]>
git.ipfire.org Git - thirdparty/pdns.git/log
Rosen Penev [Sat, 6 Jun 2020 18:33:55 +0000 (11:33 -0700)]
use std::string_view when available
There's a standard C++ macro to check for its existence.
libstdc++ from GCC makes it available under C++17 and up. libcxx from
LLVM makes it available everywhere.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Peter van Dijk [Fri, 5 Jun 2020 13:54:03 +0000 (15:54 +0200)]
Merge pull request #9163 from zeha/fix-7795
Optimize IXFR-to-AXFR fallback path
Peter van Dijk [Fri, 5 Jun 2020 13:45:31 +0000 (15:45 +0200)]
Merge pull request #9040 from Habbie/auth-readme
auth README: some fixes; remove manual doc build instructions
Peter van Dijk [Fri, 5 Jun 2020 13:43:57 +0000 (15:43 +0200)]
Merge pull request #9180 from Habbie/4.2-changes-8497
auth: add #8497 to changelog
Peter van Dijk [Fri, 5 Jun 2020 09:08:21 +0000 (11:08 +0200)]
Merge pull request #8943 from pieterlexis/remote-commit-false
Remote Backend: Throw DBException in functions that allow it
Peter van Dijk [Fri, 5 Jun 2020 08:34:28 +0000 (10:34 +0200)]
Merge pull request #8995 from kpfleming/local-port-docs
Clarify local-address documentation
Peter van Dijk [Fri, 5 Jun 2020 08:25:54 +0000 (10:25 +0200)]
Merge pull request #9178 from franklouwers/master
Clarify allow-axfr-ips behaviour in combination with TSIG
Remi Gacogne [Fri, 5 Jun 2020 07:28:53 +0000 (09:28 +0200)]
Merge pull request #9151 from rgacogne/rec-root-ds
rec: Fix the handling of DS queries for the root
Remi Gacogne [Fri, 5 Jun 2020 07:27:48 +0000 (09:27 +0200)]
rec: Remove trailing whitespace in a comment
Otto Moerbeek [Wed, 3 Jun 2020 13:38:21 +0000 (15:38 +0200)]
Merge pull request #9194 from omoerbeek/rec-cname-self-referral
rec: If a CNAME target is found in the cache, check if it's equal to qname and ServFail if so.
Otto Moerbeek [Wed, 3 Jun 2020 10:58:51 +0000 (12:58 +0200)]
Merge pull request #9192 from omoerbeek/rec-depth-incr
rec: Correct depth increments.
Otto Moerbeek [Wed, 3 Jun 2020 10:15:46 +0000 (12:15 +0200)]
If a CNAME target is found in the cache, check if it's equal
to qname and ServFail if so.
Fixes the easy case of #9153. Longer chains with self-refs remain an issue.
Otto Moerbeek [Wed, 3 Jun 2020 07:07:56 +0000 (09:07 +0200)]
Correct depth increments.
With the introduction of qname minimization, a function
doResolveNoQNameMinimization() was introduced. This function is
called by doResolve() with depth incremented. Due to the recursive
nature of the resursor algortihm (Nomen est Omen) we end up
incrementing the depth too much. This prompted a review of the other
places depth was incremented, and I believe it should only be done
when calling doResolve(). Especially the case "+ 2" in the getAddrs()
call looks strange to me, as the doResolve() calls in getAddrs()
already call doResolve() with depth + 1.
This fixes #9184 and likely other cases of deep recursion caused
by long CNAME chains.
Frank Louwers [Tue, 2 Jun 2020 12:55:06 +0000 (14:55 +0200)]
Update docs/tsig.rst
Co-authored-by: Peter van Dijk <peter.van.dijk@powerdns.com>
Remi Gacogne [Tue, 2 Jun 2020 12:54:09 +0000 (14:54 +0200)]
Merge pull request #9142 from rgacogne/rec-defer-nod-lookup
rec: Defer the NOD lookup until after the response has been sent
Remi Gacogne [Tue, 2 Jun 2020 12:53:18 +0000 (14:53 +0200)]
Merge pull request #9172 from rgacogne/rec-rpz-several-ixfr-deltas
rec: Fix RPZ removals when an update has several deltas
Remi Gacogne [Tue, 2 Jun 2020 11:51:11 +0000 (13:51 +0200)]
Merge pull request #9127 from rgacogne/fix-gethostname-no-hostnamemax
Fix compilation on systems that do not define HOST_NAME_MAX
Remi Gacogne [Tue, 2 Jun 2020 10:24:34 +0000 (12:24 +0200)]
Fix compilation on systems that do not define HOST_NAME_MAX
On FreeBSD at least, HOST_NAME_MAX is not defined and we need to
use sysconf() to get the value at runtime instead.
Based on a work done by @RvdE to make the recursor compile on
FreeBSD (many thanks!).
Peter van Dijk [Sun, 31 May 2020 21:46:02 +0000 (23:46 +0200)]
auth: add #8497 to changelog
Frank Louwers [Fri, 29 May 2020 13:37:58 +0000 (15:37 +0200)]
Clarify allow-axfr-ips behaviour in combination with TSIG
Chris Hofstaedtler [Fri, 29 May 2020 12:12:38 +0000 (14:12 +0200)]
Address feedback from #9176
aerique [Thu, 28 May 2020 21:45:34 +0000 (23:45 +0200)]
Merge pull request #9152 from aerique/feature/add-supported-for-unsigned-packages
Make sure we can install unsigned packages.
Remi Gacogne [Thu, 28 May 2020 16:54:20 +0000 (18:54 +0200)]
rec: Add a regression test for the RPZ updates with several deltas
Remi Gacogne [Thu, 28 May 2020 16:15:53 +0000 (18:15 +0200)]
rec: Fix RPZ removals when an update has several deltas
Peter van Dijk [Thu, 28 May 2020 09:33:07 +0000 (11:33 +0200)]
Merge pull request #9160 from Habbie/spelling-only-docs
limit spell checking to docs
Peter van Dijk [Thu, 28 May 2020 08:55:53 +0000 (10:55 +0200)]
Merge pull request #9166 from cmouse/patch-
1590648655
opensslsigners: Add missing 'static' keyword
Remi Gacogne [Thu, 28 May 2020 07:19:39 +0000 (09:19 +0200)]
Merge pull request #9162 from jsoref/clarify-docs
Clarify docs
Aki Tuomi [Thu, 28 May 2020 06:50:04 +0000 (09:50 +0300)]
opensslsigners: Add missing 'static' keyword
openssl_pthreads_locking_callback and openssl_pthreads_id_callback are
local functions, so they need static.
Chris Hofstaedtler [Wed, 27 May 2020 21:20:08 +0000 (23:20 +0200)]
Optimize IXFR-to-AXFR fallback path
Avoid making new backends when we are going to either deny the XFR, or
fall back to AXFR anyway.
This cuts down the number of new backends from four (three for IXFR
pre-checks plus one for AXFR) to one (just the AXFR one).
When replying in IXFR mode, we keep making _one_ new backend, which is
also better than before.
While we now hold the s_plock for a while longer, we only take it once
in doIXFR; before we took it twice -- for TSIG retrieval, which now
re-uses the IXFR backend.
Josh Soref [Wed, 27 May 2020 19:40:50 +0000 (15:40 -0400)]
rewrite pdns-distributes-queries
Peter van Dijk [Wed, 27 May 2020 15:40:41 +0000 (17:40 +0200)]
spellcheck: only run when docs have been changed
Josh Soref [Wed, 27 May 2020 14:48:30 +0000 (10:48 -0400)]
clarify: reuseports behavior re worker threads
Josh Soref [Wed, 27 May 2020 14:41:24 +0000 (10:41 -0400)]
Wishy-washy
Josh Soref [Wed, 27 May 2020 14:24:40 +0000 (10:24 -0400)]
Update recursordist: reuseport
Peter van Dijk [Wed, 27 May 2020 14:04:56 +0000 (16:04 +0200)]
we keep allowing these words so that we can do incidental spellchecks later
Peter van Dijk [Wed, 27 May 2020 13:55:04 +0000 (15:55 +0200)]
remove spelling cron; limit spelling to docs
aerique [Tue, 26 May 2020 07:06:56 +0000 (09:06 +0200)]
Add `--nobest` when installing PDNS software.
This is for testing in Docker images, we just want them to build.
aerique [Mon, 25 May 2020 15:08:07 +0000 (17:08 +0200)]
Make sure we can install unsigned packages.
Sometimes we need to install unsigned packages from our own ad-hoc repo,
installing `apt-transport-https` makes sure we can do this (at least on
Debian Stretch).
Remi Gacogne [Mon, 25 May 2020 09:33:19 +0000 (11:33 +0200)]
rec: Defer the NOD lookup until after the response has been sent
If the NOD lookup is slow, for example because the destination
authoritative server is down, doing the NOD lookup before the response
has been sent increases the latency a lot.
This commit moves the actual NOD lookup after the response has been
sent, so we can still use the existing mthread (we might actually need
to do a proper DNS resolution to find the target authoritative server)
without keeping the client waiting.
Remi Gacogne [Mon, 25 May 2020 14:17:50 +0000 (16:17 +0200)]
rec: Fix formatting in the "root DS" unit test
Remi Gacogne [Mon, 25 May 2020 14:08:17 +0000 (16:08 +0200)]
Merge pull request #9141 from rgacogne/rec-remove-getquerylocaladdress-stub
rec: Remove unused getQueryLocalAddress stub in the unit tests
Remi Gacogne [Mon, 25 May 2020 14:02:21 +0000 (16:02 +0200)]
rec: Fix the handling of DS queries for the root
Remi Gacogne [Mon, 25 May 2020 12:45:07 +0000 (14:45 +0200)]
Merge pull request #9143 from Habbie/travis-unbreak-trusty
travis: install pdns package from direct download
Peter van Dijk [Mon, 25 May 2020 08:27:01 +0000 (10:27 +0200)]
travis: install pdns package from direct download
Remi Gacogne [Mon, 25 May 2020 09:17:24 +0000 (11:17 +0200)]
rec: Remove unused getQueryLocalAddress stub in the unit tests
The real function moved to the pdns namespace anyway.
Remi Gacogne [Mon, 25 May 2020 07:50:02 +0000 (09:50 +0200)]
Merge pull request #9137 from phonedph1/patch-21
rec: Update syncres.cc
Remi Gacogne [Mon, 25 May 2020 07:49:48 +0000 (09:49 +0200)]
Merge pull request #9138 from PowerDNS/omoerbeek-patch-1
rec: Typos and ref to rec instead of auth in security advisory
Otto Moerbeek [Fri, 22 May 2020 06:44:57 +0000 (08:44 +0200)]
Typos and ref to rec instead of auth
phonedph1 [Thu, 21 May 2020 01:27:01 +0000 (19:27 -0600)]
Update syncres.cc
Otto Moerbeek [Wed, 20 May 2020 08:47:48 +0000 (10:47 +0200)]
Merge pull request #9134 from omoerbeek/secpoll-cleanup
Secpoll cleanup, mark prereleases with vulnerabilities as such.
Otto Moerbeek [Wed, 20 May 2020 07:38:59 +0000 (09:38 +0200)]
Secpoll cleanup, mark prereleases with vulnerabilities as such.
Otto Moerbeek [Wed, 20 May 2020 07:12:32 +0000 (09:12 +0200)]
Merge pull request #9131 from mnordhoff/patch-6
rec: docs: Update the allow-from setting default
Matt Nordhoff [Tue, 19 May 2020 21:56:55 +0000 (21:56 +0000)]
rec: docs: Update the allow-from setting default.
The default is LOCAL_NETS, but the copy of it in the documentation was incomplete.
Remi Gacogne [Tue, 19 May 2020 15:21:26 +0000 (17:21 +0200)]
Merge pull request #9111 from omoerbeek/dnsreplay-loop
Support LOOP link type in dnsreplay
Otto Moerbeek [Tue, 19 May 2020 13:39:17 +0000 (15:39 +0200)]
Merge pull request #9126 from omoerbeek/rec-4.1.16-secpoll
Prepare rec 4.1.16 secpoll update
Otto Moerbeek [Tue, 19 May 2020 12:53:01 +0000 (14:53 +0200)]
Prepare rec 4.1.16 secpoll update
Kevin P. Fleming [Tue, 19 May 2020 11:12:43 +0000 (07:12 -0400)]
Correct spelling error
Kevin P. Fleming [Fri, 3 Apr 2020 10:52:01 +0000 (06:52 -0400)]
Render examples as preformatted text
Signed-off-by: Kevin P. Fleming <kevin@km6g.us>
Kevin P. Fleming [Fri, 3 Apr 2020 10:34:45 +0000 (06:34 -0400)]
Address review feedback.
Signed-off-by: Kevin P. Fleming <kevin@km6g.us>
Kevin P. Fleming [Thu, 2 Apr 2020 23:16:19 +0000 (19:16 -0400)]
Clarify local-address documentation
The 'local-address' setting accepts both IPv4 and IPv6 addresses,
and also accepts port numbers. This patch documents all of those
behaviors.
Signed-off-by: Kevin P. Fleming <kevin@km6g.us>
Remi Gacogne [Tue, 19 May 2020 10:51:22 +0000 (12:51 +0200)]
Merge pull request #9124 from rgacogne/powerdns-advisory-2020-002
rec: powerdns-advisory-2020-002 -> powerdns-advisory-2020-02
Remi Gacogne [Tue, 19 May 2020 10:23:16 +0000 (12:23 +0200)]
rec: powerdns-advisory-2020-002 -> powerdns-advisory-2020-02
Otto Moerbeek [Tue, 19 May 2020 10:14:30 +0000 (12:14 +0200)]
Merge pull request #9118 from pieterlexis/fix-rec-docs
Fix LaTeX-pdns recursor docs
Otto Moerbeek [Tue, 19 May 2020 10:14:16 +0000 (12:14 +0200)]
Merge pull request #9119 from omoerbeek/fix-formatting
fix formatting
Otto Moerbeek [Tue, 19 May 2020 09:51:03 +0000 (11:51 +0200)]
fix formatting
Pieter Lexis [Tue, 19 May 2020 09:25:57 +0000 (11:25 +0200)]
Add names and vars to spelling whitelist
Pieter Lexis [Tue, 19 May 2020 09:16:37 +0000 (11:16 +0200)]
Fix LaTeX-pdns recursor docs
Pieter Lexis [Tue, 19 May 2020 08:49:13 +0000 (10:49 +0200)]
Merge pull request #9114 from pieterlexis/rec-may-2020
Recursor fixes May 2020
Pieter Lexis [Tue, 19 May 2020 08:26:26 +0000 (10:26 +0200)]
Merge pull request #9113 from pieterlexis/rec-prep-may-2020
rec: prep for May 2020 releases
Otto Moerbeek [Wed, 13 May 2020 11:21:50 +0000 (13:21 +0200)]
rec: prep for May 2020 security releases
Otto Moerbeek [Mon, 18 May 2020 13:28:40 +0000 (15:28 +0200)]
Merge pull request #9106 from omoerbeek/release-cycles
Tell about the release cycles.
Otto Moerbeek [Mon, 18 May 2020 12:40:00 +0000 (14:40 +0200)]
Merge pull request #8940 from pieterlexis/resolver-query-local-address6
Merge query-local-address6 into query-local-address
Otto Moerbeek [Mon, 18 May 2020 11:35:54 +0000 (13:35 +0200)]
"Adress" is actually prural in query-local-address
Co-authored-by: Peter van Dijk <peter.van.dijk@powerdns.com>
Otto Moerbeek [Mon, 18 May 2020 11:26:13 +0000 (13:26 +0200)]
Merge pull request #9073 from pieterlexis/runtime-dirs-virtual-hosting
Ensure runtime dirs for virtual services differ
Otto Moerbeek [Mon, 18 May 2020 11:24:16 +0000 (13:24 +0200)]
Merge pull request #9085 from zeha/config
builder: improve shipped config files
Otto Moerbeek [Fri, 15 May 2020 08:11:41 +0000 (10:11 +0200)]
Tell about the release cycles.
Peter van Dijk [Fri, 15 May 2020 19:16:40 +0000 (21:16 +0200)]
Merge pull request #9107 from jsoref/spell-check
Update check-spelling to 0.0.16-a
Josh Soref [Fri, 15 May 2020 15:09:22 +0000 (11:09 -0400)]
Update expects
Josh Soref [Fri, 15 May 2020 15:09:07 +0000 (11:09 -0400)]
spelling: Wshadow
Josh Soref [Fri, 15 May 2020 14:46:35 +0000 (10:46 -0400)]
Ignore c(xx)flags
Josh Soref [Fri, 15 May 2020 14:44:51 +0000 (10:44 -0400)]
spelling: with
Josh Soref [Fri, 15 May 2020 14:43:05 +0000 (10:43 -0400)]
spelling: target
Josh Soref [Fri, 15 May 2020 14:42:48 +0000 (10:42 -0400)]
spelling: should
Josh Soref [Fri, 15 May 2020 14:42:37 +0000 (10:42 -0400)]
spelling: record
Josh Soref [Fri, 15 May 2020 14:42:20 +0000 (10:42 -0400)]
spelling: milliseconds
Josh Soref [Fri, 15 May 2020 14:40:26 +0000 (10:40 -0400)]
spelling: improvements
Josh Soref [Fri, 15 May 2020 14:39:58 +0000 (10:39 -0400)]
spelling: first
Josh Soref [Fri, 15 May 2020 14:38:55 +0000 (10:38 -0400)]
spelling: answer
Josh Soref [Fri, 15 May 2020 14:30:24 +0000 (10:30 -0400)]
Update check-spelling action
Peter van Dijk [Fri, 15 May 2020 14:26:19 +0000 (16:26 +0200)]
Merge pull request #9018 from jsoref/spell-check
Set up spell-checking action
Otto Moerbeek [Fri, 15 May 2020 13:33:12 +0000 (15:33 +0200)]
Support LOOP link type
Otto Moerbeek [Fri, 15 May 2020 08:38:27 +0000 (10:38 +0200)]
Merge pull request #9105 from omoerbeek/auth-4.0-eol
Mark auth 4.0.x as EOL, plus some even older versions.
Otto Moerbeek [Fri, 15 May 2020 07:58:21 +0000 (09:58 +0200)]
Mark auth 4.0.x as EOL, plus some even older versions.
Otto Moerbeek [Thu, 14 May 2020 08:22:00 +0000 (10:22 +0200)]
Merge pull request #9099 from PowerDNS/omoerbeek-patch-1
rec: don't suggest to add a TA for powerdns.com
Otto Moerbeek [Thu, 14 May 2020 08:21:39 +0000 (10:21 +0200)]
Merge pull request #9100 from omoerbeek/secpol-err-msg
Less negatives in error messages improves readability.
Otto Moerbeek [Wed, 13 May 2020 14:29:42 +0000 (16:29 +0200)]
Also update surrounding text as noted by phonedph1
Otto Moerbeek [Wed, 13 May 2020 12:27:42 +0000 (14:27 +0200)]
Less negatives in error messages improves readability.
Otto Moerbeek [Wed, 13 May 2020 12:17:44 +0000 (14:17 +0200)]
don't suggest to a TA for pwerdns.com
Remi Gacogne [Mon, 17 Feb 2020 14:20:32 +0000 (15:20 +0100)]
Don't read potentially uninitalized memory if gethostname() failed
If the buffer is smaller than `HOST_NAME_MAX` (64 on Linux but up to
255 bytes in POSIX, which FreeBSD, MacOS etc honor) gethostname()
might return -1 without null-terminating the buffer, causing an
out-of-bounds read.
As we look for the first '.' using `strchr()`, replacing it with a
null byte, we also have a one-byte out-of-bounds write which might
result in a crash or, albeit very unlikely, arbitrary code execution.
Remi Gacogne [Fri, 24 Apr 2020 09:48:16 +0000 (11:48 +0200)]
rec: Fix DNSSEC validation of completely empty NXDomain answers
If the answer has no SOA and no NSEC inside a DNSSEC-secure zone,
we should go Bogus.