head	1.2;
access;
symbols
	pkgsrc-2026Q3:1.1.0.2
	pkgsrc-2026Q3-base:1.1;
locks; strict;
comment	@# @;


1.2
date	2026.10.09.17.50.25;	author drixter;	state dead;
branches;
next	1.1;
commitid	HkL60MdBZjhpqPYG;

1.1
date	2026.09.11.12.53.14;	author drixter;	state Exp;
branches;
next	;
commitid	ZQGdhSeScFK6GcVG;


desc
@@


1.2
log
@knot: Update to 3.6.1

Features:
mod-ecs: new module for setting the ECS scope prefix length (Thanks to Branko Mijuskovic)

Improvements:
knotd: additional SOA consistency checks when processing incoming XFR
knotd: DDNS over 0-RTT QUIC/TLS is forbidden
knotd: new warning if difference(-no-serial) is enabled on a secondary zone
knotc: control blocking timeout is per full command, not per each zone
kdig: backward compatibility for +noidn as an alias for +noidnout
libknot: extra checks for malformed IPv4 and TCP packets in XDP filter (Thanks to Joshua Rogers)
src,tests: various compatibility fixes for SmartOS #980
doc: various improvements

Bugfixes:
knotd: missing synchronization between catalog reload and worker suspension
knotd: race condition between pausing/resuming events, zonedb update, and reload/conf-commit
knotd: non-consumed DoT 0-RTT early data can cause memory exhaustion (Thanks to Yuxiao Wu)
knotd: server can crash if NSEC3-enabled zone has empty NSEC3 chain (Thanks to Yuxiao Wu)
knotd: server sends 3 session tickets over DoQ
knotd: missing checks for malformed sentinel-related replies from Redis (Thanks to Joshua Rogers)
knotd: defective error handling during zone update (Thanks to Joshua Rogers)
knotd: defective TSIG MAC truncation processing (Thanks to Joshua Rogers)
knotd: zone update commit reads parent zone contents without RCU protection (Thanks to Joshua Rogers)
knotd: parent-check TTL can overflow KSK retirement delay (Thanks to Joshua Rogers)
knotd: missing DDNS queue synchronization during reload (Thanks to Joshua Rogers)
keymgr: validate-skr returns success for cryptographically invalid SKR signatures (Thanks to Joshua Rogers)
kdig: missing check for malformed EDNS/REPORTCHANNEL data (Thanks to Joshua Rogers)
libknot: defective output buffer handling in TCP over XDP
libknot: auto-generated TLS key file follows symlinks (Thanks to Joshua Rogers)
libknot: missing checks for malformed data in rrset-dump (Thanks to Joshua Rogers)
libzsanner: possible out-of-bounds write when parsing DELEG/DELEGPARAM dname (Thanks to Joshua Rogers)
redis: possible use-after-free when rrset index update fails (Thanks to Joshua Rogers)
redis: incorrect arity check for KNOT_BIN.UPD.LOAD (Thanks to Joshua Rogers)
redis: KNOT.ZONE.INFO crashes on nonexistent zone (Thanks to Joshua Rogers)
redis: update commit uses freed zset element buffer while applying updates (Thanks to Joshua Rogers)
python: receive_block() doesn't return data from the 'status' command
@
text
@$NetBSD: patch-tests_knot_test__semantic__check.in,v 1.1 2026/09/11 12:53:14 drixter Exp $

Patch from upstream to work on SmartOS #980

--- tests/knot/test_semantic_check.in.orig	2026-09-11 07:05:07.900805215 +0000
+++ tests/knot/test_semantic_check.in
@@@@ -14,12 +14,12 @@@@ LOG="$TMPDIR/log"
 # Params: zonefile fatal_error expected_erros_count semcheck_err_msg [AUTO]
 expect_error()
 {
-	local zonefile="$1"
-	local fatals_exp="$2"
-	local errors_exp="$3"
-	local msg="$4"
-	local auto="$5"
-	local origin=""
+	zonefile="$1"
+	fatals_exp="$2"
+	errors_exp="$3"
+	msg="$4"
+	auto="$5"
+	origin=""
 
 	if [ ! -r "$DATA/$zonefile" ]; then
 		skip_block 4 "missing zone file for test"
@@@@ -46,9 +46,9 @@@@ expect_error()
 #param zonefile [AUTO]
 test_correct()
 {
-	local zonefile="$1"
-	local auto="$2"
-	local origin=""
+	zonefile="$1"
+	auto="$2"
+	origin=""
 
 	if [ "$auto" != "AUTO" ]; then
 		origin="-o example.com"
@@@@ -61,7 +61,7 @@@@ test_correct()
 #param zonefile
 test_correct_no_dnssec()
 {
-	local zonefile="$1"
+	zonefile="$1"
 
 	$KZONECHECK -o example.com -d off "$DATA/$zonefile" > /dev/null 2>&1
 	ok "$zonefile - correct zone, without error" test $? -eq 0
@


1.1
log
@knot: Patch from upstream to work on SmartOS #980
@
text
@d1 1
a1 1
$NetBSD$
@