svn commit: r195930 - in vendor/bind9/dist-9.4: . bin/named

[Doug Barton]

Author: dougb
Date: Tue Jul 28 23:23:48 2009
New Revision: 195930
URL: http://svn.freebsd.org/changeset/base/195930

Log:
  Vendor import of BIND 9.4.3-P3

Modified:
  vendor/bind9/dist-9.4/CHANGES
  vendor/bind9/dist-9.4/bin/named/update.c
  vendor/bind9/dist-9.4/version

Modified: vendor/bind9/dist-9.4/CHANGES
==============================================================================
--- vendor/bind9/dist-9.4/CHANGES	Tue Jul 28 22:59:11 2009	(r195929)
+++ vendor/bind9/dist-9.4/CHANGES	Tue Jul 28 23:23:48 2009	(r195930)
@@ -1,3 +1,8 @@
+	--- 9.4.3-P3 released ---
+
+2640.	[security]	A specially crafted update packet will cause named
+			to exit. [RT #20000]
+
 	--- 9.4.3-P2 released ---
 
 2579.	[bug]		DNSSEC lookaside validation failed to handle unknown

Modified: vendor/bind9/dist-9.4/bin/named/update.c
==============================================================================
--- vendor/bind9/dist-9.4/bin/named/update.c	Tue Jul 28 22:59:11 2009	(r195929)
+++ vendor/bind9/dist-9.4/bin/named/update.c	Tue Jul 28 23:23:48 2009	(r195930)
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: update.c,v 1.109.18.27 2008/02/07 03:16:08 marka Exp $ */
+/* $Id: update.c,v 1.109.18.27.4.1 2009/07/28 13:57:27 marka Exp $ */
 
 #include <config.h>
 
@@ -865,7 +865,11 @@ temp_check(isc_mem_t *mctx, dns_diff_t *
 			if (type == dns_rdatatype_rrsig ||
 			    type == dns_rdatatype_sig)
 				covers = dns_rdata_covers(&t->rdata);
-			else
+			else if (type == dns_rdatatype_any) {
+				dns_db_detachnode(db, &node);
+				dns_diff_clear(&trash);
+				return (DNS_R_NXRRSET);
+			} else
 				covers = 0;
 
 			/*

Modified: vendor/bind9/dist-9.4/version
==============================================================================
--- vendor/bind9/dist-9.4/version	Tue Jul 28 22:59:11 2009	(r195929)
+++ vendor/bind9/dist-9.4/version	Tue Jul 28 23:23:48 2009	(r195930)
@@ -1,4 +1,4 @@
-# $Id: version,v 1.29.134.23.2.2 2009/03/17 02:23:49 marka Exp $
+# $Id: version,v 1.29.134.23.2.3 2009/07/28 13:57:27 marka Exp $
 #
 # This file must follow /bin/sh rules.  It is imported directly via
 # configure.
@@ -7,4 +7,4 @@ MAJORVER=9
 MINORVER=4
 PATCHVER=3
 RELEASETYPE=-P
-RELEASEVER=2
+RELEASEVER=3