CVS commit: [netbsd-4-0] src/dist/bind

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

Module Name:    src
Committed By:   bouyer
Date:           Sat Jun 18 10:38:28 UTC 2011

Modified Files:
        src/dist/bind [netbsd-4-0]: CHANGES version
        src/dist/bind/lib/dns [netbsd-4-0]: api ncache.c rdataset.c validator.c
        src/dist/bind/lib/dns/include/dns [netbsd-4-0]: rdataset.h

Log Message:
Apply patch, requested by spz in ticket #1430:
        dist/bind/CHANGES:                              patch
        dist/bind/version:                              patch
        dist/bind/lib/dns/api:                          patch
        dist/bind/lib/dns/ncache.c:                     patch
        dist/bind/lib/dns/rdataset.c:                   patch
        dist/bind/lib/dns/validator.c:                  patch
        dist/bind/lib/dns/include/dns/rdataset.h:       patch

Fix security issue: An authoritative name server sending a negative
 response containing a very large RRset could
 trigger an off-by-one error in the ncache code
 and crash named.
Fix bug: Named could fail to validate zones listed in a DLV
 that validated insecure without using DLV and had
 DS records in the parent zone.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.4.4.2.2.4 -r1.1.1.4.4.2.2.5 src/dist/bind/CHANGES
cvs rdiff -u -r1.1.1.4.4.3.2.4 -r1.1.1.4.4.3.2.5 src/dist/bind/version
cvs rdiff -u -r1.1.1.4.4.1.2.4 -r1.1.1.4.4.1.2.5 src/dist/bind/lib/dns/api
cvs rdiff -u -r1.1.1.3.4.1.2.1 -r1.1.1.3.4.1.2.2 \
    src/dist/bind/lib/dns/ncache.c src/dist/bind/lib/dns/rdataset.c
cvs rdiff -u -r1.4.4.2.2.3 -r1.4.4.2.2.4 src/dist/bind/lib/dns/validator.c
cvs rdiff -u -r1.1.1.3.4.1.2.1 -r1.1.1.3.4.1.2.2 \
    src/dist/bind/lib/dns/include/dns/rdataset.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.