start,end} audit:
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).

Improved by comments from enami and christos -- thanks!

Heimdal/krb4/KAME changes already fed back, rest to follow.

Inspired by, but not not based on, OpenBSD.
2001-09-24 13:22:25 +00:00
itojun 4cd3525823 upgrade to 8.2.4. 2001-05-17 22:59:37 +00:00
itojun ddb7465740 BIND 8.2.4 2001-05-17 22:41:07 +00:00
itojun 900d6f1790 BIND 8.2.4 2001-05-17 20:45:58 +00:00
wiz 14dbdf5518 Negative exit code cleanup: Replace exit(-x) with exit(x).
As seen on tech-userlevel.
2001-04-06 11:13:45 +00:00
itojun 93ea2d0c7a re-add md5 from BIND8 kit. lib/dnssafe does not compile without it. 2001-01-27 07:58:25 +00:00
itojun 1a7fc7b687 upgrade to BIND 8.2.3. the upgrade is critical (security fixes).
please test.
2001-01-27 07:21:56 +00:00
itojun 10a27e85b1 BIND 8.2.3 2001-01-27 06:15:38 +00:00
itojun 08d2a7f10e don't undefine _res. _res is redefined to bind__res for avoiding
symbol conflict.
2000-11-13 20:58:29 +00:00
itojun 7da1bb7a9c synchronize with BIND 8.2.2-P7.
- resolve conflicts (there are many conflicts with $NetBSD$ tags -
  dunno why they happen).
- type pedant (couple of typecasts).

correct yacc-generated file handling.  remove bin/named/ns_parser.h,
use the header yacc generates at compilation time.
2000-11-10 09:56:56 +00:00
itojun 7992052d11 bind 8.2.2-P7 2000-11-10 09:33:54 +00:00
is 7f029e5684 Format string cleanups by Bill Sommerfeld. 2000-10-08 20:03:12 +00:00
mrg 0a190e7396 do not #undef _res; we want to get any #define our local resolv.h has.
fixes last part of PR#10651.
2000-08-14 11:33:34 +00:00
itojun 97cd11ff66 need string.h for prototype of memset(). fixes build breakage on alpha.
From: Tim Rightnour <root@garbled.net>
2000-03-02 18:08:44 +00:00
itojun 548cc318ca do not try to use BIND4 code in libc.
dig/host/whatever assumes that it is using BIND8 code.  mixing BIND4 in
libc with BIND8 code will result in very strange behavior, or program panics.

it is not necessary for dig/host/whatever to obey /etc/nsswitch.conf, actually
dig(1) is explicit about it.

now dist/bind is almost clean BIND822p5, with the following exception:
- /etc/irs.conf will never be visited when running BIND8 toolchain,
  to make it less complex.  the search order for BIND8 toolchain is
  defined in dist/bind/lib/irs/gen.c:default_map_rules().
and usr.sbin/bind compiles them in BSD make framework, with no tricks at all.
2000-03-01 10:49:58 +00:00
veego 9f3c20bc0f Use the libc md5 function. 1999-11-28 17:39:06 +00:00
veego a8baad4e90 Remove the (void *) in front of the ctx->sock. 1999-11-20 20:38:54 +00:00
veego 1506ac921f Disable the '#undef _res', otherwise namespace.h doesn't work here. 1999-11-20 19:16:55 +00:00
veego 7532ce689d Import bind 8.2.2-P5. 1999-11-20 18:53:57 +00:00