GitLab

(cherry picked from commit 083007e9)

(cherry picked from commit 2bb4392b)

Resolve "Replace custom datatypes (isc_<foo>_t) with C11 equivalents"

See merge request !633

Resolve "Missing check in acl_test.c unit test"

See merge request !652

(cherry picked from commit 0ce82e9d)

Resolve "mempool is broken if object size is below the alignment size"

See merge request !650

Mark Andrews authored Aug 14, 2018 and Evan Hunt committed Aug 14, 2018

(cherry picked from commit 5dd1beec)

[v9_11] Fix OpenSSL error logging

See merge request !646

5009.	[bug]		Upon an OpenSSL failure, the first error in the OpenSSL
			error queue was not logged. [GL #476]

(cherry picked from commit 218166ac)

dst__openssl_toresult3() first calls toresult() and subsequently uses
ERR_get_error_line_data() in a loop.  Given this, it is a mistake to use
ERR_get_error() in toresult() because it causes the retrieved error to
be removed from the OpenSSL error queue, thus preventing it from being
retrieved by the subsequent ERR_get_error_line_data() calls.  Fix by
using ERR_peek_error() instead of ERR_get_error() in toresult().

(cherry picked from commit 36436268)

[v9_11] Prevent rare rbt_insert_and_remove unit test failures

See merge request !643

When two or more absolute, two-label names are added to a completely
empty RBT, an extra, empty node for the root name will be created due to
node splitting.  check_tree() expects that, but the extra node will not
be created when just one name is added to a completely empty RBT.  This
problem could be handled inside check_tree(), but that would introduce
unnecessary complexity into it since adding a single name will result in
a different node count for a completely empty RBT (node count will be 1)
and an RBT containing only an empty node for the root name, created due
to prior node splitting (node count will be 2).  Thus, first explicitly
create a node for the root name to prevent rare check_tree() failures
caused by a single name being added in the first iteration of the
insert/remove loop.

(cherry picked from commit 13fe7637)

[v9_11] Make the "inline" system test more lightweight

See merge request !641

Each zone used in the "inline" system test contains a few dozen records.
Over a dozen of these zones are used in the test.  Most records present
in these zones are not subsequently used in the test itself, but all of
them need to be signed by the named instances launched by the test,
which puts quite a bit of strain on lower-end machines, leading to
intermittent failures of the "inline" system test.  Remove all redundant
records from the zones used in the "inline" system test in order to
stabilize it.

(cherry picked from commit 24dd865b)

[v9_11] Queue "rndc signing -nsec3param ..." requests if needed

See merge request !638

5008.	[bug]		"rndc signing -nsec3param ..." requests were silently
			ignored for zones which were not yet loaded or
			transferred. [GL #468]

(cherry picked from commit eed6778b)

If "rndc signing -nsec3param ..." is ran for a zone which has not yet
been loaded or transferred (i.e. its "db" field is NULL), it will be
silently ignored by named despite rndc logging an "nsec3param request
queued" message, which is misleading.  Prevent this by keeping a
per-zone queue of NSEC3PARAM change requests which arrive before a zone
is loaded or transferred and processing that queue once the raw version
of an inline-signed zone becomes available.

(cherry picked from commit cb40c522)

Resolve "Full Recv-Queue"

See merge request !631

(cherry picked from commit ebf3083e)

Fix extra closing parenthesis in DNSTAP code

See merge request !625

Resolve "Fix for Configure to find the path to VC++ redistributables under Visual Studio 2017"

See merge request !619

Fix missing config.h in win32/socket.c and replace config.h with <config.h>

See merge request !624

(cherry picked from commit d87c1a12)

Resolve "Typo in validate-glue branch"

See merge request !622

(cherry picked from commit bdc98602)

Redefine ISC's int and boolean types to use <stdint.h> and <stdbool.h> types

See merge request !616

(cherry picked from commit 0dad73aa)

5007.   [cleanup]       Replace custom ISC boolean and integer data types
                        with C99 stdint.h and stdbool.h types. [GL #9]

(cherry picked from commit 75c2356f)
(cherry picked from commit b6c281ee)

(cherry picked from commit 7351c505)
(cherry picked from commit 2844f652)

(cherry picked from commit 994e6569)
(cherry picked from commit 88492940)

(cherry picked from commit cb6a185c)
(cherry picked from commit d61e6a31)

(cherry picked from commit 055278c9)
(cherry picked from commit 35238500)

(cherry picked from commit 64fe6bba)
(cherry picked from commit c863a076)

(cherry picked from commit 9e493798)
(cherry picked from commit ee22f606)

Merge CVE-2018-5740 fix

See merge request !609

(cherry picked from commit e78e55f4)