Commit Graph

32 Commits

Author SHA1 Message Date
itojun 729df1257b sync with bind 8.3.4. 2002-11-17 14:09:52 +00:00
itojun 90a2edbc75 apply http://www.isc.org/products/BIND/patches/bind833.diff to fix recent
vulnerabilities:

* BIND: Remote Execution of Code (BIND 4 & 8)
* BIND: Multiple Denial of Service (BIND 8 only)
2002-11-14 02:04:27 +00:00
jdolecek 580acd6b37 Fix bug introduced in previous rev 1.5 - the for() body in decode_bitstring()
needs to be wrapped with curly braces.
Pointed out by Greg A. Woods in bin/17525.
2002-07-10 19:30:14 +00:00
itojun 44f496c00a sync with audit result from kame.
- sprintf() can return negative value on error, so p += sprintf(p, blah)
  is unsafe
- signed/unsigned mixup
- wrong assumption: sizeof(time_t) <= sizeof(int)
- need to init errno to 0 before strtoul()
2002-07-04 23:30:39 +00:00
itojun 7b2c9d8551 be consistent with libc getaddr/nameinfo. 2002-06-28 06:40:51 +00:00
itojun 9421d2b57a patch from pkgsrc - initialize *res to NULL 2002-06-28 06:21:29 +00:00
itojun 2adbce1610 kill one more use of tandem variable. 2002-06-28 06:20:55 +00:00
itojun 2200386ee7 sync with 8.3.3. 2002-06-28 06:11:47 +00:00
itojun ce924b0f55 sync with 8.3.2. 99% of conflicts were due to $NetBSD$ tag. 2002-06-20 11:42:53 +00:00
itojun 123de7c9ca ISC BIND 8.3.2. various IPv6 fixes and correctins. 2002-06-20 10:29:14 +00:00
kleink f7d2af261c Sync with libc implementation (change size argument from size_t to
socklen_t); pointed out by Chris Gilbert.
2002-05-15 20:58:19 +00:00
bjh21 c701db92ac Remove .cvsignore file.
<URL:http://www.netbsd.org/developers/cvs-repos/notes.html#cvsignore>
2002-04-04 17:08:24 +00:00
bjh21 dca4ae94d6 When checking that a potentially-unsigned enum is >= 0, assign it to an int
first.  This is necessary to avoid warnings with -fshort-enums.  Casting
to an int really should be enough, but turns out not to be.

This change will be documented in doc/HACKS.
2002-03-09 13:22:52 +00:00
wiz 4c99916337 va_{start,end} audit:
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).

Improved by comments from enami and christos -- thanks!

Heimdal/krb4/KAME changes already fed back, rest to follow.

Inspired by, but not not based on, OpenBSD.
2001-09-24 13:22:25 +00:00
itojun 4cd3525823 upgrade to 8.2.4. 2001-05-17 22:59:37 +00:00
itojun ddb7465740 BIND 8.2.4 2001-05-17 22:41:07 +00:00
itojun 900d6f1790 BIND 8.2.4 2001-05-17 20:45:58 +00:00
wiz 14dbdf5518 Negative exit code cleanup: Replace exit(-x) with exit(x).
As seen on tech-userlevel.
2001-04-06 11:13:45 +00:00
itojun 93ea2d0c7a re-add md5 from BIND8 kit. lib/dnssafe does not compile without it. 2001-01-27 07:58:25 +00:00
itojun 1a7fc7b687 upgrade to BIND 8.2.3. the upgrade is critical (security fixes).
please test.
2001-01-27 07:21:56 +00:00
itojun 10a27e85b1 BIND 8.2.3 2001-01-27 06:15:38 +00:00
itojun 08d2a7f10e don't undefine _res. _res is redefined to bind__res for avoiding
symbol conflict.
2000-11-13 20:58:29 +00:00
itojun 7da1bb7a9c synchronize with BIND 8.2.2-P7.
- resolve conflicts (there are many conflicts with $NetBSD$ tags -
  dunno why they happen).
- type pedant (couple of typecasts).

correct yacc-generated file handling.  remove bin/named/ns_parser.h,
use the header yacc generates at compilation time.
2000-11-10 09:56:56 +00:00
itojun 7992052d11 bind 8.2.2-P7 2000-11-10 09:33:54 +00:00
is 7f029e5684 Format string cleanups by Bill Sommerfeld. 2000-10-08 20:03:12 +00:00
mrg 0a190e7396 do not #undef _res; we want to get any #define our local resolv.h has.
fixes last part of PR#10651.
2000-08-14 11:33:34 +00:00
itojun 97cd11ff66 need string.h for prototype of memset(). fixes build breakage on alpha.
From: Tim Rightnour <root@garbled.net>
2000-03-02 18:08:44 +00:00
itojun 548cc318ca do not try to use BIND4 code in libc.
dig/host/whatever assumes that it is using BIND8 code.  mixing BIND4 in
libc with BIND8 code will result in very strange behavior, or program panics.

it is not necessary for dig/host/whatever to obey /etc/nsswitch.conf, actually
dig(1) is explicit about it.

now dist/bind is almost clean BIND822p5, with the following exception:
- /etc/irs.conf will never be visited when running BIND8 toolchain,
  to make it less complex.  the search order for BIND8 toolchain is
  defined in dist/bind/lib/irs/gen.c:default_map_rules().
and usr.sbin/bind compiles them in BSD make framework, with no tricks at all.
2000-03-01 10:49:58 +00:00
veego 9f3c20bc0f Use the libc md5 function. 1999-11-28 17:39:06 +00:00
veego a8baad4e90 Remove the (void *) in front of the ctx->sock. 1999-11-20 20:38:54 +00:00
veego 1506ac921f Disable the '#undef _res', otherwise namespace.h doesn't work here. 1999-11-20 19:16:55 +00:00
veego 7532ce689d Import bind 8.2.2-P5. 1999-11-20 18:53:57 +00:00