knot-resolver (5.3.1-1) [PTS] [DDPO]

NEW: VCS has unreleased changes: 5.3.2-1 > 5.3.1-1

Git: https://salsa.debian.org/dns-team/knot-resolver.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Browser: https://salsa.debian.org/dns-team/knot-resolver
Last scan: 2021-06-14 00:37:11+00
Next scan: 2021-06-21 10:42:00+00
CI pipeline status: success

Debian changelog in Git:

knot-resolver (5.3.2-1) unstable; urgency=medium

  [ Jakub Ružička ]
  * New upstream release
  * d/patches: remove patch included upstream

  [ Santiago Ruano Rincón ]
  * Add Spanish debconf template translation (Closes: #987594)

 -- Jakub Ružička <jakub.ruzicka@nic.cz>  Thu, 13 May 2021 18:18:18 +0100

This branch is 46 commits ahead of tag debian/5.3.1-1

Git log:

commit b845da699e515bc57fc7ce5e1b2fb80111fa72b6
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu May 13 18:35:18 2021 +0200

    d/changelog: release 5.3.2-1

commit ef02b681cb0ecb04a251ee2874e4289d2119dc5b
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu May 13 19:06:24 2021 +0200

    d/patches: remove patch included upstream

commit ceea70340cf4c150773fc5ea59faf82275f3086c
Merge: f5c041c1 3dfbb804
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu May 13 16:31:09 2021 +0000

    Update upstream source from tag 'upstream/5.3.2'
    
    Update to upstream version '5.3.2'
    with Debian dir 21526ad9a91b7983b0f55376e1ec7e9e9861e5d4

commit 3dfbb8047704823cc77f46ba3806d10c94aa142f
Merge: 0d1780d7 ae3c8160
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu May 13 16:31:06 2021 +0000

    New upstream version 5.3.2

commit ae3c81600a6ce5909bd3abc9dbc4d31e89ef3179
Merge: 2894d7a7 11d13414
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed May 5 09:23:24 2021 +0000

    Merge branch 'release-5-3-2' into 'master'
    
    release 5.3.2
    
    See merge request knot/knot-resolver!1175

commit 11d134145a9c118a29636e0af9d7cf481e768ab4
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed May 5 10:31:50 2021 +0200

    release 5.3.2

commit 2012ec754b9ed95d6151187fa02239848bc9b9e8
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed May 5 11:05:40 2021 +0200

    Dockerfile: update Knot DNS

commit 2894d7a76fbd0abcc421b6edbdad8ee8796dd4aa
Merge: 219ceec1 b2c21d31
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed May 5 07:32:08 2021 +0000

    Merge !1163: policy.STUB docs: recommend NO_EDNS and mention NO_0X20

commit b2c21d31dcd7b99ac55815d0d25c63d021d7aaae
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Apr 1 15:05:31 2021 +0200

    policy.STUB docs: recommend NO_EDNS and mention NO_0X20

commit 219ceec19e280f232f192de501b1497cc7bceafa
Merge: dd8bb8da 35937ed6
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Mon May 3 17:08:24 2021 +0000

    Merge !1173: doc: mention DEBUG_* policies in single request debug section

commit 35937ed64ac0ae352af2d487a0fc6d560fb0ee30
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Fri Apr 30 12:39:13 2021 +0200

    doc: mention DEBUG_* policies in single request debug section

commit dd8bb8da97891f6478453c59b32d84c4c5485e71
Merge: fa42b4ae 47149221
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Mon May 3 11:29:36 2021 +0000

    Merge branch 'ci-distro-update' into 'master'
    
    distro/tests: update fedora, ubuntu releases
    
    See merge request knot/knot-resolver!1174

commit 4714922163ede4c06d0ab779553d0e70df1e59f8
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Mon May 3 11:20:32 2021 +0200

    distro/tests: update fedora, ubuntu releases
    
    fedora32 -> fedora 34
    ubuntu2010 -> ubuntu2104
    remove ubuntu1604

commit fa42b4aeffb552c6a8d648c7f658f9f40c9d3558
Merge: 24307811 97ec93e1
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Mon May 3 09:55:03 2021 +0000

    Merge branch 'nsec3-iters-downgrade-2' into 'master'
    
    validator: avoid assertion in an edge-case
    
    See merge request knot/knot-resolver!1169

commit 97ec93e178207699f438a8300eecabc2654ae76f
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Mon Apr 12 15:23:02 2021 +0200

    validator: avoid assertion in an edge-case
    
    Case: NSEC3 with too many iterations used for a positive wildcard proof.
    
    To really fix the answers, this also needed fixing the `any_rank` part
    which I somehow forgot in commit 7107faebc :-(

commit 243078110f7281b6fd2b39a2cb522b713e03dacd
Merge: f72135c8 d6561dc1
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Apr 30 14:37:30 2021 +0000

    Merge !1171: ci: utilize test reports

commit d6561dc178294ee01ff00d3e899e0c61bc7cad2f
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Apr 15 19:21:55 2021 +0200

    ci: try to improve meson's junit.xml
    
    GitLab doesn't show the <system-*> tags, so let's replace them.
    For now it's just hacky sed; I can't use xsltproc or similar.

commit 17f34b3589a49b60acd7d804d0b993a82d09f999
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Apr 15 16:44:39 2021 +0200

    ci: utilize test reports
    
    https://docs.gitlab.com/ce/ci/unit_test_reports.html
    https://mesonbuild.com/Unit-tests.html#testlogjunitxml
    
    Implemented fully: build, build-asan; partially: pytests, deckard.

commit f72135c8bf8a1439a4ec0e23ed77c89f28a9fb84
Merge: c78ecf8c 39d37327
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Fri Apr 30 10:50:45 2021 +0000

    Merge branch 'cache-stale-readers' into 'master'
    
    cache: clear any stale readers when opening cache
    
    See merge request knot/knot-resolver!1172

commit 39d373272b1bfb4e438d790d4bbe4162fb927ea7
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Apr 28 12:53:26 2021 +0200

    cache: clear any stale readers when opening cache

commit f5c041c1be5627142931ab24bacafb1560404f68
Author: Santiago Ruano Rincón <santiagorr@riseup.net>
Date:   Mon Apr 26 10:58:13 2021 +0200

    Snapshot debian/changelog
    
    Gbp-Dch: Ignore

commit 5a38694beb802bd62f8d97efacb53729b26e1f00
Author: Santiago Ruano Rincón <santiagorr@riseup.net>
Date:   Mon Apr 26 10:57:09 2021 +0200

    Add Spanish debconf template translation
    
    Closes: #987594

commit c78ecf8c3a48839622fc8049573a6017efc8cfe9
Merge: b6a62943 4b182ddb
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Tue Apr 20 11:08:58 2021 +0000

    Merge branch 'dnstap-rtt' into 'master'
    
    dnstap: add TCP RTT collection (experimental, optional)
    
    See merge request knot/knot-resolver!1170

commit 4b182ddb3dd9e2289c114b784c3145c50ce939d8
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Apr 14 20:00:28 2021 +0200

    dnstap: add TCP RTT collection (experimental, optional)

commit 91b3e7eaf514bda94247a6445c9f9101e208ae4d
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Mon Apr 19 18:22:14 2021 +0200

    daemon/worker: rework worker_request_*_source_session()
    
    I see no potential use for `set`; it's not a suitable abstraction.
    And for `get` we want to use a pointer to the public type
    instead of the private one.
    
    Overall, worker.h has way too many stuff, but this branch is
    not a good place to clean it up.

commit b6a6294310088c4b1e11f7c0744c2366d03af422
Merge: a264964d 52097127
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Apr 16 17:28:44 2021 +0000

    Merge !1161: daemon/http: fix memleak if http_write_pkt() fails

commit 520971274c10ed9441382c63acf4f0392afc2965
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Tue Mar 30 19:24:08 2021 +0200

    daemon/http: fix memleak if http_write_pkt() fails
    
    This can happen for example when we want to send an answer, but the
    http stream (or the connection?) is already closed.
    
    Direct leak of 48 byte(s) in 1 object(s) allocated from:
        #0 0x7f5ad2445459 in __interceptor_malloc /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cpp:145
        #1 0x55c0db3fc442 in http_write_pkt ../daemon/http.c:610
        #2 0x55c0db3fc882 in http_write ../daemon/http.c:651
        #3 0x55c0db3e9bb1 in qr_task_send ../daemon/worker.c:700
        #4 0x55c0db3ee86c in qr_task_finalize ../daemon/worker.c:1321
        #5 0x55c0db3f0123 in qr_task_step ../daemon/worker.c:1633
        #6 0x55c0db3f0982 in worker_submit ../daemon/worker.c:1755
        #7 0x55c0db3d992a in session_wirebuf_process ../daemon/session.c:759
        #8 0x55c0db3c5f01 in udp_recv ../daemon/io.c:89
        #9 0x7f5ad22b0e0e  (/usr/lib/libuv.so.1+0x20e0e)

commit a264964d432f65dc1583f2ea5775e99e17a9d290
Merge: c8cb9740 dca78626
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Apr 16 17:18:22 2021 +0000

    Merge !1164: daemon/http: improve handling of stream errors

commit dca786269a5ef4faa6ff359eeb56c1e7a6da055e
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Mon Apr 5 14:47:43 2021 +0200

    daemon/http: additional guards from memleaks

commit 2cdec753ca46248cea97eb65d33e812ea68f919c
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Thu Apr 1 17:04:10 2021 +0200

    daemon/http: improve handling of stream errors
    
    The on_frame_recv() callback ins't guaranteed to be called by nghttp2.
    This can happen e.g. in a case when nghttp2 issues a PROTOCOL_ERROR
    RST_STREAM frame. Previously, it would leave the connection in a
    stream-processing state, making it completely useless.
    
    While this guarantees a cleanup will be called eventually, some streams
    may still get ignored due to the order of various callbacks and data
    processing procedures. Still, it's better than the previous
    implementation.

commit c8cb9740f8ebd34219c7d860106969fcbb6c7bf6
Merge: 65adf9f4 fc245c7e
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed Apr 14 15:14:33 2021 +0000

    Merge branch 'unaligned-access' into 'master'
    
    various undefined-behavior fixes
    
    Closes #426
    
    See merge request knot/knot-resolver!1167

commit fc245c7ed4e87bcb872527913434b7ac61ffb3cb
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Wed Apr 14 16:11:10 2021 +0200

    NEWS: add SIGBUS line
    
    It's spread over multiple commits.  The other undefined-behavior fixes
    probably don't cause any issue in practice, so they aren't mentioned.

commit fd34f33a5d365699931b0f2453b1f0aee1621d17
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Apr 9 10:56:13 2021 +0200

    lib/utils kr_rand_bytes(): minor issue on 32-bit systems
    
    Really support 64-bit return value even there.
    Currently we only use such large value in an unimportant case
    (lua_Number seed).

commit 1dc3666eab63a4017a9be4f12ad84a839d50cdb0
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 18:01:58 2021 +0200

    contrib/murmurhash3: fix occasional undefined behavior
    
    murmurhash3.c:43:40: runtime error: addition of unsigned offset
                         to 0x7ffce41c2014 overflowed to 0x7ffce41c2000
    The `i` was used in a super-ugly way; I suspect the only reason was
    to optimize that end-loop condition was zero comparison *vomit*

commit 94896b2ec5ae9609a66c7bd5c72a1ce0185f273c
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 17:20:15 2021 +0200

    ci: more sanitization (for recent changes)
    
    The misaligned accesses were just throwing warnings for me (with gcc),
    so I added the flag to stregthen what we get in CI.

commit 44f67cf4b0c98c92d5dfd5cdcad72e10d0820c89
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 17:28:52 2021 +0200

    treewide: fix unaligned access
    
    Some less common HW (not x86, usually ARM) doesn't tolerate unaligned
    access to memory and it's breakage of C as well.
    
    It's easiest to check by meson's -Db_sanitize=undefined (on any HW).
    I pushed millions of real-life QNAME+QTYPE queries over UDP in default
    mode and the sanitizer seems clear now.

commit 7f1a33f53635e5bd71bac8bd8186236608d5cce9
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 17:26:12 2021 +0200

    treewide: remove duplicate contrib/wire.h
    
    libknot >= 2.9 provides it and their version is less buggy :-)
    In particular, it works with unaligned pointers.

commit 9cfc7e175d97e1ba3904cb5556cedfe13935926c
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 16:47:19 2021 +0200

    lib/selection*: trivial undefined-behavior fix

commit 65adf9f4ac9aa070c619d8c46a4ef20da255c24c
Merge: cf0a2a94 9cd56957
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed Apr 14 12:36:33 2021 +0000

    Merge branch 'cache-workarounds' into 'master'
    
    cache: improve handling write errors from LMDB
    
    See merge request knot/knot-resolver!1159

commit 9cd56957777e0251e2bafd4f4eb8e2297b9fa039
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Mon Mar 29 19:25:27 2021 +0200

    cache: improve handling write errors
    
    In particular, ignore ENOSPC from LMDB for a short time unless the
    space-usage estimate is over 90%.  See code comments for details.

commit a10d7b5199bd402d6c9277f2eee15d2b65200dfc
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Mar 26 11:58:42 2021 +0100

    clear kr_query::flags.CACHED
    
    I suspect there's an edge case where cache thinks it provided enough
    data but iterator (or who) disagrees and resolution continues.
    We observed (flags.CACHED == true) even when processing a reply from
    internet, and that could be confusing and even trigger a segfault.
    Clearing the flag sounds OK semantically; it never meant that no cached
    data have been used within the kr_query (e.g. zone cut, DS/DNSKEY, ...)

commit cf0a2a94eb4674195fd253de0074ff64d47dcec0
Merge: 5e1bfd3b e925bec8
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Wed Apr 14 12:17:25 2021 +0000

    Merge branch 'nsec-zeros' into 'master'
    
    fix SERVFAIL for some rare dynamic proofs
    
    See merge request knot/knot-resolver!1166

commit e925bec8bad5246bb6e04b74af678d2a722f27db
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Tue Apr 6 12:11:41 2021 +0200

    cache: fix caching NSEC ranges with \000 in *ending*
    
    Our aggressive NSEC cache doesn't handle these well and the case
    with only the end-label being like this was forgotten.
    See the parent commit for a test case.
    
    Also, larger NSEC* sets are now considered weird.

commit 2425321d498042a0190799dedee172bba744d4d6
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Fri Apr 2 10:59:32 2021 +0200

    validate: fix on some NSEC ranges with zero byte(s)
    
    Example case: denying existence of ok.rdns.dev by
    oj\255.rdns.dev. NSEC ok\000.rdns.dev.
    This NSEC end was incorrectly ordered with the QNAME.
    https://gitter.im/CZ-NIC/knot-resolver?at=606055b82beb1e1da3d73892
    
    The code is Libor's :-)

commit 5e1bfd3b256b3cfb9d2fe1646e05f42339c785ea
Merge: 58cdfa41 e7a29fd3
Author: Tomas Krizek <tomas.krizek@nic.cz>
Date:   Thu Apr 8 14:02:51 2021 +0000

    Merge branch 'dnstap-reinit' into 'master'
    
    dnstap: fix repeated configuration
    
    See merge request knot/knot-resolver!1168

commit e7a29fd3e99d8491450bec4f69b71271ee4f3285
Author: Vladimír Čunát <vladimir.cunat@nic.cz>
Date:   Thu Apr 8 15:30:34 2021 +0200

    dnstap: fix repeated configuration
    
    In practice it can easily happen, as loading module and really
    configuring it is often done separately.  Then we'd see two fstrm
    threads, etc.