Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/ISC]: src/external/mpl/bind/dist Import bind-9.16.37 (previous was bind-...
details: https://anonhg.NetBSD.org/src/rev/0300739172f2
branches: ISC
changeset: 373241:0300739172f2
user: christos <christos%NetBSD.org@localhost>
date: Wed Jan 25 20:36:33 2023 +0000
description:
Import bind-9.16.37 (previous was bind-9.16.33)
--- 9.16.37 released ---
6067. [security] Fix serve-stale crash when recursive clients soft quota
is reached. (CVE-2022-3924) [GL #3619]
6066. [security] Handle RRSIG lookups when serve-stale is active.
(CVE-2022-3736) [GL #3622]
6064. [security] An UPDATE message flood could cause named to exhaust all
available memory. This flaw was addressed by adding a
new "update-quota" statement that controls the number of
simultaneous UPDATE messages that can be processed or
forwarded. The default is 100. A stats counter has been
added to record events when the update quota is
exceeded, and the XML and JSON statistics version
numbers have been updated. (CVE-2022-3094) [GL #3523]
6062. [func] The DSCP implementation, which has only been
partly operational since 9.16.0, is now marked as
deprecated. Configuring DSCP values in named.conf
will cause a warning will be logged. [GL #3773]
6060. [bug] Fix a use-after-free bug in dns_zonemgr_releasezone()
by detaching from the zone manager outside of the write
lock. [GL #3768]
6059. [bug] In some serve stale scenarios, like when following an
expired CNAME record, named could return SERVFAIL if the
previous request wasn't successful. Consider non-stale
data when in serve-stale mode. [GL #3678]
6058. [bug] Prevent named from crashing when "rndc delzone"
attempts to delete a zone added by a catalog zone.
[GL #3745]
6050. [bug] Changes to the RPZ response-policy min-update-interval
and add-soa options now take effect as expected when
named is reconfigured. [GL #3740]
6048. [bug] Fix a log message error in dns_catz_update_from_db(),
where serials with values of 2^31 or larger were logged
incorrectly as negative numbers. [GL #3742]
6045. [cleanup] The list of supported DNSSEC algorithms changed log
level from "warning" to "notice" to match named's other
startup messages. [GL !7217]
6044. [bug] There was an "RSASHA236" typo in a log message.
[GL !7206]
--- 9.16.36 released ---
6043. [bug] The key file IO locks objects would never get
deleted from the hashtable due to off-by-one error.
[GL #3727]
6042. [bug] ANY responses could sometimes have the wrong TTL.
[GL #3613]
6040. [bug] Speed up the named shutdown time by explicitly
canceling all recursing ns_client objects for
each ns_clientmgr. [GL #3183]
6039. [bug] Removing a catalog zone from catalog-zones without
also removing the referenced zone could leave a
dangling pointer. [GL #3683]
6031. [bug] Move the "final reference detached" log message
from dns_zone unit to the DEBUG(1) log level.
[GL #3707]
6024. [func] Deprecate 'auto-dnssec'. [GL #3667]
6021. [bug] Use the current domain name when checking answers from
a dual-stack-server. [GL #3607]
6020. [bug] Ensure 'named-checkconf -z' respects the check-wildcard
option when loading a zone. [GL #1905]
6017. [bug] The view's zone table was not locked when it should
have been leading to race conditions when external
extensions that manipulate the zone table where in
use. [GL #3468]
--- 9.16.35 released ---
6013. [bug] Fix a crash that could happen when you change
a dnssec-policy zone with NSEC3 to start using
inline-signing. [GL #3591]
6009. [bug] Don't trust a placeholder KEYDATA from the managed-keys
zone by adding it into secroots. [GL #2895]
6008. [bug] Fixed a race condition that could cause a crash
in dns_zone_synckeyzone(). [GL #3617]
6002. [bug] Fix a resolver prefetch bug when the record's TTL value
is equal to the configured prefetch eligibility value,
but the record was erroneously not treated as eligible
for prefetching. [GL #3603]
6001. [bug] Always call dns_adb_endudpfetch() after calling
dns_adb_beginudpfetch() for UDP queries in resolver.c,
in order to adjust back the quota. [GL #3598]
6000. [bug] Fix a startup issue on Solaris systems with many
(reportedly > 510) CPUs. Thanks to Stacey Marshall from
Oracle for deep investigation of the problem. [GL #3563]
5999. [bug] rpz-ip rules could be ineffective in some scenarios
with CD=1 queries. [GL #3247]
5998. [bug] The RecursClients statistics counter could overflow
in certain resolution scenarios. [GL #3584]
5996. [bug] Fix a couple of bugs in cfg_print_duration(), which
could result in generating incomplete duration values
when printing the configuration using named-checkconf.
[GL !6880]
--- 9.16.34 released ---
5991. [protocol] Add support for parsing and validating "dohpath" to
SVCB. [GL #3544]
5988. [bug] Some out of memory conditions in opensslrsa_link.c
could lead to memory leaks. [GL #3551]
5984. [func] 'named -V' now reports the list of supported
DNSSEC/DS/HMAC algorithms and the supported TKEY modes.
[GL #3541]
5983. [bug] Changing just the TSIG key names for primaries in
catalog zones' member zones was not effective.
[GL #3557]
5973. [bug] Fixed a possible invalid detach in UPDATE
processing. [GL #3522]
5963. [bug] Ensure struct named_server is properly initialized.
[GL #6531]
5921. [test] Convert system tests to use a default DNSKEY algorithm
where the test is not DNSKEY algorithm specific.
[GL #3440]
diffstat:
external/mpl/bind/dist/CHANGES | 146 +
external/mpl/bind/dist/COPYRIGHT | 2 +-
external/mpl/bind/dist/bin/check/check-tool.c | 13 +-
external/mpl/bind/dist/bin/check/named-checkconf.c | 13 +-
external/mpl/bind/dist/bin/check/named-checkzone.c | 5 +-
external/mpl/bind/dist/bin/confgen/ddns-confgen.c | 5 +-
external/mpl/bind/dist/bin/delv/delv.c | 29 +-
external/mpl/bind/dist/bin/dig/dig.c | 28 +-
external/mpl/bind/dist/bin/dig/dig.rst | 8 +-
external/mpl/bind/dist/bin/dig/dighost.c | 41 +-
external/mpl/bind/dist/bin/dig/host.c | 23 +-
external/mpl/bind/dist/bin/dnssec/dnssec-cds.c | 17 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keyfromlabel.c | 8 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keygen.c | 17 +-
external/mpl/bind/dist/bin/dnssec/dnssec-revoke.c | 5 +-
external/mpl/bind/dist/bin/dnssec/dnssec-settime.c | 8 +-
external/mpl/bind/dist/bin/dnssec/dnssec-signzone.c | 92 +-
external/mpl/bind/dist/bin/dnssec/dnssectool.c | 5 +-
external/mpl/bind/dist/bin/named/bind9.xsl | 4 +-
external/mpl/bind/dist/bin/named/bind9.xsl.h | 8 +-
external/mpl/bind/dist/bin/named/builtin.c | 5 +-
external/mpl/bind/dist/bin/named/config.c | 15 +-
external/mpl/bind/dist/bin/named/controlconf.c | 14 +-
external/mpl/bind/dist/bin/named/main.c | 150 +-
external/mpl/bind/dist/bin/named/named.conf.rst | 13 +-
external/mpl/bind/dist/bin/named/named.rst | 16 +-
external/mpl/bind/dist/bin/named/server.c | 285 +-
external/mpl/bind/dist/bin/named/statschannel.c | 52 +-
external/mpl/bind/dist/bin/named/tsigconf.c | 5 +-
external/mpl/bind/dist/bin/named/unix/os.c | 8 +-
external/mpl/bind/dist/bin/named/zoneconf.c | 11 +-
external/mpl/bind/dist/bin/nsupdate/nsupdate.c | 20 +-
external/mpl/bind/dist/bin/nsupdate/nsupdate.rst | 2 +
external/mpl/bind/dist/bin/pkcs11/pkcs11-keygen.c | 8 +-
external/mpl/bind/dist/bin/plugins/filter-aaaa.c | 5 +-
external/mpl/bind/dist/bin/rndc/rndc.c | 23 +-
external/mpl/bind/dist/bin/tests/cfg_test.c | 8 +-
external/mpl/bind/dist/bin/tests/optional/byaddr_test.c | 8 +-
external/mpl/bind/dist/bin/tests/optional/db_test.c | 15 +-
external/mpl/bind/dist/bin/tests/optional/name_test.c | 11 +-
external/mpl/bind/dist/bin/tests/optional/nsecify.c | 4 +-
external/mpl/bind/dist/bin/tests/optional/rbt_test.c | 5 +-
external/mpl/bind/dist/bin/tests/optional/zone_test.c | 5 +-
external/mpl/bind/dist/bin/tests/system/addzone/tests.sh | 22 +-
external/mpl/bind/dist/bin/tests/system/auth/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/autosign/clean.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns1/keygen.sh | 20 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns2/Xbar.+013+59973.key | 5 +
external/mpl/bind/dist/bin/tests/system/autosign/ns2/Xbar.+013+59973.private | 6 +
external/mpl/bind/dist/bin/tests/system/autosign/ns2/Xbar.+013+60101.key | 5 +
external/mpl/bind/dist/bin/tests/system/autosign/ns2/Xbar.+013+60101.private | 6 +
external/mpl/bind/dist/bin/tests/system/autosign/ns2/keygen.sh | 18 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns3/keygen.sh | 101 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns3/named.conf.in | 4 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns3/nsec-only.example.db.in | 26 +
external/mpl/bind/dist/bin/tests/system/autosign/tests.sh | 582 +++--
external/mpl/bind/dist/bin/tests/system/builtin/tests.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/cacheclean/tests.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/case/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/catz/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/catz/ns1/named.conf.in | 7 +-
external/mpl/bind/dist/bin/tests/system/catz/ns2/named1.conf.in | 7 +-
external/mpl/bind/dist/bin/tests/system/catz/ns2/named2.conf.in | 2 +-
external/mpl/bind/dist/bin/tests/system/catz/ns3/catalog.example.db.in | 14 +
external/mpl/bind/dist/bin/tests/system/catz/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/catz/tests.sh | 94 +-
external/mpl/bind/dist/bin/tests/system/cds/setup.sh | 26 +-
external/mpl/bind/dist/bin/tests/system/cds/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/chain/ns2/sign.sh | 20 +-
external/mpl/bind/dist/bin/tests/system/chain/tests.sh | 2 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-kasp-keydir1.conf.in | 50 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-kasp-keydir2.conf.in | 48 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-kasp-keydir3.conf.in | 55 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-kasp-keydir4.conf.in | 52 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-kasp-keydir5.conf.in | 52 +
external/mpl/bind/dist/bin/tests/system/checkconf/check-wildcard-no.conf | 18 +
external/mpl/bind/dist/bin/tests/system/checkconf/check-wildcard.conf | 18 +
external/mpl/bind/dist/bin/tests/system/checkconf/check-wildcard.db | 23 +
external/mpl/bind/dist/bin/tests/system/checkconf/clean.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/checkconf/deprecated.conf | 5 +
external/mpl/bind/dist/bin/tests/system/checkconf/dnssec.4 | 20 +
external/mpl/bind/dist/bin/tests/system/checkconf/good.conf | 1 +
external/mpl/bind/dist/bin/tests/system/checkconf/tests.sh | 142 +-
external/mpl/bind/dist/bin/tests/system/checkds/ns9/setup.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/checkds/tests_checkds.py | 445 ++++
external/mpl/bind/dist/bin/tests/system/checknames/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/checkzone/clean.sh | 3 +
external/mpl/bind/dist/bin/tests/system/checkzone/setup.sh | 4 +
external/mpl/bind/dist/bin/tests/system/checkzone/tests.sh | 2 +
external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-tsig.db.in | 17 +
external/mpl/bind/dist/bin/tests/system/checkzone/zones/good-svcb.db | 1 +
external/mpl/bind/dist/bin/tests/system/ckdnsrps.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/conf.sh.common | 154 +-
external/mpl/bind/dist/bin/tests/system/conf.sh.in | 189 +-
external/mpl/bind/dist/bin/tests/system/conf.sh.win32 | 170 +-
external/mpl/bind/dist/bin/tests/system/cookie/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/coverage/setup.sh | 74 +-
external/mpl/bind/dist/bin/tests/system/dialup/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/dialup/ns1/named.conf.in | 40 +
external/mpl/bind/dist/bin/tests/system/dialup/ns2/named.conf.in | 40 +
external/mpl/bind/dist/bin/tests/system/dialup/ns3/named.conf.in | 40 +
external/mpl/bind/dist/bin/tests/system/dialup/setup.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/dialup/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/digdelv/yamlget.py | 1 -
external/mpl/bind/dist/bin/tests/system/dlzexternal/driver.c | 8 +-
external/mpl/bind/dist/bin/tests/system/dlzexternal/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/dns64/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/clean.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns4/managed-keys.bind.in | 21 +
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/Kexample.com.+010+18240.key | 5 +
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/Kexample.com.+010+18240.private | 13 +
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/Kexample.com.+010+28633.key | 5 +
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/Kexample.com.+010+28633.private | 13 +
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/bogus-ksk.key | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/bogus-zsk.key | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test1.zone | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test2.zone | 2 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test3.zone | 2 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test4.zone | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test5.zone | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test6.zone | 4 +-
external/mpl/bind/dist/bin/tests/system/dnssec/signer/general/test8.zone | 2 +-
external/mpl/bind/dist/bin/tests/system/dnssec/tests.sh | 105 +-
external/mpl/bind/dist/bin/tests/system/dnstap/prereq.sh | 20 +
external/mpl/bind/dist/bin/tests/system/dnstap/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/dscp/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/dscp/tests.sh | 2 +
external/mpl/bind/dist/bin/tests/system/dsdigest/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/dsdigest/ns2/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/dupsigs/clean.sh | 3 +
external/mpl/bind/dist/bin/tests/system/dupsigs/ns1/named.conf.in | 2 +-
external/mpl/bind/dist/bin/tests/system/dupsigs/ns1/reset_keys.sh | 13 +-
external/mpl/bind/dist/bin/tests/system/dupsigs/ns1/signing.test.db.in | 2 +-
external/mpl/bind/dist/bin/tests/system/dupsigs/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/dupsigs/tests.sh | 36 +-
external/mpl/bind/dist/bin/tests/system/dyndb/driver/db.c | 15 +-
external/mpl/bind/dist/bin/tests/system/emptyzones/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/emptyzones/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/feature-test.c | 20 +-
external/mpl/bind/dist/bin/tests/system/formerr/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/forward/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/forward/tests.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/get_algorithms.py | 241 ++
external/mpl/bind/dist/bin/tests/system/idna/tests.sh | 2 +
external/mpl/bind/dist/bin/tests/system/inline/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/inline/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/inline/ns3/sign.sh | 78 +-
external/mpl/bind/dist/bin/tests/system/inline/ns7/sign.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/inline/ns8/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/inline/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/inline/tests.sh | 461 ++--
external/mpl/bind/dist/bin/tests/system/ixfr/tests.sh | 4 +
external/mpl/bind/dist/bin/tests/system/journal/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/kasp.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/kasp/clean.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/kasp/kasp.conf | 4 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns3/named-fips.conf.in | 508 +++++
external/mpl/bind/dist/bin/tests/system/kasp/ns3/named.conf.in | 494 +-----
external/mpl/bind/dist/bin/tests/system/kasp/ns3/policies/kasp-fips.conf.in | 118 +
external/mpl/bind/dist/bin/tests/system/kasp/ns3/policies/kasp.conf.in | 106 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns3/setup.sh | 155 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns4/named.conf.in | 6 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns6/named.conf.in | 10 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns6/named2.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/kasp/ns6/policies/csk1.conf.in | 2 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns6/policies/kasp-fips.conf.in | 63 +
external/mpl/bind/dist/bin/tests/system/kasp/ns6/policies/kasp.conf.in | 28 +-
external/mpl/bind/dist/bin/tests/system/kasp/ns6/setup.sh | 96 +-
external/mpl/bind/dist/bin/tests/system/kasp/setup.sh | 18 +-
external/mpl/bind/dist/bin/tests/system/kasp/tests.sh | 259 +-
external/mpl/bind/dist/bin/tests/system/keepalive/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/keymgr/18-nonstd-prepub/policy.conf.in | 20 +
external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/policy.conf.in | 20 +
external/mpl/bind/dist/bin/tests/system/keymgr/clean.sh | 3 +
external/mpl/bind/dist/bin/tests/system/keymgr/policy.conf.in | 23 +
external/mpl/bind/dist/bin/tests/system/keymgr/setup.sh | 98 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/clean.sh | 1 +
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/ns3/kasp.conf.in | 8 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/ns3/setup.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/ns4/named.conf.in | 4 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/ns4/named2.conf.in | 6 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/ns4/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr2kasp/tests.sh | 28 +-
external/mpl/bind/dist/bin/tests/system/legacy/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/legacy/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/logfileconfig/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/masterformat/tests.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/metadata/setup.sh | 22 +-
external/mpl/bind/dist/bin/tests/system/metadata/tests.sh | 110 +-
external/mpl/bind/dist/bin/tests/system/mirror/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/mirror/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/mirror/ns2/sign.sh | 16 +-
external/mpl/bind/dist/bin/tests/system/mirror/tests.sh | 146 +-
external/mpl/bind/dist/bin/tests/system/mkeys/clean.sh | 1 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns1/sign.sh | 37 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns3/named.conf.in | 5 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns6/setup.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/mkeys/setup.sh | 8 +
external/mpl/bind/dist/bin/tests/system/mkeys/tests.sh | 45 +-
external/mpl/bind/dist/bin/tests/system/names/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/notify/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/nsec3/clean.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/nsec3/ns2/named.conf.in | 46 +
external/mpl/bind/dist/bin/tests/system/nsec3/ns2/setup.sh | 22 +
external/mpl/bind/dist/bin/tests/system/nsec3/ns2/template.db.in | 28 +
external/mpl/bind/dist/bin/tests/system/nsec3/ns3/named.conf.in | 32 +
external/mpl/bind/dist/bin/tests/system/nsec3/ns3/named2.conf.in | 17 +
external/mpl/bind/dist/bin/tests/system/nsec3/ns3/setup.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/nsec3/setup.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/nsec3/tests.sh | 54 +-
external/mpl/bind/dist/bin/tests/system/nslookup/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/nsupdate/krb/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/nsupdate/ns1/named.conf.in | 2 +
external/mpl/bind/dist/bin/tests/system/nsupdate/ns3/sign.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/nsupdate/tests.sh | 246 +-
external/mpl/bind/dist/bin/tests/system/nzd2nzf/prereq.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/nzd2nzf/tests.sh | 9 +-
external/mpl/bind/dist/bin/tests/system/padding/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/pending/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/pending/ns2/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/pytest_custom_markers.py | 21 +
external/mpl/bind/dist/bin/tests/system/qmin/ans3/ans.py | 1 +
external/mpl/bind/dist/bin/tests/system/redirect/ns1/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/redirect/ns3/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/redirect/ns5/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/resolve.c | 11 +-
external/mpl/bind/dist/bin/tests/system/resolver/ans2/ans.pl | 9 +
external/mpl/bind/dist/bin/tests/system/resolver/ans3/ans.pl | 71 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns1/named.conf.in | 13 +
external/mpl/bind/dist/bin/tests/system/resolver/ns4/named.conf.in | 5 +
external/mpl/bind/dist/bin/tests/system/resolver/ns4/tld1.db | 3 +
external/mpl/bind/dist/bin/tests/system/resolver/ns4/tld2.db | 7 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns4/v4only.net.db | 22 +
external/mpl/bind/dist/bin/tests/system/resolver/ns6/keygen.sh | 11 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns6/named.conf.in | 12 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns6/redirect.com.db | 27 +
external/mpl/bind/dist/bin/tests/system/resolver/ns6/root.db | 3 +
external/mpl/bind/dist/bin/tests/system/resolver/ns6/tld1.db | 17 +
external/mpl/bind/dist/bin/tests/system/resolver/ns7/named1.conf.in | 12 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns7/named2.conf.in | 12 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns7/sub.tld1.db | 17 +
external/mpl/bind/dist/bin/tests/system/resolver/ns7/tld2.db | 18 +
external/mpl/bind/dist/bin/tests/system/resolver/ns9/named.args | 2 +
external/mpl/bind/dist/bin/tests/system/resolver/ns9/named.conf.in | 39 +
external/mpl/bind/dist/bin/tests/system/resolver/ns9/root.hint | 15 +
external/mpl/bind/dist/bin/tests/system/resolver/setup.sh | 1 +
external/mpl/bind/dist/bin/tests/system/resolver/tests.sh | 665 +++---
external/mpl/bind/dist/bin/tests/system/rndc/ns7/named.conf.in | 4 +-
external/mpl/bind/dist/bin/tests/system/rndc/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/rndc/tests.sh | 18 +-
external/mpl/bind/dist/bin/tests/system/rootkeysentinel/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/rootkeysentinel/ns2/sign.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/rpz/clean.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/rpz/dnsrps.c | 5 +-
external/mpl/bind/dist/bin/tests/system/rpz/ns2/base-tld2s.db | 1 +
external/mpl/bind/dist/bin/tests/system/rpz/ns2/tld2.db | 3 +
external/mpl/bind/dist/bin/tests/system/rpz/ns6/bl.tld2s.db.in | 20 +
external/mpl/bind/dist/bin/tests/system/rpz/ns6/named.conf.in | 6 +
external/mpl/bind/dist/bin/tests/system/rpz/qperf.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/rpz/setup.sh | 13 +-
external/mpl/bind/dist/bin/tests/system/rpz/tests.sh | 38 +-
external/mpl/bind/dist/bin/tests/system/rpzrecurse/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/rpzrecurse/tests.sh | 10 +-
external/mpl/bind/dist/bin/tests/system/rrchecker/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/rrl/broken.conf.in | 46 +
external/mpl/bind/dist/bin/tests/system/rrl/clean.sh | 3 +
external/mpl/bind/dist/bin/tests/system/rrl/setup.sh | 1 +
external/mpl/bind/dist/bin/tests/system/rrl/tests.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/rrsetorder/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/rsabigexponent/README.md | 8 +
external/mpl/bind/dist/bin/tests/system/rsabigexponent/bigkey.c | 6 +-
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns1/sign.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.key | 5 +
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.private | 13 +
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.key | 2 +
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.private | 10 +
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/dsset-example.in | 3 +-
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/example.db.bad | 226 +-
external/mpl/bind/dist/bin/tests/system/rsabigexponent/ns2/sign.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/run.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/serve-stale/ans2/ans.pl | 24 +
external/mpl/bind/dist/bin/tests/system/serve-stale/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named3.conf.in | 5 +
external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/stale.test.db | 19 +
external/mpl/bind/dist/bin/tests/system/serve-stale/ns3/named6.conf.in | 4 -
external/mpl/bind/dist/bin/tests/system/serve-stale/tests.sh | 379 ++-
external/mpl/bind/dist/bin/tests/system/shutdown/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/shutdown/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/shutdown/tests_shutdown.py | 207 ++
external/mpl/bind/dist/bin/tests/system/smartsign/tests.sh | 76 +-
external/mpl/bind/dist/bin/tests/system/sortlist/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/spf/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/start.pl | 40 +-
external/mpl/bind/dist/bin/tests/system/staticstub/ns3/sign.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/staticstub/ns4/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/statschannel/tests.sh | 51 +-
external/mpl/bind/dist/bin/tests/system/statschannel/tests_json.py | 108 +
external/mpl/bind/dist/bin/tests/system/statschannel/tests_xml.py | 137 +
external/mpl/bind/dist/bin/tests/system/stop.pl | 4 +
external/mpl/bind/dist/bin/tests/system/stress/clean.sh | 3 +
external/mpl/bind/dist/bin/tests/system/stress/ns1/named.conf.in | 32 +
external/mpl/bind/dist/bin/tests/system/stress/ns2/named.conf.in | 34 +
external/mpl/bind/dist/bin/tests/system/stress/ns3/named.conf.in | 50 +
external/mpl/bind/dist/bin/tests/system/stress/ns4/named.conf.in | 35 +
external/mpl/bind/dist/bin/tests/system/stress/setup.sh | 5 +
external/mpl/bind/dist/bin/tests/system/stress/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/stub/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/ns1/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/ns4/named.conf.in | 1 -
external/mpl/bind/dist/bin/tests/system/system-test-driver.sh | 5 +-
external/mpl/bind/dist/bin/tests/system/tcp/tests_tcp.py | 72 +
external/mpl/bind/dist/bin/tests/system/testcrypto.sh | 100 +-
external/mpl/bind/dist/bin/tests/system/timeouts/tests_tcp_timeouts.py | 283 ++
external/mpl/bind/dist/bin/tests/system/tsiggss/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/unknown/ns3/sign.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/unknown/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/unknown/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/upforwd/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/upforwd/ns3/named1.conf.in | 63 +
external/mpl/bind/dist/bin/tests/system/upforwd/ns3/named2.conf.in | 41 +
external/mpl/bind/dist/bin/tests/system/upforwd/setup.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/upforwd/tests.sh | 39 +
external/mpl/bind/dist/bin/tests/system/verify/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/verify/tests.sh | 2 +
external/mpl/bind/dist/bin/tests/system/verify/zones/genzones.sh | 109 +-
external/mpl/bind/dist/bin/tests/system/views/setup.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/wildcard/ns1/sign.sh | 20 +-
external/mpl/bind/dist/bin/tests/system/wildcard/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/wildcard/tests_wildcard.py | 112 +
external/mpl/bind/dist/bin/tests/system/xfer/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/zero/clean.sh | 2 +
external/mpl/bind/dist/bin/tests/system/zero/setup.sh | 2 +
external/mpl/bind/dist/bin/tests/system/zonechecks/setup.sh | 4 +-
external/mpl/bind/dist/bin/tests/wire_test.c | 5 +-
external/mpl/bind/dist/bin/tools/mdig.c | 14 +-
external/mpl/bind/dist/config.h.in | 3 +
external/mpl/bind/dist/configure | 2 +-
external/mpl/bind/dist/configure.ac | 2 +-
external/mpl/bind/dist/contrib/dlz/bin/dlzbdb/dlzbdb.c | 11 +-
external/mpl/bind/dist/contrib/dlz/drivers/dlz_bdb_driver.c | 5 +-
external/mpl/bind/dist/contrib/dlz/drivers/dlz_bdbhpt_driver.c | 5 +-
external/mpl/bind/dist/contrib/dlz/drivers/dlz_filesystem_driver.c | 20 +-
external/mpl/bind/dist/contrib/dlz/drivers/dlz_odbc_driver.c | 11 +-
external/mpl/bind/dist/contrib/dlz/drivers/dlz_postgres_driver.c | 5 +-
external/mpl/bind/dist/contrib/dlz/modules/bdbhpt/dlz_bdbhpt_dynamic.c | 8 +-
external/mpl/bind/dist/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c | 20 +-
external/mpl/bind/dist/contrib/dlz/modules/include/dlz_list.h | 16 +-
external/mpl/bind/dist/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c | 5 +-
external/mpl/bind/dist/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c | 11 +-
external/mpl/bind/dist/contrib/dlz/modules/perl/Makefile | 4 +
external/mpl/bind/dist/contrib/dlz/modules/perl/dlz_perl_driver.c | 37 +-
external/mpl/bind/dist/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c | 18 +-
external/mpl/bind/dist/contrib/dlz/modules/wildcard/dlz_wildcard_dynamic.c | 21 +-
external/mpl/bind/dist/dangerfile.py | 124 +-
external/mpl/bind/dist/doc/arm/conf.py | 4 +-
external/mpl/bind/dist/doc/arm/dnssec.inc.rst | 9 +-
external/mpl/bind/dist/doc/arm/notes.rst | 6 +
external/mpl/bind/dist/doc/arm/platforms.rst | 6 +-
external/mpl/bind/dist/doc/arm/reference.rst | 55 +-
external/mpl/bind/dist/doc/arm/requirements.txt | 2 +-
external/mpl/bind/dist/doc/dnssec-guide/introduction.rst | 2 +-
external/mpl/bind/dist/doc/dnssec-guide/recipes.rst | 4 +
external/mpl/bind/dist/doc/dnssec-guide/signing.rst | 19 +-
external/mpl/bind/dist/doc/man/Makefile.in | 3 +-
external/mpl/bind/dist/doc/man/arpaname.1in | 2 +-
external/mpl/bind/dist/doc/man/conf.py | 1 -
external/mpl/bind/dist/doc/man/ddns-confgen.8in | 2 +-
external/mpl/bind/dist/doc/man/delv.1in | 2 +-
external/mpl/bind/dist/doc/man/dig.1in | 10 +-
external/mpl/bind/dist/doc/man/dnssec-cds.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-checkds.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-coverage.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-dsfromkey.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-importkey.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-keyfromlabel.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-keygen.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-keymgr.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-revoke.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-settime.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-signzone.8in | 2 +-
external/mpl/bind/dist/doc/man/dnssec-verify.8in | 2 +-
external/mpl/bind/dist/doc/man/dnstap-read.1in | 2 +-
external/mpl/bind/dist/doc/man/filter-aaaa.8in | 2 +-
external/mpl/bind/dist/doc/man/host.1in | 2 +-
external/mpl/bind/dist/doc/man/mdig.1in | 2 +-
external/mpl/bind/dist/doc/man/named-checkconf.8in | 2 +-
external/mpl/bind/dist/doc/man/named-checkzone.8in | 2 +-
external/mpl/bind/dist/doc/man/named-compilezone.8in | 2 +-
external/mpl/bind/dist/doc/man/named-journalprint.8in | 2 +-
external/mpl/bind/dist/doc/man/named-nzd2nzf.8in | 2 +-
external/mpl/bind/dist/doc/man/named-rrchecker.1in | 2 +-
external/mpl/bind/dist/doc/man/named.8in | 18 +-
external/mpl/bind/dist/doc/man/named.conf.5in | 15 +-
external/mpl/bind/dist/doc/man/nsec3hash.8in | 2 +-
external/mpl/bind/dist/doc/man/nslookup.1in | 2 +-
external/mpl/bind/dist/doc/man/nsupdate.1in | 9 +-
external/mpl/bind/dist/doc/man/pkcs11-destroy.8in | 2 +-
external/mpl/bind/dist/doc/man/pkcs11-keygen.8in | 2 +-
external/mpl/bind/dist/doc/man/pkcs11-list.8in | 2 +-
external/mpl/bind/dist/doc/man/pkcs11-tokens.8in | 2 +-
external/mpl/bind/dist/doc/man/rndc-confgen.8in | 2 +-
external/mpl/bind/dist/doc/man/rndc.8in | 2 +-
external/mpl/bind/dist/doc/man/rndc.conf.5in | 2 +-
external/mpl/bind/dist/doc/man/tsig-keygen.8in | 2 +-
external/mpl/bind/dist/doc/misc/master.zoneopt | 4 +-
external/mpl/bind/dist/doc/misc/master.zoneopt.rst | 4 +-
external/mpl/bind/dist/doc/misc/options | 15 +-
external/mpl/bind/dist/doc/misc/options.active | 15 +-
external/mpl/bind/dist/doc/misc/options.grammar.rst | 3 +-
external/mpl/bind/dist/doc/misc/slave.zoneopt | 2 +-
external/mpl/bind/dist/doc/misc/slave.zoneopt.rst | 2 +-
external/mpl/bind/dist/doc/notes/notes-9.16.0.rst | 6 +-
external/mpl/bind/dist/doc/notes/notes-9.16.1.rst | 3 +
external/mpl/bind/dist/doc/notes/notes-9.16.10.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.11.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.12.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.13.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.15.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.16.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.17.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.18.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.19.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.2.rst | 5 +-
external/mpl/bind/dist/doc/notes/notes-9.16.20.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.21.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.22.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.23.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.24.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.25.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.26.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.27.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.28.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.29.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.3.rst | 3 +
external/mpl/bind/dist/doc/notes/notes-9.16.30.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.31.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.32.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.33.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.34.rst | 46 +
external/mpl/bind/dist/doc/notes/notes-9.16.35.rst | 56 +
external/mpl/bind/dist/doc/notes/notes-9.16.36.rst | 49 +
external/mpl/bind/dist/doc/notes/notes-9.16.37.rst | 80 +
external/mpl/bind/dist/doc/notes/notes-9.16.4.rst | 13 +-
external/mpl/bind/dist/doc/notes/notes-9.16.5.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.6.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.7.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.8.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-9.16.9.rst | 7 +
external/mpl/bind/dist/doc/notes/notes-known-issues.rst | 46 +
external/mpl/bind/dist/lib/bind9/check.c | 130 +-
external/mpl/bind/dist/lib/bind9/getaddresses.c | 5 +-
external/mpl/bind/dist/lib/dns/adb.c | 23 +-
external/mpl/bind/dist/lib/dns/badcache.c | 5 +-
external/mpl/bind/dist/lib/dns/byaddr.c | 5 +-
external/mpl/bind/dist/lib/dns/cache.c | 5 +-
external/mpl/bind/dist/lib/dns/catz.c | 62 +-
external/mpl/bind/dist/lib/dns/client.c | 10 +-
external/mpl/bind/dist/lib/dns/compress.c | 14 +-
external/mpl/bind/dist/lib/dns/db.c | 23 +-
external/mpl/bind/dist/lib/dns/diff.c | 29 +-
external/mpl/bind/dist/lib/dns/dispatch.c | 14 +-
external/mpl/bind/dist/lib/dns/dnsrps.c | 8 +-
external/mpl/bind/dist/lib/dns/dnssec.c | 59 +-
external/mpl/bind/dist/lib/dns/dst_api.c | 8 +-
external/mpl/bind/dist/lib/dns/dst_parse.c | 5 +-
external/mpl/bind/dist/lib/dns/ecdb.c | 6 +-
external/mpl/bind/dist/lib/dns/ecs.c | 5 +-
external/mpl/bind/dist/lib/dns/forward.c | 34 +-
external/mpl/bind/dist/lib/dns/gen.c | 6 +-
external/mpl/bind/dist/lib/dns/hmac_link.c | 5 +-
external/mpl/bind/dist/lib/dns/include/dns/db.h | 20 +-
external/mpl/bind/dist/lib/dns/include/dns/rdataset.h | 7 +-
external/mpl/bind/dist/lib/dns/include/dns/rdatasetiter.h | 3 +-
external/mpl/bind/dist/lib/dns/include/dns/zone.h | 5 +-
external/mpl/bind/dist/lib/dns/include/dns/zt.h | 4 +-
external/mpl/bind/dist/lib/dns/journal.c | 34 +-
external/mpl/bind/dist/lib/dns/key.c | 8 +-
external/mpl/bind/dist/lib/dns/keymgr.c | 47 +-
external/mpl/bind/dist/lib/dns/master.c | 50 +-
external/mpl/bind/dist/lib/dns/masterdump.c | 37 +-
external/mpl/bind/dist/lib/dns/message.c | 58 +-
external/mpl/bind/dist/lib/dns/name.c | 11 +-
external/mpl/bind/dist/lib/dns/ncache.c | 8 +-
external/mpl/bind/dist/lib/dns/nsec.c | 10 +-
external/mpl/bind/dist/lib/dns/nsec3.c | 27 +-
external/mpl/bind/dist/lib/dns/openssl_link.c | 5 +-
external/mpl/bind/dist/lib/dns/openssldh_link.c | 8 +-
external/mpl/bind/dist/lib/dns/opensslecdsa_link.c | 5 +-
external/mpl/bind/dist/lib/dns/openssleddsa_link.c | 8 +-
external/mpl/bind/dist/lib/dns/opensslrsa_link.c | 36 +-
external/mpl/bind/dist/lib/dns/order.c | 5 +-
external/mpl/bind/dist/lib/dns/peer.c | 8 +-
external/mpl/bind/dist/lib/dns/pkcs11rsa_link.c | 23 +-
external/mpl/bind/dist/lib/dns/private.c | 17 +-
external/mpl/bind/dist/lib/dns/rbt.c | 48 +-
external/mpl/bind/dist/lib/dns/rbtdb.c | 343 ++-
external/mpl/bind/dist/lib/dns/rcode.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata.c | 26 +-
external/mpl/bind/dist/lib/dns/rdata/any_255/tsig_250.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/amtrelay_260.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/caa_257.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/isdn_20.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/key_25.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/loc_29.c | 17 +-
external/mpl/bind/dist/lib/dns/rdata/generic/tkey_249.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/generic/txt_16.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/in_1/a_1.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/in_1/aaaa_28.c | 5 +-
external/mpl/bind/dist/lib/dns/rdata/in_1/svcb_64.c | 69 +-
external/mpl/bind/dist/lib/dns/rdatalist.c | 20 +-
external/mpl/bind/dist/lib/dns/rdataslab.c | 5 +-
external/mpl/bind/dist/lib/dns/request.c | 5 +-
external/mpl/bind/dist/lib/dns/resolver.c | 261 +-
external/mpl/bind/dist/lib/dns/rootns.c | 10 +-
external/mpl/bind/dist/lib/dns/rpz.c | 28 +-
external/mpl/bind/dist/lib/dns/rriterator.c | 6 +-
external/mpl/bind/dist/lib/dns/rrl.c | 20 +-
external/mpl/bind/dist/lib/dns/sdb.c | 15 +-
external/mpl/bind/dist/lib/dns/sdlz.c | 21 +-
external/mpl/bind/dist/lib/dns/ssu.c | 38 +-
external/mpl/bind/dist/lib/dns/stats.c | 17 +-
external/mpl/bind/dist/lib/dns/tests/Krsa.+008+29238.key | 5 +
external/mpl/bind/dist/lib/dns/tests/dbversion_test.c | 6 +-
external/mpl/bind/dist/lib/dns/tests/dnstest.c | 5 +-
external/mpl/bind/dist/lib/dns/tests/rdata_test.c | 42 +-
external/mpl/bind/dist/lib/dns/tests/rsa_test.c | 33 +-
external/mpl/bind/dist/lib/dns/tests/zt_test.c | 6 +-
external/mpl/bind/dist/lib/dns/tkey.c | 5 +-
external/mpl/bind/dist/lib/dns/tsig.c | 23 +-
external/mpl/bind/dist/lib/dns/update.c | 24 +-
external/mpl/bind/dist/lib/dns/validator.c | 47 +-
external/mpl/bind/dist/lib/dns/view.c | 35 +-
external/mpl/bind/dist/lib/dns/xfrin.c | 23 +-
external/mpl/bind/dist/lib/dns/zone.c | 965 +++++----
external/mpl/bind/dist/lib/dns/zonekey.c | 5 +-
external/mpl/bind/dist/lib/dns/zoneverify.c | 31 +-
external/mpl/bind/dist/lib/dns/zt.c | 36 +-
external/mpl/bind/dist/lib/irs/getaddrinfo.c | 20 +-
external/mpl/bind/dist/lib/irs/getnameinfo.c | 11 +-
external/mpl/bind/dist/lib/irs/win32/resconf.c | 5 +-
external/mpl/bind/dist/lib/isc/app.c | 5 +-
external/mpl/bind/dist/lib/isc/buffer.c | 122 +-
external/mpl/bind/dist/lib/isc/heap.c | 5 +-
external/mpl/bind/dist/lib/isc/ht.c | 11 +-
external/mpl/bind/dist/lib/isc/httpd.c | 11 +-
external/mpl/bind/dist/lib/isc/include/isc/buffer.h | 122 +-
external/mpl/bind/dist/lib/isc/include/isc/list.h | 33 +-
external/mpl/bind/dist/lib/isc/include/isc/string.h | 7 +-
external/mpl/bind/dist/lib/isc/lex.c | 56 +-
external/mpl/bind/dist/lib/isc/log.c | 29 +-
external/mpl/bind/dist/lib/isc/mem.c | 29 +-
external/mpl/bind/dist/lib/isc/netaddr.c | 5 +-
external/mpl/bind/dist/lib/isc/netmgr/netmgr.c | 5 +-
external/mpl/bind/dist/lib/isc/netmgr/tcp.c | 23 +-
external/mpl/bind/dist/lib/isc/netmgr/tcpdns.c | 17 +-
external/mpl/bind/dist/lib/isc/netmgr/udp.c | 17 +-
external/mpl/bind/dist/lib/isc/pk11.c | 11 +-
external/mpl/bind/dist/lib/isc/radix.c | 8 +-
external/mpl/bind/dist/lib/isc/rwlock.c | 14 +-
external/mpl/bind/dist/lib/isc/siphash.c | 12 +-
external/mpl/bind/dist/lib/isc/string.c | 32 +-
external/mpl/bind/dist/lib/isc/task.c | 14 +-
external/mpl/bind/dist/lib/isc/tests/random_test.c | 5 +-
external/mpl/bind/dist/lib/isc/tests/socket_test.c | 5 +-
external/mpl/bind/dist/lib/isc/tests/task_test.c | 8 +-
external/mpl/bind/dist/lib/isc/timer.c | 5 +-
external/mpl/bind/dist/lib/isc/unix/file.c | 5 +-
external/mpl/bind/dist/lib/isc/unix/socket.c | 53 +-
external/mpl/bind/dist/lib/isc/url.c | 5 +-
external/mpl/bind/dist/lib/isc/utf8.c | 5 +-
external/mpl/bind/dist/lib/isc/win32/dir.c | 5 +-
external/mpl/bind/dist/lib/isc/win32/file.c | 11 +-
external/mpl/bind/dist/lib/isc/win32/fsaccess.c | 8 +-
external/mpl/bind/dist/lib/isc/win32/include/isc/net.h | 8 +-
external/mpl/bind/dist/lib/isc/win32/interfaceiter.c | 5 +-
external/mpl/bind/dist/lib/isc/win32/libisc.def.in | 1 +
external/mpl/bind/dist/lib/isc/win32/net.c | 11 +-
external/mpl/bind/dist/lib/isc/win32/ntgroups.c | 8 +-
external/mpl/bind/dist/lib/isc/win32/socket.c | 23 +-
external/mpl/bind/dist/lib/isccc/alist.c | 5 +-
external/mpl/bind/dist/lib/isccc/cc.c | 8 +-
external/mpl/bind/dist/lib/isccc/symtab.c | 14 +-
external/mpl/bind/dist/lib/isccfg/aclconf.c | 17 +-
external/mpl/bind/dist/lib/isccfg/include/isccfg/grammar.h | 4 +-
external/mpl/bind/dist/lib/isccfg/namedconf.c | 43 +-
external/mpl/bind/dist/lib/isccfg/parser.c | 124 +-
external/mpl/bind/dist/lib/isccfg/tests/duration_test.c | 111 +-
external/mpl/bind/dist/lib/ns/client.c | 21 +-
external/mpl/bind/dist/lib/ns/hooks.c | 5 +-
external/mpl/bind/dist/lib/ns/include/ns/client.h | 12 +-
external/mpl/bind/dist/lib/ns/include/ns/server.h | 3 +-
external/mpl/bind/dist/lib/ns/include/ns/stats.h | 6 +-
external/mpl/bind/dist/lib/ns/interfacemgr.c | 21 +-
external/mpl/bind/dist/lib/ns/query.c | 239 +-
external/mpl/bind/dist/lib/ns/server.c | 4 +-
external/mpl/bind/dist/lib/ns/sortlist.c | 8 +-
external/mpl/bind/dist/lib/ns/tests/nstest.c | 5 +-
external/mpl/bind/dist/lib/ns/update.c | 460 ++-
external/mpl/bind/dist/lib/ns/win32/libns.def | 1 +
external/mpl/bind/dist/lib/ns/xfrout.c | 8 +-
external/mpl/bind/dist/srcid | 2 +-
external/mpl/bind/dist/version | 2 +-
602 files changed, 12285 insertions(+), 5721 deletions(-)
diffs (truncated from 40085 to 300 lines):
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/CHANGES
--- a/external/mpl/bind/dist/CHANGES Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/CHANGES Wed Jan 25 20:36:33 2023 +0000
@@ -1,3 +1,149 @@
+ --- 9.16.37 released ---
+
+6067. [security] Fix serve-stale crash when recursive clients soft quota
+ is reached. (CVE-2022-3924) [GL #3619]
+
+6066. [security] Handle RRSIG lookups when serve-stale is active.
+ (CVE-2022-3736) [GL #3622]
+
+6064. [security] An UPDATE message flood could cause named to exhaust all
+ available memory. This flaw was addressed by adding a
+ new "update-quota" statement that controls the number of
+ simultaneous UPDATE messages that can be processed or
+ forwarded. The default is 100. A stats counter has been
+ added to record events when the update quota is
+ exceeded, and the XML and JSON statistics version
+ numbers have been updated. (CVE-2022-3094) [GL #3523]
+
+6062. [func] The DSCP implementation, which has only been
+ partly operational since 9.16.0, is now marked as
+ deprecated. Configuring DSCP values in named.conf
+ will cause a warning will be logged. [GL #3773]
+
+6060. [bug] Fix a use-after-free bug in dns_zonemgr_releasezone()
+ by detaching from the zone manager outside of the write
+ lock. [GL #3768]
+
+6059. [bug] In some serve stale scenarios, like when following an
+ expired CNAME record, named could return SERVFAIL if the
+ previous request wasn't successful. Consider non-stale
+ data when in serve-stale mode. [GL #3678]
+
+6058. [bug] Prevent named from crashing when "rndc delzone"
+ attempts to delete a zone added by a catalog zone.
+ [GL #3745]
+
+6050. [bug] Changes to the RPZ response-policy min-update-interval
+ and add-soa options now take effect as expected when
+ named is reconfigured. [GL #3740]
+
+6048. [bug] Fix a log message error in dns_catz_update_from_db(),
+ where serials with values of 2^31 or larger were logged
+ incorrectly as negative numbers. [GL #3742]
+
+6045. [cleanup] The list of supported DNSSEC algorithms changed log
+ level from "warning" to "notice" to match named's other
+ startup messages. [GL !7217]
+
+6044. [bug] There was an "RSASHA236" typo in a log message.
+ [GL !7206]
+
+ --- 9.16.36 released ---
+
+6043. [bug] The key file IO locks objects would never get
+ deleted from the hashtable due to off-by-one error.
+ [GL #3727]
+
+6042. [bug] ANY responses could sometimes have the wrong TTL.
+ [GL #3613]
+
+6040. [bug] Speed up the named shutdown time by explicitly
+ canceling all recursing ns_client objects for
+ each ns_clientmgr. [GL #3183]
+
+6039. [bug] Removing a catalog zone from catalog-zones without
+ also removing the referenced zone could leave a
+ dangling pointer. [GL #3683]
+
+6031. [bug] Move the "final reference detached" log message
+ from dns_zone unit to the DEBUG(1) log level.
+ [GL #3707]
+
+6024. [func] Deprecate 'auto-dnssec'. [GL #3667]
+
+6021. [bug] Use the current domain name when checking answers from
+ a dual-stack-server. [GL #3607]
+
+6020. [bug] Ensure 'named-checkconf -z' respects the check-wildcard
+ option when loading a zone. [GL #1905]
+
+6017. [bug] The view's zone table was not locked when it should
+ have been leading to race conditions when external
+ extensions that manipulate the zone table where in
+ use. [GL #3468]
+
+ --- 9.16.35 released ---
+
+6013. [bug] Fix a crash that could happen when you change
+ a dnssec-policy zone with NSEC3 to start using
+ inline-signing. [GL #3591]
+
+6009. [bug] Don't trust a placeholder KEYDATA from the managed-keys
+ zone by adding it into secroots. [GL #2895]
+
+6008. [bug] Fixed a race condition that could cause a crash
+ in dns_zone_synckeyzone(). [GL #3617]
+
+6002. [bug] Fix a resolver prefetch bug when the record's TTL value
+ is equal to the configured prefetch eligibility value,
+ but the record was erroneously not treated as eligible
+ for prefetching. [GL #3603]
+
+6001. [bug] Always call dns_adb_endudpfetch() after calling
+ dns_adb_beginudpfetch() for UDP queries in resolver.c,
+ in order to adjust back the quota. [GL #3598]
+
+6000. [bug] Fix a startup issue on Solaris systems with many
+ (reportedly > 510) CPUs. Thanks to Stacey Marshall from
+ Oracle for deep investigation of the problem. [GL #3563]
+
+5999. [bug] rpz-ip rules could be ineffective in some scenarios
+ with CD=1 queries. [GL #3247]
+
+5998. [bug] The RecursClients statistics counter could overflow
+ in certain resolution scenarios. [GL #3584]
+
+5996. [bug] Fix a couple of bugs in cfg_print_duration(), which
+ could result in generating incomplete duration values
+ when printing the configuration using named-checkconf.
+ [GL !6880]
+
+ --- 9.16.34 released ---
+
+5991. [protocol] Add support for parsing and validating "dohpath" to
+ SVCB. [GL #3544]
+
+5988. [bug] Some out of memory conditions in opensslrsa_link.c
+ could lead to memory leaks. [GL #3551]
+
+5984. [func] 'named -V' now reports the list of supported
+ DNSSEC/DS/HMAC algorithms and the supported TKEY modes.
+ [GL #3541]
+
+5983. [bug] Changing just the TSIG key names for primaries in
+ catalog zones' member zones was not effective.
+ [GL #3557]
+
+5973. [bug] Fixed a possible invalid detach in UPDATE
+ processing. [GL #3522]
+
+5963. [bug] Ensure struct named_server is properly initialized.
+ [GL #6531]
+
+5921. [test] Convert system tests to use a default DNSKEY algorithm
+ where the test is not DNSKEY algorithm specific.
+ [GL #3440]
+
--- 9.16.33 released ---
5962. [security] Fix memory leak in EdDSA verify processing.
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/COPYRIGHT
--- a/external/mpl/bind/dist/COPYRIGHT Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/COPYRIGHT Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-Copyright (C) 1996-2022 Internet Systems Consortium, Inc. ("ISC")
+Copyright (C) 1996-2023 Internet Systems Consortium, Inc. ("ISC")
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/bin/check/check-tool.c
--- a/external/mpl/bind/dist/bin/check/check-tool.c Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/bin/check/check-tool.c Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: check-tool.c,v 1.1.1.6 2022/09/23 12:09:07 christos Exp $ */
+/* $NetBSD: check-tool.c,v 1.1.1.7 2023/01/25 20:36:34 christos Exp $ */
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
@@ -211,7 +211,8 @@
*/
cur = ai;
while (cur != NULL && cur->ai_canonname == NULL &&
- cur->ai_next != NULL) {
+ cur->ai_next != NULL)
+ {
cur = cur->ai_next;
}
if (cur != NULL && cur->ai_canonname != NULL &&
@@ -413,7 +414,8 @@
*/
cur = ai;
while (cur != NULL && cur->ai_canonname == NULL &&
- cur->ai_next != NULL) {
+ cur->ai_next != NULL)
+ {
cur = cur->ai_next;
}
if (cur != NULL && cur->ai_canonname != NULL &&
@@ -499,7 +501,8 @@
*/
cur = ai;
while (cur != NULL && cur->ai_canonname == NULL &&
- cur->ai_next != NULL) {
+ cur->ai_next != NULL)
+ {
cur = cur->ai_next;
}
if (cur != NULL && cur->ai_canonname != NULL &&
@@ -609,7 +612,7 @@
}
CHECK(result);
- CHECK(dns_db_allrdatasets(db, node, version, 0, &rdsiter));
+ CHECK(dns_db_allrdatasets(db, node, version, 0, 0, &rdsiter));
for (result = dns_rdatasetiter_first(rdsiter);
result == ISC_R_SUCCESS;
result = dns_rdatasetiter_next(rdsiter))
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/bin/check/named-checkconf.c
--- a/external/mpl/bind/dist/bin/check/named-checkconf.c Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/bin/check/named-checkconf.c Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: named-checkconf.c,v 1.1.1.6 2022/09/23 12:09:07 christos Exp $ */
+/* $NetBSD: named-checkconf.c,v 1.1.1.7 2023/01/25 20:36:34 christos Exp $ */
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
@@ -406,6 +406,17 @@
}
obj = NULL;
+ if (get_maps(maps, "check-wildcard", &obj)) {
+ if (cfg_obj_asboolean(obj)) {
+ zone_options |= DNS_ZONEOPT_CHECKWILDCARD;
+ } else {
+ zone_options &= ~DNS_ZONEOPT_CHECKWILDCARD;
+ }
+ } else {
+ zone_options |= DNS_ZONEOPT_CHECKWILDCARD;
+ }
+
+ obj = NULL;
if (get_checknames(maps, &obj)) {
if (strcasecmp(cfg_obj_asstring(obj), "warn") == 0) {
zone_options |= DNS_ZONEOPT_CHECKNAMES;
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/bin/check/named-checkzone.c
--- a/external/mpl/bind/dist/bin/check/named-checkzone.c Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/bin/check/named-checkzone.c Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: named-checkzone.c,v 1.1.1.6 2022/09/23 12:09:07 christos Exp $ */
+/* $NetBSD: named-checkzone.c,v 1.1.1.7 2023/01/25 20:36:34 christos Exp $ */
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
@@ -475,7 +475,8 @@
outputformat = dns_masterformat_raw;
rawversion = strtol(outputformatstr + 4, &end, 10);
if (end == outputformatstr + 4 || *end != '\0' ||
- rawversion > 1U) {
+ rawversion > 1U)
+ {
fprintf(stderr, "unknown raw format version\n");
exit(1);
}
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/bin/confgen/ddns-confgen.c
--- a/external/mpl/bind/dist/bin/confgen/ddns-confgen.c Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/bin/confgen/ddns-confgen.c Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: ddns-confgen.c,v 1.1.1.5 2022/09/23 12:09:08 christos Exp $ */
+/* $NetBSD: ddns-confgen.c,v 1.1.1.6 2023/01/25 20:36:35 christos Exp $ */
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
@@ -139,7 +139,8 @@
isc_commandline_errprint = false;
while ((ch = isc_commandline_parse(argc, argv, "a:hk:Mmr:qs:y:z:")) !=
- -1) {
+ -1)
+ {
switch (ch) {
case 'a':
algname = isc_commandline_argument;
diff -r 9428e2395b18 -r 0300739172f2 external/mpl/bind/dist/bin/delv/delv.c
--- a/external/mpl/bind/dist/bin/delv/delv.c Fri Sep 23 12:09:06 2022 +0000
+++ b/external/mpl/bind/dist/bin/delv/delv.c Wed Jan 25 20:36:33 2023 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: delv.c,v 1.1.1.9 2022/09/23 12:09:08 christos Exp $ */
+/* $NetBSD: delv.c,v 1.1.1.10 2023/01/25 20:36:35 christos Exp $ */
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
@@ -460,7 +460,8 @@
result = dns_rdataset_next(rdataset))
{
if ((rdataset->attributes &
- DNS_RDATASETATTR_NEGATIVE) != 0) {
+ DNS_RDATASETATTR_NEGATIVE) != 0)
+ {
continue;
}
@@ -484,7 +485,8 @@
} else {
dns_indent_t indent = { " ", 2 };
if (!yaml && (rdataset->attributes &
- DNS_RDATASETATTR_NEGATIVE) != 0) {
+ DNS_RDATASETATTR_NEGATIVE) != 0)
Home |
Main Index |
Thread Index |
Old Index