Commit graph

8518 commits

Author SHA1 Message Date
Mark Andrews
8ab47fac8b remove redundent assignment to silence clang 2011-07-27 07:25:23 +00:00
Mark Andrews
13a46b7a19 9.4-ESV-R5 2011-07-24 08:00:30 +00:00
Mark Andrews
e25e67f697 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
                        not all TSIG-signed. [RT #23254]
2011-07-22 06:24:01 +00:00
Automatic Updater
9c47018c54 update copyright notice 2011-07-21 23:45:14 +00:00
Mark Andrews
69baa9d558 9.4-ESV-R5 2011-07-21 02:11:00 +00:00
Mark Andrews
0d6b72e48f 3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
                        [RT #24950]
2011-07-21 01:55:56 +00:00
Automatic Updater
0ef4e1045f update copyright notice 2011-06-09 07:12:57 +00:00
Evan Hunt
66c87a450a 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]
2011-06-09 00:42:48 +00:00
Mark Andrews
b7c1b09453 silence conversion warnings 2011-05-31 02:18:34 +00:00
Automatic Updater
c31cb8c86c update copyright notice 2011-05-27 23:49:08 +00:00
Mark Andrews
8adaaeb4c9 dns_trust_totext 2011-05-27 06:05:43 +00:00
Mark Andrews
0cecfd4c56 move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build 2011-05-27 05:03:41 +00:00
Mark Andrews
3b4af1bfd8 move 9.4-ESV-R5rc1 release point 2011-05-27 01:55:22 +00:00
Mark Andrews
51c9119e6d 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-27 01:46:22 +00:00
Automatic Updater
4db9faf40e update copyright notice 2011-05-26 23:45:12 +00:00
Evan Hunt
37739b94dd 3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
2011-05-26 23:13:38 +00:00
Automatic Updater
d59ca75cd5 update copyright notice 2011-04-11 23:45:26 +00:00
Evan Hunt
9f3931a5f8 Fixed a use of |= where != was intended. (Fortunately with no ill effects.) 2011-04-11 21:11:01 +00:00
Mark Andrews
e4da0ac6e2 9.4-ESV-R5b1 2011-04-08 06:15:03 +00:00
Automatic Updater
366407af39 update copyright notice 2011-04-06 23:45:16 +00:00
Mark Andrews
902a80de5d 3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
2011-04-06 15:05:24 +00:00
Automatic Updater
7139334653 update copyright notice 2011-03-09 23:45:15 +00:00
Mark Andrews
9414c5bfb2 3065. [bug] RRSIG could have time stamps too far in the future.
[RT #23356]
2011-03-09 07:34:52 +00:00
Mark Andrews
9fe7f5ece7 add 'sync' to ISC_PLATFORM_USEMACASM build as well 2011-03-08 00:49:33 +00:00
Automatic Updater
1b19bd1e91 update copyright notice 2011-03-07 23:45:29 +00:00
Mark Andrews
aff9352637 3064. [bug] powerpc: add sync instructions to the end of atomic
operations. [RT #23469]
2011-03-07 00:34:20 +00:00
Automatic Updater
864efed762 update copyright notice 2011-03-05 23:47:52 +00:00
Scott Mann
c335ad72b8 Ensure that log files are plain files. (RT #22771) 2011-03-04 17:12:20 +00:00
Automatic Updater
6c4933f959 update copyright notice 2011-03-02 23:45:32 +00:00
Mark Andrews
b1be6b9273 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:41:36 +00:00
Automatic Updater
11b8a4afdf update copyright notice 2011-02-27 23:45:16 +00:00
Mark Andrews
920650f048 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 13:15:39 +00:00
Automatic Updater
50e9e87f65 update copyright notice 2011-01-27 23:45:12 +00:00
Mark Andrews
2531ef9979 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:32:52 +00:00
Automatic Updater
aa0a56c62d update copyright notice 2011-01-14 23:45:15 +00:00
Mark Andrews
dcb696583a silence re-defininition warnings 2011-01-14 05:46:14 +00:00
Automatic Updater
576cae3b1e update copyright notice 2011-01-13 04:47:42 +00:00
Mark Andrews
ba185c8215 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 02:18:29 +00:00
Automatic Updater
13cbaca1a7 update copyright notice 2010-12-22 23:45:17 +00:00
Mark Andrews
ada39963fd 2996. [security] Temporarily disable SO_ACCEPTFILTER support.
[RT #22589]
2010-12-22 03:35:21 +00:00
Mark Andrews
4ff8895925 9.4-ESV-R4 2010-11-18 01:34:51 +00:00
Automatic Updater
1dfb563662 update copyright notice 2010-11-17 23:45:12 +00:00
Mark Andrews
3a66e0f68c 2786. [bug] Additional could be promoted to answer. [RT #20663] 2010-11-17 10:21:02 +00:00
Automatic Updater
09065d8286 update copyright notice 2010-11-16 23:45:24 +00:00
Mark Andrews
b78658f143 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 08:01:09 +00:00
Mark Andrews
a407ead333 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]

Had to adjust the test to use RSAMD5 -> RSASH1 as we need to use algorithms
supported by 9.4.
2010-11-16 04:17:44 +00:00
Automatic Updater
98172e6c3f update copyright notice 2010-10-18 23:45:45 +00:00
Mark Andrews
b35d42c270 2966. [bug] isc_print_vsnprintf() failed to check if there was
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
2010-10-18 04:08:02 +00:00
Mark Andrews
e96e6e8077 9.4-ESV-R3 2010-09-02 07:27:40 +00:00
Mark Andrews
43a1ec8d9f 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
[RT #20877]
2010-09-02 07:21:53 +00:00