Re: can anybody review my patchset?

On Mon, Apr 20, 2009 at 2:29 AM, Andreas Schulze
<[email protected]> wrote:
> Hello,
>
> recently some securityrelevant patches are released.
> unfortunately / mostly these patches where build against stock dhbdns.

Stock djbdns-1.05 does seem to be the gold standard that everybody
diffs against.

> I did not found any patchset against a modiefied djbdns.

Now that the license has changed, why keep playing the patch game?
Create your own fork.  8)  I did.

> Thats why I build my own patchset based on fefe's IPv6 Patch.
> Some patches matches, other had to be rewritten complettly.
>
> I made a patchset including the following:
> 0. stock djbdns
> 1. fefe's IPv6 Patch #test23
> 2. CVE-2008-4392
> 3. CVE-2009-0858
> 4. SIGPIPE http://marc.info/?l=djbdns&m=104804013229536
> 5. SERVFAIL http://marc.info/?l=djbdns&m=119983010611174
> 6. dnscache rotating A-Records http://thomas.mangin.com/data/source/djbdns-round-robin.patch.bz2
> 7. current root-nameserves
> 8. own Patch: decrease CacheTTL to force an nearly uncaching dnscache
> 9. own Patch: let tinydns rotate multiple MX records

I've got 2-7 in zinq-djbdns-0.07.  For #6, I used Matthew Dempsky's
patch, triggered by an environment variable.  I got the idea from a
component of Jos Backus' jumbo patch (I've got the SRV+NAPTR bits,
too).

I'll get around to merging in #1 (Felix's IPv6 patch) at some point.

If anybody else is interested in 8-9, I might make diffs against
zinq-djbdns available, but I doubt I'd ever merge them in and ship
them in a release.

Linkage:

http://sourceforge.net/projects/zinq/
http://zinq.sourceforge.net
http://sourceforge.net/project/showfiles.php?group_id=213575&package_id=305670&release_id=679963