Commit graph

5424 commits

Author SHA1 Message Date
Evan Hunt
78ba74e63d remove spurious newlines in zone.c logging
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
2012-08-16 10:41:09 -07:00
Mark Andrews
1bbd36c4db 3364. [security] Named could die on specially crafted record.
[RT #30416]
2012-08-16 09:42:14 +10:00
Mark Andrews
4e8090f1c1 test against unsigned zero 2012-08-14 14:31:51 +10:00
Tinderbox User
953692fa1e update copyright notice 2012-07-25 23:46:04 +00:00
ckb
e7857b5ee0 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
2012-07-25 17:06:34 -05:00
Mark Andrews
1495117889 cast mode to unsigned int for fprintf 2012-07-24 12:58:04 +10:00
Mark Andrews
2634750ce5 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2012-07-24 12:18:43 +10:00
Mark Andrews
1d2f282840 cleanup unused variables 2012-07-24 12:18:10 +10:00
Tinderbox User
0b637179cc update copyright notice 2012-07-23 23:46:06 +00:00
Mark Andrews
6eb6af6732 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:08:21 +10:00
Mark Andrews
13518a9636 windows fixes 2012-07-20 18:08:28 +10:00
Mark Andrews
c965b18690 3353. [bug] Use a single task for task exclusive operations.
[RT #29872]
2012-07-19 23:00:21 +10:00
Mark Andrews
ee2f98d5cf 3352. [bug] Ensure that learned server attributes timeout of the
adb cache. [RT #29856]
2012-07-18 14:16:37 +10:00
ckb
ad7fdba1ed 3348. [security] prevent RRSIG data from being cached if a negative
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well.
2012-07-09 12:51:11 -05:00
Evan Hunt
4476b98f89 missed out a variable declaration 2012-07-05 17:18:22 -07:00
ckb
c514f38c80 Conflicts:
lib/dns/dst_parse.c
	lib/isc/win32/file.c
2012-07-05 16:07:31 -05:00
Evan Hunt
cdd271b14a fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:01:48 -07:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
da5d53fb14 update copyright notice 2012-06-26 23:45:56 +00:00
Mark Andrews
c41c261fc7 3342. [bug] Change #3314 broke saving of stub zones to disk
resulting in excessive cpu usage in some cases.
                        [RT #29952]
2012-06-27 09:21:09 +10:00
Tinderbox User
6d5f928b26 update copyright notice 2012-06-25 23:46:00 +00:00
Mark Andrews
ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
2012-06-25 13:57:32 +10:00
Mark Andrews
171d2c23f1 remove 'inline' on dns_rbt_serialize_align 2012-06-25 08:14:34 +10:00
Mark Andrews
abeb649619 check fwrite results 2012-06-23 18:21:52 +10:00
Mark Andrews
d70f7b9e46 change type of where to uintptr_t 2012-06-23 18:06:33 +10:00
Mark Andrews
aeed8b4d3b change offset type to long 2012-06-23 18:02:13 +10:00
Tinderbox User
3b398443f0 update copyright notice 2012-06-21 23:46:36 +00:00
Tinderbox User
620620df3a silence pointer/int conversion warnings using uintptr_t, since we are using stdio file offsets are longs 2012-06-22 07:37:09 +10:00
Evan Hunt
5506903c92 Merge rt28412b
- check for mmap() in configure
- implement isc_file_mmap() and isc_file_munmap() to do
  malloc()/read() and free() when run on systems that do not
  support mmap().
2012-06-21 12:58:46 -07:00
Tinderbox User
8e6b386ab7 update copyright notice 2012-06-20 23:46:40 +00:00
ckb
5f5f8b1dd4 removed .cvsignore files 2012-06-20 14:23:12 -05:00
ckb
7829fad409 merging fast format zone files
Conflicts:
	.gitignore
	bin/named/zoneconf.c
	bin/tests/.gitignore
	bin/tests/system/autosign/tests.sh
	bin/tests/system/masterformat/clean.sh
	bin/tests/system/masterformat/ns1/compile.sh
	bin/tests/system/masterformat/tests.sh
	configure
	lib/dns/db.c
	lib/dns/include/dns/db.h
	lib/dns/include/dns/types.h
	lib/dns/master.c
	lib/dns/masterdump.c
	lib/dns/rbt.c
	lib/dns/rbtdb.c
	lib/dns/sdb.c
	lib/dns/sdlz.c
	lib/dns/tests/.cvsignore
	lib/dns/tests/Makefile.in
	lib/dns/win32/libdns.def
	lib/dns/xfrin.c
	lib/dns/zone.c
	lib/export/dns/Makefile.in
	lib/isc/include/isc/file.h
	lib/isc/unix/file.c
	lib/isc/win32/file.c
	lib/isccfg/namedconf.c
2012-06-20 14:13:12 -05:00
Tinderbox User
ef1963d83d update copyright notice 2012-06-15 23:45:49 +00:00
Mark Andrews
ec048f4600 make maxbits signed as BN_num_bits is signed 2012-06-15 11:54:58 +10:00
Mark Andrews
7865ea9545 3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228] 2012-06-14 15:44:20 +10:00
Mark Andrews
57f1d800f8 3338. [bug] Address race condition in units tests: asyncload_zone
and asyncload_zt. [RT #26100]
2012-06-14 15:13:44 +10:00
Tinderbox User
8ce1923429 update copyright notice 2012-06-08 23:45:57 +00:00
Mark Andrews
80fa3ef851 3336. [func] Maintain statistics for RRsets tagged as "stale".
[RT #29514]
2012-06-08 16:32:44 +10:00
Mark Andrews
109ebcc980 3334. [bug] Hold a zone table reference while performing a
asyncronous load of a zone. [RT #28326]
2012-06-08 13:52:13 +10:00
Mark Andrews
7310c0b1ee 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:34:33 +10:00
Mark Andrews
a0c1fa2a8f 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:51:11 +10:00
Mark Andrews
735ca24fa6 3321. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644]
2012-06-01 23:33:16 +10:00
Tinderbox User
7a440c4300 update copyright notice 2012-05-31 23:46:01 +00:00
Vernon Schryver
afaa290bb6 Squashed commit of the following:
commit aea73609ac5d41ed091360e94370798965f28f05
commit eef7f44c57a060b24a426eb8888e16176a0a69b1
commit a88a26d864ad399fa2d40e3b9659b4d26f454ca1
commit 1b90d59568e7e3b65690c6bd075cf4d60b03e454
Merge: 74d8f73 cd02924
commit 74d8f73ed553bb64a305e284905762f7ff0029aa
commit 9a59ef6bbd4befe91e5691e8b85afe1cb7ab0706
commit c63606a53b4f1bb7066b37d3cfe588e9dc21a119
commit 2c392a840c8838455d144ce163bd873bee400c97
commit 0241f53563e6e7bed462a883d98a8931f01e0980
commit 79fe22b5d6f04bdaa3073cf54d41952194e879e1
commit 351b3049625f2edd39729dd85413e961b97d4b3b
commit 7207674fc77c9a10d84c0cb94e36d1c09bb31459
commit 543ad34cf08f901c20b438c9d2f45482cff13d5e
commit fc45b99ce4438627fdcbeb4365695ba0065fa46f
commit c425207f57e0a5157372aa7edbb79b13170563e5
commit ef8c5e23ca284e0ea02f69ce1f356d537c19d93b
commit ba0d4e3aa51efe412cfa1d031651f949442d1802
commit 41c7969c7cb6884b93011f7ace3fd9522efc021e
  and more from CVS

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
2012-05-31 02:03:34 +00:00
Mark Andrews
e8e0a46925 silence warnings from clang 2012-05-30 11:52:02 +10:00
Mark Andrews
cf751b1c9b don't insist that rbtdb->cachestats exists. 2012-05-18 15:19:49 +10:00
Tinderbox User
a847a4bcd6 update copyright notice 2012-05-17 23:46:03 +00:00
Evan Hunt
26833735d3 Handle RRSIG signer case consistently
3329.	[bug]		Handle RRSIG signer-name case consistently: We
			generate RRSIG records with the signer-name in
			lower case.  We accept them with any case, but if
			they fail to validate, we try again in lower case.
			[RT #27451]
2012-05-17 10:44:16 -07:00