Module Name: src Committed By: he Date: Thu Dec 25 23:43:29 UTC 2014
Modified Files: src/dist/bind/bin/named [netbsd-5-1]: config.c query.c server.c src/dist/bind/lib/dns [netbsd-5-1]: adb.c resolver.c src/dist/bind/lib/dns/include/dns [netbsd-5-1]: adb.h resolver.h src/dist/bind/lib/export/isc [netbsd-5-1]: Makefile.in src/dist/bind/lib/isc [netbsd-5-1]: Makefile.in src/dist/bind/lib/isc/include/isc [netbsd-5-1]: Makefile.in types.h src/dist/bind/lib/isccfg [netbsd-5-1]: namedconf.c src/lib/libisc [netbsd-5-1]: Makefile Added Files: src/dist/bind/lib/isc [netbsd-5-1]: counter.c src/dist/bind/lib/isc/include/isc [netbsd-5-1]: counter.h Log Message: Apply fix for BIND, backported from the patch for 9.8.8 from ISC. This is a fix for CVE-2014-8500, where a maliciously constructed setup can cause BIND to issue an unlimited sequence of queries to follow a delegation. [spz, ticket #1937] To generate a diff of this commit: cvs rdiff -u -r1.1.1.8.4.1.2.3 -r1.1.1.8.4.1.2.4 \ src/dist/bind/bin/named/config.c cvs rdiff -u -r1.8.4.2.2.6 -r1.8.4.2.2.7 src/dist/bind/bin/named/query.c cvs rdiff -u -r1.1.1.9.4.1.2.3 -r1.1.1.9.4.1.2.4 \ src/dist/bind/bin/named/server.c cvs rdiff -u -r1.6.4.1.2.3 -r1.6.4.1.2.4 src/dist/bind/lib/dns/adb.c cvs rdiff -u -r1.8.4.2.2.4 -r1.8.4.2.2.5 src/dist/bind/lib/dns/resolver.c cvs rdiff -u -r1.1.1.5.12.3 -r1.1.1.5.12.4 \ src/dist/bind/lib/dns/include/dns/adb.h cvs rdiff -u -r1.1.1.5.4.1.2.3 -r1.1.1.5.4.1.2.4 \ src/dist/bind/lib/dns/include/dns/resolver.h cvs rdiff -u -r1.1.4.4 -r1.1.4.5 src/dist/bind/lib/export/isc/Makefile.in cvs rdiff -u -r1.1.1.6.4.1.2.3 -r1.1.1.6.4.1.2.4 \ src/dist/bind/lib/isc/Makefile.in cvs rdiff -u -r0 -r1.1.6.2 src/dist/bind/lib/isc/counter.c cvs rdiff -u -r1.1.1.5.4.1.2.3 -r1.1.1.5.4.1.2.4 \ src/dist/bind/lib/isc/include/isc/Makefile.in \ src/dist/bind/lib/isc/include/isc/types.h cvs rdiff -u -r0 -r1.1.6.2 src/dist/bind/lib/isc/include/isc/counter.h cvs rdiff -u -r1.1.1.7.4.1.2.3 -r1.1.1.7.4.1.2.4 \ src/dist/bind/lib/isccfg/namedconf.c cvs rdiff -u -r1.2.4.1.2.1 -r1.2.4.1.2.2 src/lib/libisc/Makefile Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.