src-test2/contrib, branch vendor/bind9/9.6-ESV-R4-P3 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=vendor%2Fbind9%2F9.6-ESV-R4-P3 2008-07-12T05:00:28Z Flatten bind9 vendor work area 2008-07-12T05:00:28Z Peter Wemm peter@FreeBSD.org 2008-07-12T05:00:28Z urn:sha1:a988131922df6e2093bf4391d6b1b021c07d6b3c Update this file so that BIND on ARM can actually work. I quote: 2007-12-03T08:26:34Z Doug Barton dougb@FreeBSD.org 2007-12-03T08:26:34Z urn:sha1:3104e2690b183ef5948f77893efb9ddc3f9edce2 The problem was, isc_atomic_cmpxchg() is almost like our atomic_cmpset_32(), except it expects the old value to be returned, whereas our atomic_cmpset_32 returns 1 on success, or 0 on failure. So I re-implemented something suitable. Submitted by: cognet Reviewed by: bsdimp These files are not part of the distribution. 2007-12-02T19:21:31Z Doug Barton dougb@FreeBSD.org 2007-12-02T19:21:31Z urn:sha1:a6861a2eb3784e28d32694490fb3ff22f7508467 Brought to you by: PEBCAK This file is no longer in BIND 9.4.2 2007-12-02T19:17:26Z Doug Barton dougb@FreeBSD.org 2007-12-02T19:17:26Z urn:sha1:2f4b1e879018c6e0c294092f7cbbc76ca1332894 Vendor import of BIND 9.4.2 2007-12-02T19:10:41Z Doug Barton dougb@FreeBSD.org 2007-12-02T19:10:41Z urn:sha1:995ea97467fe14e6f9cfe0f9523d7dbddcc422c3 Vendor import of 9.4.1-P1, which has fixes for the following: 2007-07-25T08:12:36Z Doug Barton dougb@FreeBSD.org 2007-07-25T08:12:36Z urn:sha1:56a78b52117fceacbf4282cd41826ca9fb72dd07 1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 Approved by: re (kensmith, implicit) Add a custom atomic.h file which implements the C versions of the 2007-06-05T22:15:38Z Doug Barton dougb@FreeBSD.org 2007-06-05T22:15:38Z urn:sha1:c197e4d6789fb9d0dd1fee514ae2aa75f9b7ab6b code we already have assembly versions of. Written by: imp Remove from the vendor branch files that are no longer 2007-06-02T23:29:48Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:29:48Z urn:sha1:d6a1012ea9473b6b8a48c27c7bfc83a8fe167920 present in BIND 9.4.1. Vendor import of BIND 9.4.1 2007-06-02T23:21:47Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:21:47Z urn:sha1:141cfa50294bfad08bb6c6419f1dc4fc3165c6ab Vendor import of BIND 9.3.4 2007-01-29T18:31:57Z Doug Barton dougb@FreeBSD.org 2007-01-29T18:31:57Z urn:sha1:fa5fb0343e2347012cf980b8273e2cba6c36de4a