]> git.ipfire.org Git - thirdparty/bind9.git/log
thirdparty/bind9.git
2 years agoUse 32-bit hashing in isc memory debugging
Ondřej Surý [Tue, 12 Sep 2023 14:35:29 +0000 (16:35 +0200)] 
Use 32-bit hashing in isc memory debugging

Switch from 64-bit isc_hash_function() to 32-bit isc_hash32() as we were
using the 32-bit value only anyway.

2 years agoUse incremental hashing in the isc_sockaddr_hash() function
Ondřej Surý [Tue, 12 Sep 2023 14:33:19 +0000 (16:33 +0200)] 
Use incremental hashing in the isc_sockaddr_hash() function

Instead of copying address back and forth when hashing addr+port, we can
use incremental hashing.  Additionally, switch from 64-bit
isc_hash_function to 32-bit isc_hash32() as the resulting value is
32-bit.

2 years agoMerge branch '4311-remove-sockaddr_unix' into 'main'
Ondřej Surý [Tue, 19 Sep 2023 17:29:53 +0000 (17:29 +0000)] 
Merge branch '4311-remove-sockaddr_unix' into 'main'

Completely remove the Unix Domain Socket support from BIND 9

Closes #4311

See merge request isc-projects/bind9!8292

2 years agoAdd CHANGES and release note for [GL #4311]
Ondřej Surý [Tue, 12 Sep 2023 06:59:01 +0000 (08:59 +0200)] 
Add CHANGES and release note for [GL #4311]

2 years agoRemove Raw and FDWatch type of socket statistics
Ondřej Surý [Tue, 12 Sep 2023 07:41:56 +0000 (09:41 +0200)] 
Remove Raw and FDWatch type of socket statistics

The isc_sockstatscounter_raw* and isc_sockstatscounter_fdwatch was just
a dead code and those counters were not used anywhere.  Remove them.

2 years agoCompletely remove the Unix Domain Socket support from BIND 9
Ondřej Surý [Tue, 12 Sep 2023 06:39:12 +0000 (08:39 +0200)] 
Completely remove the Unix Domain Socket support from BIND 9

The Unix Domain Sockets support in BIND 9 has been completely disabled
since BIND 9.18 and it has been a fatal error since then.  Cleanup the
code and the documentation that suggest that Unix Domain Sockets are
supported.

2 years agoMerge branch '4312-pytest-symlink-name-collision' into 'main'
Tom Krizek [Tue, 19 Sep 2023 15:59:03 +0000 (15:59 +0000)] 
Merge branch '4312-pytest-symlink-name-collision' into 'main'

Rename convenience symlink to pytest artifacts

Closes #4312

See merge request isc-projects/bind9!8306

2 years agoRename convenience symlink to pytest artifacts
Tom Krizek [Tue, 19 Sep 2023 15:20:32 +0000 (17:20 +0200)] 
Rename convenience symlink to pytest artifacts

The previous symlink name convention was prone to name collisions If a
system test contained both a shell test and a pytest module of the same
name (e.g. dnstap test has both tests.sh and tests_dnstap.py), then
these would have the same convenience symlink, which could cause test
setup issues as well as confusion when examining test artifacts.

Update the naming convention to include the full pytest module name.
This results in a slightly more verbose names for shell tests (e.g.
dnstap_sh_dnstap instead of the previous dnstap_dnstap), but it removes
the chance of a collision.

2 years agoMerge branch '4250-remove-legacy-runner-support-for-python-tests' into 'main'
Tom Krizek [Tue, 19 Sep 2023 15:09:08 +0000 (15:09 +0000)] 
Merge branch '4250-remove-legacy-runner-support-for-python-tests' into 'main'

remove support for running python system tests with legacy test runner

Closes #4250

See merge request isc-projects/bind9!8202

2 years agoUpdate system test runner doc with pytest glue files
Tom Krizek [Tue, 15 Aug 2023 13:32:45 +0000 (15:32 +0200)] 
Update system test runner doc with pytest glue files

Document that pytest requires a glue file for each shell tests in order
to detect it.

2 years agoAdd CHANGES note for [GL #4250]
Tom Krizek [Tue, 15 Aug 2023 13:01:43 +0000 (15:01 +0200)] 
Add CHANGES note for [GL #4250]

2 years agoUse integers for ports fixtures in pytest
Tom Krizek [Tue, 15 Aug 2023 11:55:56 +0000 (13:55 +0200)] 
Use integers for ports fixtures in pytest

Reorganize individual port fixtures and re-use the ports fixture to
obtain their number. Store it as integer and only cast it to string when
setting it as environment variable.

2 years agoReformat conftest.py with black
Tom Krizek [Thu, 7 Sep 2023 13:22:23 +0000 (15:22 +0200)] 
Reformat conftest.py with black

2 years agoRemove legacy runner support from conftest.py
Tom Krizek [Thu, 7 Sep 2023 13:21:54 +0000 (15:21 +0200)] 
Remove legacy runner support from conftest.py

Remove code fork for legacy runner, reorganize imports and move a
pylint-silencing snippet to the top of the file. The rest of the code
was just unindented.

2 years agoRemove pytest invocation from legacy runner
Tom Krizek [Tue, 15 Aug 2023 11:40:13 +0000 (13:40 +0200)] 
Remove pytest invocation from legacy runner

In order to python system tests, pytest (runner) has to be used
directly. This makes it possible to simplify the pytest runner and make
its behavior simpler and easier to extend.

The legacy runner can still be used to run shell system tests.

2 years agoMerge branch '4262-make-check-pytest' into 'main'
Tom Krizek [Tue, 19 Sep 2023 13:41:16 +0000 (13:41 +0000)] 
Merge branch '4262-make-check-pytest' into 'main'

Use pytest runner for make check

Closes #4262

See merge request isc-projects/bind9!8286

2 years agoRemove make check invocation from legacy.run.sh
Tom Krizek [Fri, 8 Sep 2023 10:44:08 +0000 (12:44 +0200)] 
Remove make check invocation from legacy.run.sh

The legacy runner no longer uses make check. Ensure the legacy runner
script doesn't interact with that automake target in any way. The legacy
runner script remains available to execute the legacy runner, but there
is no out-of-the box support for running tests in parallel. Other tools
such as xargs can be utilized for that.

2 years agoci: switch OpenBSD job to use make check
Tom Krizek [Wed, 6 Sep 2023 11:43:18 +0000 (13:43 +0200)] 
ci: switch OpenBSD job to use make check

Invoking pytest directly provides a better formatted output and more
flexibility. However, it's prudent to verify that `make check` keeps
working as expected. Use it in the OpenBSD job which isn't executed as
frequently and its output is of least concern.

2 years agoModify custom-test-driver to interpret JUnit results
Tom Krizek [Tue, 5 Sep 2023 08:29:13 +0000 (10:29 +0200)] 
Modify custom-test-driver to interpret JUnit results

Pytest provides JUnit output and uses different exit codes from
Automake. Use the conversion script to interpret the JUnit test results
from python rather than relying on the status code.

2 years agoConvert JUnit XML from pytest into Automake .trs files
Tom Krizek [Tue, 5 Sep 2023 14:16:20 +0000 (16:16 +0200)] 
Convert JUnit XML from pytest into Automake .trs files

It's important to parse the JUnit result file rather than relying on the
exit code from pytest, which has a different meaning. Include a .trs test
result for each test case and set an exit code which is most appropriate
as the aggregate result (e.g. it will be set to 77 (SKIP) if there's at
least one test case that was skipped).

2 years agoPrioritize long-running system tests for legacy runner
Tom Krizek [Mon, 4 Sep 2023 14:08:06 +0000 (16:08 +0200)] 
Prioritize long-running system tests for legacy runner

Synchronize the test priority with the pytest runner (which handles the
prioritization in conftest.py).

2 years agoUse prereq.sh for rpzrecurse system test
Tom Krizek [Mon, 4 Sep 2023 14:03:05 +0000 (16:03 +0200)] 
Use prereq.sh for rpzrecurse system test

2 years agoUse prereq.sh for serve-stale system test
Tom Krizek [Mon, 4 Sep 2023 13:56:14 +0000 (15:56 +0200)] 
Use prereq.sh for serve-stale system test

2 years agoUse prereq.sh for chain system test
Tom Krizek [Mon, 4 Sep 2023 14:05:10 +0000 (16:05 +0200)] 
Use prereq.sh for chain system test

2 years agoUse prereq.sh for digdelv, dnssec, forward system tests
Tom Krizek [Mon, 4 Sep 2023 13:38:25 +0000 (15:38 +0200)] 
Use prereq.sh for digdelv, dnssec, forward system tests

2 years agoUse prereq.sh for qmin, cookie system tests
Tom Krizek [Mon, 4 Sep 2023 13:34:05 +0000 (15:34 +0200)] 
Use prereq.sh for qmin, cookie system tests

2 years agoUse prereq.sh for reclimit system test
Tom Krizek [Mon, 4 Sep 2023 13:15:34 +0000 (15:15 +0200)] 
Use prereq.sh for reclimit system test

2 years agoUse prereq.sh for xfer system test
Tom Krizek [Mon, 4 Sep 2023 13:00:12 +0000 (15:00 +0200)] 
Use prereq.sh for xfer system test

2 years agoUse prereq.sh for statschannel system test
Tom Krizek [Mon, 4 Sep 2023 12:32:06 +0000 (14:32 +0200)] 
Use prereq.sh for statschannel system test

2 years agoAdd prereq.sh scripts for system tests requiring perl mod DNS
Tom Krizek [Mon, 4 Sep 2023 11:56:28 +0000 (13:56 +0200)] 
Add prereq.sh scripts for system tests requiring perl mod DNS

prereq.sh mechanism for dependency detection is preferred since it works
for both legacy and pytest runner.

2 years agoUse proper perl interpreter in xfer system test
Tom Krizek [Mon, 4 Sep 2023 11:49:18 +0000 (13:49 +0200)] 
Use proper perl interpreter in xfer system test

2 years agoRemove redundant dependency checks for system tests
Tom Krizek [Mon, 4 Sep 2023 11:41:09 +0000 (13:41 +0200)] 
Remove redundant dependency checks for system tests

Dependencies for these tests are already checked in prereq.sh - if the
dependencies are missing, these tests will be skipped. The extra
dependency check in Makefile.am is extraneous and only applied for the
legacy test runner.

2 years agoFix pytest module detection for run.sh
Tom Krizek [Thu, 31 Aug 2023 11:18:17 +0000 (13:18 +0200)] 
Fix pytest module detection for run.sh

To allow concurrent invocations of pytest, it is necessary to assign
ports properly to avoid conflicts. In order to do that, pytest needs to
know a complete list of all test modules.

When pytest is invoked from run.sh, the current working directory is the
system test directory. To properly detect other tests, the conftest.py
has to look in the bin/tests/system directory, rather than the current
working directory.

2 years agoUse pytest runner for make check
Tom Krizek [Thu, 31 Aug 2023 11:15:24 +0000 (13:15 +0200)] 
Use pytest runner for make check

Make python & pytest required dependencies to run system tests and
invoke the pytest runner from the makefile.

2 years agoMerge branch 'tkrizek/pytest-check-system-test-files-with-danger' into 'main'
Tom Krizek [Tue, 19 Sep 2023 12:46:54 +0000 (12:46 +0000)] 
Merge branch 'tkrizek/pytest-check-system-test-files-with-danger' into 'main'

enforce system test file and name conventions with danger CI

See merge request isc-projects/bind9!8254

2 years agodanger: check system test convetions for pytest runner
Tom Krizek [Wed, 30 Aug 2023 11:51:05 +0000 (13:51 +0200)] 
danger: check system test convetions for pytest runner

When adding a new system test, it might easy to forget to add the
required files for the pytest runner or break a naming convention. Add
danger checks to cover these cases.

2 years agoAdd missing pytest glue for for host system test
Tom Krizek [Wed, 30 Aug 2023 11:40:19 +0000 (13:40 +0200)] 
Add missing pytest glue for for host system test

Without this glue file, the test isn't picked up by the pytest runner
and therefore not executed.

2 years agoRename allow-query pytest glue file
Tom Krizek [Wed, 30 Aug 2023 11:37:09 +0000 (13:37 +0200)] 
Rename allow-query pytest glue file

To conform with the expected naming convention, the pytest glue file for
the `allow-query` test should use underscore as the word separator in
the python file name: allow-query/tests_sh_allow_query.py

2 years agoTreat bin/tests/system/_common as non-temp directory
Tom Krizek [Mon, 18 Sep 2023 15:20:01 +0000 (17:20 +0200)] 
Treat bin/tests/system/_common as non-temp directory

The _common directory is a special case directory which contains shared
files for other system test directories. Make sure it's tracked in git
and not deleted during temporary directory cleanup.

2 years agoRename system test directory with common files to _common
Tom Krizek [Mon, 18 Sep 2023 15:25:17 +0000 (17:25 +0200)] 
Rename system test directory with common files to _common

The old name "common" clashes with the convention of system test
directory naming. It appears as a system test directory, but it only
contains helper files.

To reduce confusion and to allow automatic detection of issues with
possibly missing test files, rename the helper directory to "_common".
The leading underscore indicates the directory is different and the its
name can no longer be confused with regular system test directories.

2 years agoMerge branch '4322-hashmap-iterator-can-iterate-twice-the-same-item-if-deleting-items...
Ondřej Surý [Tue, 19 Sep 2023 09:51:24 +0000 (09:51 +0000)] 
Merge branch '4322-hashmap-iterator-can-iterate-twice-the-same-item-if-deleting-items-via-delcurrent_next' into 'main'

Resolve "hashmap iterator can iterate twice the same item if deleting items via delcurrent_next"

Closes #4322

See merge request isc-projects/bind9!8309

2 years agoAdd CHANGES note for [GL #3422]
Mark Andrews [Tue, 19 Sep 2023 01:49:47 +0000 (11:49 +1000)] 
Add CHANGES note for [GL #3422]

2 years agoAdd assertion failure when adding to hashmap when iterating
Ondřej Surý [Sat, 16 Sep 2023 06:32:54 +0000 (08:32 +0200)] 
Add assertion failure when adding to hashmap when iterating

When iterating the table, we can't add new nodes to the hashmap because
we can't assure that we are not adding the new node before the iterator.

This also applies to rehashing - which might be triggered by both
isc_hashmap_add() and isc_hashmap_delete(), but not
isc_hashmap_iter_delcurrent_next().

2 years agoFix hashmap iteration
Mark Andrews [Tue, 19 Sep 2023 01:42:03 +0000 (11:42 +1000)] 
Fix hashmap iteration

When isc_hashmap_iter_delcurrent_next calls hashmap_delete_node
nodes from the front of the table could be added to the end of
the table resulting in them being returned twice.  Detect when
this is happening and prevent those nodes being returned twice
buy reducing the effective size of the table by one each time
it happens.

2 years agoMerge branch '4314-dns_ncache_current-fails-to-set-covered-correctly' into 'main'
Mark Andrews [Mon, 18 Sep 2023 05:42:05 +0000 (05:42 +0000)] 
Merge branch '4314-dns_ncache_current-fails-to-set-covered-correctly' into 'main'

Resolve "dns_ncache_current fails to set covered correctly"

Closes #4314

See merge request isc-projects/bind9!8300

2 years agoAdd a CHANGES note for [GL #4314]
Mark Andrews [Wed, 13 Sep 2023 01:22:30 +0000 (11:22 +1000)] 
Add a CHANGES note for [GL #4314]

2 years agoCheck RRSIG covered type in negative cache entry
Mark Andrews [Fri, 15 Sep 2023 04:27:31 +0000 (14:27 +1000)] 
Check RRSIG covered type in negative cache entry

The covered type previously displayed as TYPE0 when it should
have reflected the records that was actually covered.

2 years agoCorrectly set the value of covered in dns_ncache_current
Mark Andrews [Wed, 13 Sep 2023 00:59:39 +0000 (10:59 +1000)] 
Correctly set the value of covered in dns_ncache_current

Fix the type and rdclass being passed to dns_rdata_tostruct so
that rrsig.covered is correctly set.

2 years agoMerge branch 'ondrej/use-cds_lfht-for-dns_dispatch' into 'main'
Ondřej Surý [Sat, 16 Sep 2023 06:35:49 +0000 (06:35 +0000)] 
Merge branch 'ondrej/use-cds_lfht-for-dns_dispatch' into 'main'

Rewrite the QID lookup table to cds_lfht

See merge request isc-projects/bind9!8304

2 years agoAdd CHANGES note for [GL !8304]
Ondřej Surý [Fri, 15 Sep 2023 15:26:35 +0000 (17:26 +0200)] 
Add CHANGES note for [GL !8304]

2 years agoCleanup unused .localport member of dns_dispatch_t and some macros
Ondřej Surý [Fri, 15 Sep 2023 13:59:28 +0000 (15:59 +0200)] 
Cleanup unused .localport member of dns_dispatch_t and some macros

The .localport member of dns_dispatch_t structure was unused, clean it
up.  Cleanup unused and/or redundant macros.

2 years agoReplace the linked list of TCP dispatches with hash table
Ondřej Surý [Fri, 15 Sep 2023 12:38:02 +0000 (14:38 +0200)] 
Replace the linked list of TCP dispatches with hash table

Reusing TCP connections with dns_dispatch_gettcp() used linear linked
list to lookup existing outgoing TCP connections that could be reused.
Replace the linked list with per-loop cds_lfht hashtable to speedup the
lookups.  We use cds_lfht because it allows non-unique node insertion
that we need to check for dispatches in different connection states.

2 years agoMake dns_dispatch bound to threads
Ondřej Surý [Fri, 15 Sep 2023 09:36:28 +0000 (11:36 +0200)] 
Make dns_dispatch bound to threads

Instead of high number of dispatches (4 * named_g_udpdisp)[1], make the
dispatches bound to threads and make dns_dispatchset_t create a dispatch
for each thread (event loop).

This required couple of other changes:

1. The dns_dispatch_createudp() must be called on loop, so the isc_tid()
   is already initialized - changes to nsupdate and mdig were required.

2. The dns_requestmgr had only a single dispatch per v4 and v6.  Instead
   of using single dispatch, use dns_dispatchset_t for each protocol -
   this is same as dns_resolver.

2 years agoRewrite the QID lookup table to cds_lfht
Ondřej Surý [Thu, 14 Sep 2023 16:01:39 +0000 (18:01 +0200)] 
Rewrite the QID lookup table to cds_lfht

Looking up unique message ID in the dns_dispatch has been using custom
hash tables.  Rewrite the custom hashtable to use cds_lfht API, removing
one extra lock in the cold-cache resolver hot path.

2 years agoMerge branch 'ondrej-improve-isc_hashmap' into 'main'
Ondřej Surý [Sat, 16 Sep 2023 05:25:54 +0000 (05:25 +0000)] 
Merge branch 'ondrej-improve-isc_hashmap' into 'main'

Refactor isc_hashmap to accept custom match function

See merge request isc-projects/bind9!8289

2 years agoRefactor isc_hashmap to accept custom match function
Ondřej Surý [Mon, 28 Aug 2023 08:08:59 +0000 (10:08 +0200)] 
Refactor isc_hashmap to accept custom match function

Refactor isc_hashmap to allow custom matching functions.  This allows us
to have better tailored keys that don't require fixed uint8_t arrays,
but can be composed of more fields from the stored data structure.

2 years agoMerge branch 'aram/danger-ignore-length-warn-for-fixups' into 'main'
Arаm Sаrgsyаn [Thu, 14 Sep 2023 10:37:51 +0000 (10:37 +0000)] 
Merge branch 'aram/danger-ignore-length-warn-for-fixups' into 'main'

Don't warn about subject line length for the fixup commits (CI)

See merge request isc-projects/bind9!8282

2 years agoDon't warn about subject line length for the fixup commits
Aram Sargsyan [Wed, 6 Sep 2023 09:52:12 +0000 (09:52 +0000)] 
Don't warn about subject line length for the fixup commits

The fixup commits' subject line has a prefix which has its own
length, so warning about the exceeding length is not accurate.
Given that the fixup commits can not be merged, because they
cause a danger failure, it's safe to ignore the length check
for them.

2 years agoMerge branch '608-add-option-to-apply-dns64-rules-to-address-being-used-for-lookups...
Mark Andrews [Wed, 13 Sep 2023 05:31:34 +0000 (05:31 +0000)] 
Merge branch '608-add-option-to-apply-dns64-rules-to-address-being-used-for-lookups' into 'main'

Resolve "Add option to apply dns64 rules to address being used for lookups."

Closes #608

See merge request isc-projects/bind9!2166

2 years agoAdd CHANGES for [GL #608]
Mark Andrews [Wed, 18 May 2022 13:26:06 +0000 (23:26 +1000)] 
Add CHANGES for [GL #608]

2 years agoDocument resolver-use-dns64
Mark Andrews [Tue, 27 Sep 2022 05:35:51 +0000 (15:35 +1000)] 
Document resolver-use-dns64

2 years agoIO::Socket::INET6 has been replaced by IO::Socket::IP
Mark Andrews [Tue, 27 Sep 2022 05:18:25 +0000 (15:18 +1000)] 
IO::Socket::INET6 has been replaced by IO::Socket::IP

IO::Socket::INET6 is no longer being maintained and its functionality
has been replaced by IO::Socket::IP.

2 years agoTest resolver-use-dns64
Mark Andrews [Tue, 6 Aug 2019 07:28:02 +0000 (17:28 +1000)] 
Test resolver-use-dns64

Test resolver-use-dns64 by simulating a connection to an IPv4-only
server through a NAT64.

This test uses EXTRAPORT1 rather than PORT for DNS traffic exchanged
between ns3 and ns4. Both servers also listen on PORT on their IPv4
addresses to support server startup testing in start.pl.

2 years agoConfigure 'mapped' IPv4 address
Mark Andrews [Tue, 6 Aug 2019 06:35:28 +0000 (16:35 +1000)] 
Configure 'mapped' IPv4 address

Add a mapped IPv4 address, fd92:7065:b8e:fffe::10.53.0.4, to
ifconfig.sh for dns64 testing.

2 years agoAdd the ability to use DNS64 internally
Mark Andrews [Sun, 21 Jul 2019 16:26:39 +0000 (02:26 +1000)] 
Add the ability to use DNS64 internally

Add a configuration option, resolver-use-dns64, which when true
will cause named to map IPv4 address to IPv6 addresses using the
view's DNS64 mapping rules when making iterative queries.

2 years agoMerge branch '4306-add-incremental-isc_siphash' into 'main'
Ondřej Surý [Tue, 12 Sep 2023 14:21:40 +0000 (14:21 +0000)] 
Merge branch '4306-add-incremental-isc_siphash' into 'main'

Implement incremental version of SipHash 2-4 and HalfSipHash 2-4

Closes #4306

See merge request isc-projects/bind9!8288

2 years agoMerge branch 'ondrej/make-dns_name-mostly-header-only' into 'main'
Ondřej Surý [Tue, 12 Sep 2023 14:20:25 +0000 (14:20 +0000)] 
Merge branch 'ondrej/make-dns_name-mostly-header-only' into 'main'

Cleanup the dns_name macros

See merge request isc-projects/bind9!8297

2 years agoAdd CHANGES note for [GL #4306]
Ondřej Surý [Fri, 8 Sep 2023 15:56:23 +0000 (17:56 +0200)] 
Add CHANGES note for [GL #4306]

2 years agoImplement incremental version of isc_hash32 and isc_hash64
Ondřej Surý [Fri, 8 Sep 2023 15:48:45 +0000 (17:48 +0200)] 
Implement incremental version of isc_hash32 and isc_hash64

Add support for incremental hashing to the isc_hash unit, both 32-bit
and 64-bit incremental hashing is now supported.

This is commit second in series adding incremental hashing to libisc.

2 years agoImplement incremental version of SipHash 2-4 and HalfSipHash 2-4
Ondřej Surý [Fri, 8 Sep 2023 15:22:05 +0000 (17:22 +0200)] 
Implement incremental version of SipHash 2-4 and HalfSipHash 2-4

When inserting items into hashtables (hashmaps), we might have a
fragmented key (as an example we might want to hash DNS name + class +
type).  We either need to construct continuous key in the memory and
then hash it en bloc, or incremental hashing is required.

This incremental version of SipHash 2-4 algorithm is the first building
block.

As SipHash 2-4 is often used in the hot paths, I've turned the
implementation into header-only version in the process.

2 years agoCleanup the dns_name macros
Ondřej Surý [Mon, 11 Sep 2023 06:23:52 +0000 (08:23 +0200)] 
Cleanup the dns_name macros

1. Replace the "high-performance" macros that were only used if
   DNS_NAME_USEINLINE was defined before including <dns/name.h> with
   inline header functions with assertion checks and thus use them
   everywhere.

2. Replace the old struct initializers with C99 designated initializers
   for better understanding what is happening in these macros.

2 years agoMerge branch 'tkrizek/ci-test-binaries-compilation' into 'main'
Tom Krizek [Tue, 12 Sep 2023 08:22:50 +0000 (08:22 +0000)] 
Merge branch 'tkrizek/ci-test-binaries-compilation' into 'main'

ci: omit explicit command to compile test binaries

See merge request isc-projects/bind9!8287

2 years agoci: omit explicit command to compile test binaries
Tom Krizek [Fri, 8 Sep 2023 13:44:28 +0000 (15:44 +0200)] 
ci: omit explicit command to compile test binaries

The command to compile test binaries is no longer needed, as these are
now compiled as part of the default make target.

Related !8189

2 years agoMerge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.19.18' into 'main'
Michal Nowak [Tue, 12 Sep 2023 07:35:00 +0000 (07:35 +0000)] 
Merge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.19.18' into 'main'

Set up version and release notes for BIND 9.19.18

See merge request isc-projects/bind9!8291

2 years agoSet up release notes for BIND 9.19.18
Michal Nowak [Tue, 12 Sep 2023 06:11:52 +0000 (08:11 +0200)] 
Set up release notes for BIND 9.19.18

2 years agoUpdate BIND version to 9.19.18-dev
Michal Nowak [Tue, 12 Sep 2023 06:11:52 +0000 (08:11 +0200)] 
Update BIND version to 9.19.18-dev

2 years agoUpdate BIND version for release v9.19.17
Michal Nowak [Fri, 8 Sep 2023 08:40:19 +0000 (10:40 +0200)] 
Update BIND version for release

2 years agoAdd a CHANGES marker
Michal Nowak [Fri, 8 Sep 2023 08:39:40 +0000 (10:39 +0200)] 
Add a CHANGES marker

2 years agoMerge branch 'mnowak/prepare-documentation-for-bind-9.19.17' into 'security-main'
Michal Nowak [Fri, 8 Sep 2023 08:38:04 +0000 (08:38 +0000)] 
Merge branch 'mnowak/prepare-documentation-for-bind-9.19.17' into 'security-main'

Prepare documentation for BIND 9.19.17

See merge request isc-private/bind9!577

2 years agoReorder release notes
Michal Nowak [Fri, 8 Sep 2023 08:00:58 +0000 (10:00 +0200)] 
Reorder release notes

2 years agoTweak and reword release notes
Michal Nowak [Wed, 6 Sep 2023 18:16:01 +0000 (20:16 +0200)] 
Tweak and reword release notes

2 years agoPrepare release notes for BIND 9.19.17
Michal Nowak [Wed, 6 Sep 2023 14:23:59 +0000 (16:23 +0200)] 
Prepare release notes for BIND 9.19.17

2 years agoSimplify Sphinx tools installation
Michal Nowak [Mon, 4 Sep 2023 18:04:43 +0000 (20:04 +0200)] 
Simplify Sphinx tools installation

Pointing pip3 to the "requirements file" eliminates the necessity for
removing comments.

2 years agoMerge branch '4152-confidential-limit-isccc_cc_fromwire-recursion-depth' into 'securi...
Michal Nowak [Fri, 8 Sep 2023 08:18:20 +0000 (08:18 +0000)] 
Merge branch '4152-confidential-limit-isccc_cc_fromwire-recursion-depth' into 'security-main'

[CVE-2023-3341] Limit isccc_cc_fromwire recursion depth

See merge request isc-private/bind9!546

2 years agoAdd release note for [GL #4152]
Mark Andrews [Tue, 20 Jun 2023 05:38:40 +0000 (15:38 +1000)] 
Add release note for [GL #4152]

2 years agoAdd CHANGES note for [GL #4152]
Mark Andrews [Tue, 20 Jun 2023 05:27:40 +0000 (15:27 +1000)] 
Add CHANGES note for [GL #4152]

2 years agoLimit isccc_cc_fromwire recursion depth
Mark Andrews [Tue, 20 Jun 2023 05:21:36 +0000 (15:21 +1000)] 
Limit isccc_cc_fromwire recursion depth

Named and rndc do not need a lot of recursion so the depth is
set to 10.

2 years agoMerge branch '4242-placeholder' into 'main'
Michal Nowak [Thu, 7 Sep 2023 08:21:45 +0000 (08:21 +0000)] 
Merge branch '4242-placeholder' into 'main'

Add CHANGES placeholder for [GL #4242]

Closes #4242

See merge request isc-projects/bind9!8284

2 years agoAdd CHANGES placeholder for [GL #4242]
Michal Nowak [Wed, 6 Sep 2023 14:07:42 +0000 (16:07 +0200)] 
Add CHANGES placeholder for [GL #4242]

2 years agoMerge branch '4152-placeholder' into 'main'
Michal Nowak [Thu, 7 Sep 2023 08:18:01 +0000 (08:18 +0000)] 
Merge branch '4152-placeholder' into 'main'

Add CHANGES placeholder for [GL #4152]

See merge request isc-projects/bind9!8283

2 years agoAdd CHANGES placeholder for [GL #4152]
Michal Nowak [Wed, 6 Sep 2023 14:03:42 +0000 (16:03 +0200)] 
Add CHANGES placeholder for [GL #4152]

2 years agoMerge branch '4290-raise-log-level-to-isc_log_error-on-formerr-in-xfrin-c' into ...
Mark Andrews [Wed, 6 Sep 2023 09:13:23 +0000 (09:13 +0000)] 
Merge branch '4290-raise-log-level-to-isc_log_error-on-formerr-in-xfrin-c' into 'main'

Resolve "raise log level to ISC_LOG_NOTICE on FORMERR in xfrin.c"

Closes #4290

See merge request isc-projects/bind9!8262

2 years agoAdd a CHANGES note for [GL #4290]
Mark Andrews [Fri, 1 Sep 2023 00:26:45 +0000 (10:26 +1000)] 
Add a CHANGES note for [GL #4290]

2 years agoAdjust level of log messages when transferring in a zone
Mark Andrews [Fri, 1 Sep 2023 00:17:00 +0000 (10:17 +1000)] 
Adjust level of log messages when transferring in a zone

This raises the log level of messages treated as FORMERR to NOTICE
when transfering in a zone.  This also adds a missing log message
for TYPE0 and meta types received during a zone transfer.

2 years agoMerge branch '4291-check-dig-exit-status' into 'main'
Mark Andrews [Wed, 6 Sep 2023 01:32:21 +0000 (01:32 +0000)] 
Merge branch '4291-check-dig-exit-status' into 'main'

Resolve "RNDC system test failed to run to completion"

Closes #4291

See merge request isc-projects/bind9!8264

2 years agoCheck dig's exist status
Mark Andrews [Mon, 4 Sep 2023 05:16:42 +0000 (15:16 +1000)] 
Check dig's exist status

2 years agoMerge branch '4292-uncleared-libcrypto-error-crypto-evp-evp_fetch-c-373-inner_evp_gen...
Mark Andrews [Wed, 6 Sep 2023 01:02:52 +0000 (01:02 +0000)] 
Merge branch '4292-uncleared-libcrypto-error-crypto-evp-evp_fetch-c-373-inner_evp_generic_fetch' into 'main'

Resolve "Uncleared libcrypto error: crypto/evp/evp_fetch.c:373 inner_evp_generic_fetch"

Closes #4292

See merge request isc-projects/bind9!8274

2 years agoCall ERR_clear_error on EVP_MD_fetch or EVP_##alg error
Mark Andrews [Tue, 5 Sep 2023 07:53:04 +0000 (17:53 +1000)] 
Call ERR_clear_error on EVP_MD_fetch or EVP_##alg error

2 years agoMerge branch '4214-uaf-in-validator-logging' into 'main'
Mark Andrews [Tue, 5 Sep 2023 23:51:25 +0000 (23:51 +0000)] 
Merge branch '4214-uaf-in-validator-logging' into 'main'

Resolve "UAF in validator logging"

Closes #4214

See merge request isc-projects/bind9!8269

2 years agoAdd CHANGES for [GL #4214]
Mark Andrews [Mon, 4 Sep 2023 23:50:16 +0000 (09:50 +1000)] 
Add CHANGES for [GL #4214]