[pkgsrc/pkgsrc-2012Q1]: pkgsrc/net/bind97 Pullup ticket #3799 - requested by ...

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/820aa8af8207
branches:  pkgsrc-2012Q1
changeset: 602123:820aa8af8207
user:      tron <tron%pkgsrc.org@localhost>
date:      Tue May 22 09:40:37 2012 +0000

description:
Pullup ticket #3799 - requested by taca
net/bind97: security update

Revisions pulled up:
- net/bind97/Makefile                                           1.14
- net/bind97/distinfo                                           1.13
- net/bind97/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue May 22 03:33:28 UTC 2012

   Modified Files:
        pkgsrc/net/bind97: Makefile distinfo
   Removed Files:
        pkgsrc/net/bind97/patches: patch-lib_dns_resolver.c

   Log Message:
   Update bind97 package to 9.7.6.

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

diffstat:

 net/bind97/Makefile                         |   5 +--
 net/bind97/distinfo                         |   9 +++----
 net/bind97/patches/patch-lib_dns_resolver.c |  34 -----------------------------
 3 files changed, 6 insertions(+), 42 deletions(-)

diffs (79 lines):

diff -r feebd18de31d -r 820aa8af8207 net/bind97/Makefile
--- a/net/bind97/Makefile       Tue May 22 09:29:13 2012 +0000
+++ b/net/bind97/Makefile       Tue May 22 09:40:37 2012 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.12.2.1 2012/05/03 18:32:02 tron Exp $
+# $NetBSD: Makefile,v 1.12.2.2 2012/05/22 09:40:37 tron Exp $
 
 DISTNAME=      bind-${BIND_VERSION}
 PKGNAME=       ${DISTNAME:S/-P/pl/}
-PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
                http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
@@ -17,7 +16,7 @@
 
 MAKE_JOBS_SAFE=        no
 
-BIND_VERSION=  9.7.5
+BIND_VERSION=  9.7.6
 
 .include "../../mk/bsd.prefs.mk"
 
diff -r feebd18de31d -r 820aa8af8207 net/bind97/distinfo
--- a/net/bind97/distinfo       Tue May 22 09:29:13 2012 +0000
+++ b/net/bind97/distinfo       Tue May 22 09:40:37 2012 +0000
@@ -1,11 +1,10 @@
-$NetBSD: distinfo,v 1.11.2.1 2012/05/03 18:32:02 tron Exp $
+$NetBSD: distinfo,v 1.11.2.2 2012/05/22 09:40:37 tron Exp $
 
-SHA1 (bind-9.7.5.tar.gz) = d66705bb898340de88653892a75e0038c3dec86e
-RMD160 (bind-9.7.5.tar.gz) = 0186557e4d20b06c45939988b47dbf2cf600ae9b
-Size (bind-9.7.5.tar.gz) = 6848848 bytes
+SHA1 (bind-9.7.6.tar.gz) = 79dd03a017b0e56eee75e07cb1bef4fbfbe7de36
+RMD160 (bind-9.7.6.tar.gz) = 3b1b8b91d188b48d3531d38c9b90f7f468fb1641
+Size (bind-9.7.6.tar.gz) = 6846451 bytes
 SHA1 (patch-aa) = 6cec876c8caa7082f97365863f3f88c4f168da48
 SHA1 (patch-ab) = 9585a26a376d32f80ac8266eb7967c00b433f14d
 SHA1 (patch-ac) = ee4ca3d200b3d3f93b8ccfa2c6e51ab005b35a01
 SHA1 (patch-ad) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
 SHA1 (patch-ae) = 68b8155daa8f75081b6f8fd70ca23fda60506c64
-SHA1 (patch-lib_dns_resolver.c) = 1c0bc26a159219f65dc59429d395f7796a5165f6
diff -r feebd18de31d -r 820aa8af8207 net/bind97/patches/patch-lib_dns_resolver.c
--- a/net/bind97/patches/patch-lib_dns_resolver.c       Tue May 22 09:29:13 2012 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,34 +0,0 @@
-$NetBSD: patch-lib_dns_resolver.c,v 1.1.2.2 2012/05/03 18:32:02 tron Exp $
-
-Prevent segmentation fault in resolver.c: https://kb.isc.org/article/AA-00664
-
---- lib/dns/resolver.c.orig    2012-03-22 19:14:04.000000000 +0000
-+++ lib/dns/resolver.c
-@@ -2157,7 +2157,6 @@ fctx_finddone(isc_task_t *task, isc_even
-       isc_boolean_t want_try = ISC_FALSE;
-       isc_boolean_t want_done = ISC_FALSE;
-       isc_boolean_t bucket_empty = ISC_FALSE;
--      isc_boolean_t destroy = ISC_FALSE;
-       unsigned int bucketnum;
- 
-       find = event->ev_sender;
-@@ -2196,17 +2195,12 @@ fctx_finddone(isc_task_t *task, isc_even
-               }
-       } else if (SHUTTINGDOWN(fctx) && fctx->pending == 0 &&
-                  fctx->nqueries == 0 && ISC_LIST_EMPTY(fctx->validators)) {
--              /*
--               * Note that we had to wait until we had the lock before
--               * looking at fctx->references.
--               */
-+
-               if (fctx->references == 0)
--                      destroy = ISC_TRUE;
-+                      bucket_empty = fctx_destroy(fctx);
-       }
-       UNLOCK(&res->buckets[bucketnum].lock);
- 
--      if (destroy)
--              bucket_empty = fctx_destroy(fctx);
-       isc_event_free(&event);
-       dns_adb_destroyfind(&find);
-