upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-26 11:32:01 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
25079 commits 18 branches 854 tags 440 MiB
Commit graph

10345 commits

Author SHA1 Message Date
Mark Andrews
f8eb4e5bfd 4037. [bug] also-notify was ignoring the tsig key when checking 
for duplicates resulting in some expected notify
                        messages not being sent. [RT #38369]
 2015-01-20 16:42:56 +11:00
Evan Hunt
59c489552d [master] remove a potentially misleading log message 2015-01-19 20:15:01 -08:00
Tinderbox User
b624001e36 update copyright notice / whitespace 2015-01-16 23:45:22 +00:00
Mukund Sivaraman
b05a50c852 Make call to open a temporary file name safe during NZF creation (#38331) 
Based on a patch sent in by Tony Finch <dot@dotat.at>.

Also fix win32 implementation of isc_file_openunique() to use a random
filename instead of using the process id.
 2015-01-16 18:29:23 +05:30
Tinderbox User
2dd6ffb5cb update copyright notice / whitespace 2015-01-12 23:45:21 +00:00
Mukund Sivaraman
4716d844c4 Add missing symbols to libdns.def.in 2015-01-12 09:55:56 +05:30
Mukund Sivaraman
a6f0e9c985 Add NTA persistence (#37087) 
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
 2015-01-12 09:07:48 +05:30
Tinderbox User
f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Mark Andrews
f4dda9cf28 4033. [bug] Missing out of memory check in request.c:req_send. 
[RT #38311]
 2015-01-11 09:24:33 +11:00
Evan Hunt
4b52ac401d [master] remove unhelpful comment, revise change note 
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
 2015-01-10 00:17:57 -08:00
Tinderbox User
63b0524b96 update copyright notice / whitespace 2015-01-08 23:45:22 +00:00
Mark Andrews
d1f1f13c7f 4031. [bug] named-checkconf -z failed to report a missing file 
with a hint zone. [RT #38294]
 2015-01-08 19:19:12 +11:00
Tinderbox User
b129f72d95 update copyright notice / whitespace 2015-01-07 23:45:22 +00:00
Evan Hunt
f784ce7523 [master] add missing functions 2015-01-07 00:22:31 -08:00
Evan Hunt
74eb2f5cbc [master] rndc showzone / rndc delzone of non-added zones 
4030.	[func]		"rndc delzone" is now applicable to zones that were
			configured in named.conf, as well as zones that
			were added via "rndc addzone". (Note, however, that
			if named.conf is not also modified, the deleted zone
			will return when named is reloaded.) [RT #37887]

4029.	[func]		"rndc showzone" displays the current configuration
			of a specified zone. [RT #37887]
 2015-01-06 22:57:57 -08:00
Tinderbox User
651c5a50f4 update copyright notice / whitespace 2015-01-06 23:45:23 +00:00
Mark Andrews
b0c18fffd3 4028. [bug] $GENERATE with a zero step was not being caught as a 
error.  A $GENERATE with a / but no step was not being
                        caught as a error. [RT #38262]
 2015-01-06 11:31:34 +11:00
Tinderbox User
055f6517b4 update copyright notice / whitespace 2014-12-19 23:45:22 +00:00
Mark Andrews
d8f2dd46cb 4025. [port] bsdi: failed to build. [RT #38047] 2014-12-19 12:06:35 +11:00
Mark Andrews
1e0ed0c6f5 4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next, 
dns_rdata_opt_current, dns_rdata_txt_first,
                        dns_rdata_txt_next and dns_rdata_txt_current were
                        documented but not implemented.  These have now been
                        implemented.

                        dns_rdata_spf_first, dns_rdata_spf_next and
                        dns_rdata_spf_current were document but not
                        implemented.  The prototypes for these
                        functions have been removed. [RT #38068]

4023.   [bug]           win32: socket handling with explict ports and
                        invoking named with -4 was broken for some
                        configurations. [RT #38068]
 2014-12-19 11:35:07 +11:00
Mukund Sivaraman
47d837a499 Make named a singleton process [RT#37908] 
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
 2014-12-18 12:31:25 +05:30
Evan Hunt
9fcbc46062 [master] more missing entry points 2014-12-16 14:40:33 -08:00
Evan Hunt
fc12d18471 [master] typos 2014-12-16 12:42:05 -08:00
Evan Hunt
25ee607cf5 [master] add more missing entry points 2014-12-16 12:09:09 -08:00
Mark Andrews
eb690e00e7 add missing entry points 2014-12-17 00:27:17 +11:00
Mark Andrews
2efb444806 add missing entry points 2014-12-16 23:46:15 +11:00
Mark Andrews
f5c22df82b win32 build 2014-12-16 23:36:44 +11:00
Evan Hunt
be7fba8019 [master] adjust max-recursion-queries 
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]
 2014-12-15 22:28:06 -08:00
Mark Andrews
132410d33f add/sort 2014-12-16 14:49:17 +11:00
Mark Andrews
7799a5edea add missing entries 2014-12-16 14:41:25 +11:00
Mark Andrews
2e98ab2c9d remove non null check 2014-12-09 19:51:32 +11:00
Mark Andrews
017aa9aef6 4019. [func] If named is not configured to validate the answer 
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
 2014-12-05 17:47:26 +11:00
Mark Andrews
ea3aa401bc 4015. [bug] Nameservers that are skipped due to them being 
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]
 2014-12-03 11:34:07 +11:00
Mark Andrews
6444de08d1 4014. [bug] When including a master file origin_changed was 
not being properly set leading to a potentially
                        spurious 'inherited owner' warning. [RT #37919]
 2014-12-03 09:42:30 +11:00
Francis Dupont
5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Francis Dupont
fc63119c8b Hardened OpenSSL digest/HMAC calls [RT #37944] 2014-12-02 12:41:01 +01:00
Mark Andrews
401f7510d7 use the actual header 2014-11-28 19:17:26 +11:00
Mark Andrews
7554ff1619 add #define rdataset_clearprefetch rdataset_clearprefetch64 2014-11-25 12:06:23 +11:00
Tinderbox User
523ad879ce update copyright notice / whitespace 2014-11-24 23:53:16 +00:00
Mark Andrews
092d3b76db 4010. [cleanup] Clear the prefetchable state when initiating a prefetch. 
[RT #37399]
 2014-11-24 11:18:30 +11:00
Evan Hunt
92384667ff [master] delv +tcp 
4009.	[func]		delv: added a +tcp option. [RT #37855]
 2014-11-21 09:42:04 -08:00
Mark Andrews
70bceacc80 silence signed/unsigned warning 2014-11-21 20:28:17 +11:00
Evan Hunt
3e5b4176d8 [master] win32 build fix 2014-11-20 15:55:43 -08:00
Evan Hunt
c6b699b58e [master] remove inadvertently-retained content from quota.h 2014-11-20 12:55:01 -08:00
Evan Hunt
05e448935c [master] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.
 2014-11-19 18:21:02 -08:00
Evan Hunt
c4f54e5bd1 [master] add max-recursion-queries 
also fixes and documentation for max-recursion-depth
 2014-11-18 22:02:02 -08:00
Evan Hunt
3230429e17 [master] limit recursion depth and iterative queries 
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
 2014-11-17 23:24:44 -08:00
Evan Hunt
c325ff9c79 [master] complete coverity fixes 2014-11-17 17:39:00 -08:00
Mark Andrews
4ac862fa96 only execute additional tests if create call succeeds 2014-11-18 12:19:37 +11:00
Evan Hunt
a0b4f6d952 [master] geoip security fixes 
4003.	[security]	When geoip-directory was reconfigured during
			named run-time, the previously loaded GeoIP
			data could remain, potentially causing wrong
			ACLs to be used or wrong results to be served
			based on geolocation. [RT #37720]

4002.	[security]	Lookups in GeoIP databases that were not
			loaded could cause an assertion failure.
			[RT #37679]

4001.	[security]	The caching of GeoIP lookups did not always
			handle address families correctly, potentially
			resulting in an assertion failure. [RT #37672]
 2014-11-16 08:43:22 -08:00
Tinderbox User
aee6c351d3 update copyright notice 2014-11-15 23:45:22 +00:00
Evan Hunt
63fb92c1ba [master] fix false positive compiler warning 
a "pointer always evaluates to true" warning was blocking
compilation of the radix ATF test when using --enable-developer
with gcc 4.8.2.
 2014-11-15 00:56:30 -08:00
Evan Hunt
907e01d6f3 [master] buffer ATF test was failing 2014-11-15 00:56:17 -08:00
Evan Hunt
e32d354f75 [master] allow arbitrary-size rndc output 
4005.	[func]		The buffer used for returning text from rndc
			commands is now dynamically resizable, allowing
			arbitrarily large amounts of text to be sent back
			to the client. (Prior to this change, it was
			possible for the output of "rndc tsig-list" to be
			truncated.) [RT #37731]
 2014-11-14 15:58:54 -08:00
Evan Hunt
c4abb19716 [master] reference leak with AAAA glue but not A 
4004.	[bug]		When delegations had AAAA glue but not A, a
			reference could be leaked causing an assertion
			failure on shutdown. [RT #37796]
 2014-11-14 09:02:28 -08:00
Mukund Sivaraman
a3157f3c75 [master] close() fd when done (Coverity report) 2014-11-11 07:15:02 +05:30
Evan Hunt
fadf7291df [master] check creat() return 2014-11-10 17:30:58 -08:00
Tinderbox User
6d0a639bd0 update copyright notice 2014-11-06 23:45:21 +00:00
Evan Hunt
067c0c38e7 [master] s/mempcy/memmove/ 2014-11-06 13:01:59 -08:00
Mark Andrews
8f0cf84bb1 set working directory; #include <string.h> 2014-11-06 18:02:32 +11:00
Tinderbox User
d478dbae80 update copyright notice 2014-11-05 23:45:20 +00:00
Evan Hunt
ad9645512c [master] add print.h 2014-11-04 20:43:41 -08:00
Evan Hunt
ce96d4326c [master] new mkeys and nzf naming format 
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
 2014-11-04 19:43:27 -08:00
Tinderbox User
5781d00939 update copyright notice 2014-11-04 23:45:20 +00:00
Mark Andrews
a31d0513c3 add missing opening bracket 2014-11-04 17:02:32 +11:00
Mark Andrews
b976c39c07 3998. [bug] isc_radix_search was returning matches that were 
to precise. [RT #37680]
 2014-11-04 12:34:12 +11:00
Mark Andrews
1feee79e1f 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:24:39 +11:00
Tinderbox User
03fc2ff527 update copyright notice 2014-10-31 23:45:23 +00:00
Mark Andrews
c2f8108123 3996. [bug] Address use after free on out of memory error in 
keyring_add. [RT #37639]
 2014-10-31 11:44:09 +11:00
Mark Andrews
4e59131f18 3995. [bug] receive_secure_serial holds the zone lock for too 
long. [RT #37626]
 2014-10-31 11:38:14 +11:00
Mark Andrews
00fb0253c9 3991. [func] Add the ability to buffer logging output by specifying 
"buffered yes;" when defining a channel. [RT #26561]
 2014-10-30 11:37:05 +11:00
Mark Andrews
eb5243365c 3989. [cleanup] Remove redundent dns_db_resigned calls. [RT #35748] 2014-10-30 10:53:12 +11:00
Mark Andrews
bad93fb90c missing comma 2014-10-28 16:10:49 +11:00
Tinderbox User
6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Francis Dupont
4d6329c1b3 Handle VS14 incompatible changes [RT #37380] 2014-10-21 09:34:33 +02:00
Mark Andrews
4140a96f22 3987. [func] Allow the zone serial of a dynamically updatable 
zone to be updated via rndc. [RT #37404]
 2014-10-21 18:15:42 +11:00
Francis Dupont
7fbfa379e2 Accept up to 256 byte PINs in native PKCS#11. [RT #37410] 2014-10-20 22:55:40 +02:00
Evan Hunt
498b061031 [master] allow 1-week nta-lifetime/nta-recheck 
3983.	[bug]		Change #3940 was incomplete: negative trust anchors
			could be set to last up to a week, but the
			"nta-lifetime" and "nta-recheck" options were
			still limted to one day. [RT #37522]
 2014-10-20 13:40:17 -07:00
Mark Andrews
72775a79fe 3981. [bug] Cache DS/NXDOMAIN independently of other query types. 
[RT #37467]
 2014-10-18 13:09:09 +11:00
Mark Andrews
871f3c8bee 3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF 
size. [RT #37187]
 2014-10-18 12:40:13 +11:00
Mark Andrews
48f97c23b7 3979. [bug] Negative trust anchor fetches where not properly 
managed. [RT #37488]
 2014-10-18 10:07:24 +11:00
Evan Hunt
188690149b [master] add diffie-hellman key unit test 
3978.	[test]		Added a unit test for Diffie-Hellman key
			computation, completing change #3974. [RT #37477]
 2014-10-17 15:55:37 -07:00
Evan Hunt
eb6d61d5e0 [master] correctly validate 5011 trust anchors 
3976.	[bug]		When refreshing managed-key trust anchors, clear
			any cached trust so that they will always be
			revalidated with the current set of secure
			roots. [RT #37506]
 2014-10-17 15:40:07 -07:00
Tinderbox User
28b2fddfd4 update copyright notice 2014-10-16 23:45:23 +00:00
Mark Andrews
ca77632f65 initialize rdataset->private7 2014-10-16 11:23:01 +11:00
Mark Andrews
58a1051e92 3974. [bug] handle DH_compute_key() failure correctly in 
openssldh_link.c. [RT #37477]
 2014-10-13 23:41:36 +11:00
Evan Hunt
34cb27055a [master] install badcache.h 2014-10-08 19:42:48 -07:00
Francis Dupont
1831311ac6 added hooks for gperftools CPU profiler [#37339] 2014-10-08 15:14:02 +02:00
Mark Andrews
bbec761a67 silence compiler warning 2014-10-08 17:47:46 +11:00
Tinderbox User
d1573beb05 update copyright notice 2014-10-04 23:45:22 +00:00
Mark Andrews
c81d56c03e 3971. [bug] Reduce the cascasding failures due to a bad $TTL line 
in named-checkconf / named-checkzone. [RT #37138]
 2014-10-05 08:29:34 +11:00
Tinderbox User
7a3f584cfc update copyright notice 2014-10-02 23:45:25 +00:00
Mark Andrews
9c0589bc8b 3966. [bug] Missing dns_db_closeversion call in receive_secure_db. 
[RT #35746]
 2014-10-03 07:50:09 +10:00
Mark Andrews
dda69168ea 3965. [func] Log outgoing packets and improve packet logging to 
support logging the remote address. [RT #36624]
 2014-10-02 09:40:11 +10:00
Mark Andrews
ed1c845c1d 3964. [func] nsupdate now performs check-names processing. 
[RT #36266]
 2014-10-02 09:35:43 +10:00
Tinderbox User
be484acb22 update copyright notice 2014-09-30 23:45:22 +00:00
Mark Andrews
ffeaac1d82 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with 
BADSIG.  [RT #37216]
 2014-10-01 07:24:16 +10:00
Mark Andrews
fa827173df 3959. [bug] Updates could be lost if they arrived immediately 
after a rndc thaw. [RT #37233]
 2014-10-01 06:59:19 +10:00
Tinderbox User
2fb35a6d59 update copyright notice 2014-09-29 23:45:24 +00:00
Mark Andrews
1c5990c2f9 3958. [bug] Detect when writeable files have multiple references 
in named.conf. [RT #37172]
 2014-09-29 12:10:10 +10:00
Mark Andrews
80169c379d 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 
and ECDSAP384SHA384. [RT #37183]
 2014-09-29 10:18:54 +10:00
Mark Andrews
10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Mark Andrews
4b92bc0022 don't redefine GEOIP_DATA 2014-09-29 09:33:24 +10:00
Tinderbox User
e64f32cd04 update copyright notice 2014-09-27 23:45:22 +00:00
Mark Andrews
9a36fb86f5 3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159] 2014-09-27 12:14:20 +10:00
Mark Andrews
a266ab205b 3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the 
two name pointers were the same. [RT #37176]
 2014-09-27 11:41:44 +10:00
Evan Hunt
6896fdd3b2 [master] spelling 2014-09-15 18:18:12 -07:00
Mark Andrews
48b093c864 update named-checkzone manpage for SPF changes 2014-09-13 07:55:57 +10:00
Mark Andrews
1bf72e5325 silence compiler warning 2014-09-11 13:34:17 +10:00
Mark Andrews
947cf282a7 3949. [experimental] Experimental support for draft-andrews-edns1 by sending 
EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
                        building).  Add support for limiting the EDNS version
                        advertised to servers: server { edns-version 0; };
                        Log the EDNS version received in the query log.
                        [RT #35864]
 2014-09-10 15:31:40 +10:00
Mark Andrews
52131a8351 3948. [port] solaris: RCVBUFSIZE was too large on Solaris with 
--with-tuning=large. [RT #37059]
 2014-09-09 09:41:55 +10:00
Mark Andrews
2b703026f3 check isc_mutext_init and destoy mutex when done 2014-09-07 08:24:36 +10:00
Mark Andrews
8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Tinderbox User
5fa6a064b8 regen master 2014-09-05 19:26:47 +00:00
Evan Hunt
f687e639f0 [master] [rt36786] use INSTALL_PROGRAM for shared libs 
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]
 2014-09-05 10:24:20 -07:00
Mark Andrews
2fa1fc5332 3945. [bug] Invalid wildcard expansions could be incorrectly 
accepted by the validator. [RT #37093]
 2014-09-05 12:10:55 +10:00
Mark Andrews
06dbd20c66 move declaration to start of block 2014-09-05 11:39:42 +10:00
Tinderbox User
948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981 [master] servfail cache 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
 2014-09-03 23:28:14 -07:00
Mark Andrews
3560b7d66c move declaration to start of block 2014-09-04 14:20:25 +10:00
Mark Andrews
fec7998314 3942. [bug] Wildcard responses from a optout range should be 
marked as insecure. [RT #37072]
 2014-09-04 13:57:50 +10:00
Mark Andrews
74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP 
connections to be shared. [RT #37039]
 2014-09-04 10:37:45 +10:00
Mark Andrews
92a649d814 complete conversion to FCTXTRACE3 2014-08-30 20:37:20 +10:00
Mark Andrews
1a63fb1d14 update copyrights 2014-08-30 12:27:49 +10:00
Tinderbox User
3278ff814d update copyright notice 2014-08-29 23:45:22 +00:00
Evan Hunt
f5c24a7f48 [master] add better servfail logging 
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]
 2014-08-28 22:37:55 -07:00
Evan Hunt
d46855caed [master] ECS authoritative support 
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
 2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching 
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
 2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve 
sit-secrets documentation. [RT #36980]
 2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36 [master] fixes to checkconf test, HIP casecompare 
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]
 2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879] 2014-08-26 15:01:29 +10:00
Mark Andrews
be5d42f255 dlz clauses are not inheritable 2014-08-25 14:52:01 +10:00
Evan Hunt
27d6642e8b [master] complete change #3925 
- don't use fwdname in dns_view_findzonecut()
 2014-08-22 14:57:30 -07:00
Mark Andrews
840d6a4614 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917 2014-08-22 16:32:19 +10:00
Tinderbox User
a24330c480 regen master 2014-08-16 01:06:20 +00:00
Mark Andrews
15a885dfc6 remove duplicate request-ixfr rt36878 
(cherry picked from commit 0a484c39fc)
 2014-08-16 08:51:20 +10:00
Jeremy C. Reed
821350367e fix typos or misspellings 2014-08-15 10:35:31 -05:00
Mark Andrews
291c0dfbc9 remove redundant isc_sockaddr_format call 2014-08-08 21:27:35 +10:00
Tinderbox User
cd14665cdf update copyright notice 2014-08-07 23:45:19 +00:00
Evan Hunt
91e7faa874 [master] win32 sockets don't support dscp 2014-08-06 21:35:49 -07:00
Evan Hunt
89f3d83d7e [master] files missing for win32 build 2014-08-06 20:51:04 -07:00
Evan Hunt
ef1ba8ffa7 [master] need local strlcpy() in VS2005 2014-08-06 19:57:04 -07:00
Tinderbox User
6cdcc9df5b update copyright notice 2014-08-07 01:14:24 +00:00
Evan Hunt
cfe32752a6 [master] [36737] allow zero-length URI and CAA fields 
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]
 2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07 update copyright notice 2014-08-06 23:45:23 +00:00
Mark Andrews
493f3eb297 3913. [bug] Address race issue in dispatch. [RT #36731] 2014-08-06 18:49:53 +10:00
Evan Hunt
338a89339a [master] install new include file 2014-08-05 22:11:17 -07:00
Evan Hunt
a6ad80dd08 [master] make lwres/stdlib.h and lwres/string.h instead of compat.h 2014-08-05 22:01:06 -07:00
Mark Andrews
c5734964e6 3912. [bug] Address some unrecoverable lookup failures. [RT #36330] 2014-08-06 14:18:04 +10:00
Mark Andrews
f38a398033 silence signed/unsigned comparision warning 2014-08-06 12:25:03 +10:00
Mark Andrews
b47839a675 alphabetize zone_clauses 2014-08-06 11:54:54 +10:00
Mark Andrews
43b9737b11 3911. [func] Implement EDNS EXPIRE option client side. [RT #35925] 2014-08-06 11:50:40 +10:00
Mukund Sivaraman
a338c2d947 [36720] Free event early (fixes race to free) 
Patch contributed by yhu2 <yadi.hu@windriver.com>.
 2014-08-05 17:08:14 +05:30
Mark Andrews
3e90f6c373 3910. [bug] When computing the number of elements required for a 
acl count_acl_elements could have a short count leading
                        to a assertion failure.  Also zero out new acl elements
                        in dns_acl_merge.  [RT #36675]
 2014-08-03 10:05:02 +10:00
Tinderbox User
79bb509936 update copyright notice 2014-08-02 23:45:21 +00:00
Mark Andrews
c38341ec43 3908. [bug] rndc now differentiates between a zone in multiple 
views and a zone that doesn't exist at all. [RT #36691]
 2014-08-02 14:43:26 +10:00
Tinderbox User
25633bca23 update copyright notice 2014-07-31 23:45:21 +00:00
Evan Hunt
7712d1660a [master] [rt36642] fix URI RR format 
3906.	[protocol]	Update URI record format to comply with
			draft-faltstrom-uri-08. [RT #36642]
 2014-07-30 20:41:59 -07:00
Mark Andrews
b04839cfe2 [rt36341] 
3905.   [bug]           Address deadlock between view.c and adb.c. [RT #36341]
 2014-07-31 11:38:11 +10:00
Mark Andrews
3a55d43527 3904. [func] Add the RPZ SOA to the additional section. [RT36507] 2014-07-31 10:51:48 +10:00
Mark Andrews
a04588e781 update copyrights 2014-07-31 09:47:00 +10:00
Mark Andrews
1e5fd07d16 #include print_p.h 2014-07-31 00:26:21 +10:00
Mark Andrews
70be388974 [rt36039] 
3902.   bug]            liblwres wasn't handling link-local addresses in
                        nameserver clauses in resolv.conf. [RT #36039]
 2014-07-30 23:26:37 +10:00
Tinderbox User
d1b499c827 update copyright notice 2014-07-29 23:45:20 +00:00
Evan Hunt
c1e42fa06d [master] use correct length 2014-07-29 15:24:39 -07:00
Evan Hunt
2383eb5272 [master] add CAA rdata support 
3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]
 2014-07-29 08:40:35 -07:00
Mark Andrews
275a8affe7 3899. [bug] "request-ixfr" is only applicable to slave and redirect 
zones. [RT #36608]
 2014-07-25 14:23:14 +10:00
Mark Andrews
bc4006c0d3 alphabetize optionstable 2014-07-22 14:14:55 +10:00
Mark Andrews
0e50e50206 alphabetize server_clauses 2014-07-22 14:00:27 +10:00
Mark Andrews
6a6838f973 3898. [bug] To small a buffer in tohexstr() calls in test code. 
[RT #36598]
 2014-07-22 11:26:28 +10:00
Mark Andrews
ac5ed74860 3897. [bug] RPZ summary information was not properly being updated 
after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]
 2014-07-22 10:57:58 +10:00
Mark Andrews
a1dee90bfb adjust INSIST now that dev->dscp is unsigned 2014-07-19 11:56:23 +10:00
Mark Andrews
044c780437 silence coverity, explicitly ignore dns_peer_gettransferdscp result 2014-07-18 12:55:04 +10:00
Mark Andrews
89cf81b462 3896. [bug] Address performance issues with DSCP code on some 
platforms. [RT #36534]
 2014-07-18 11:40:44 +10:00
Mark Andrews
2e6d7a724a silence "Value stored to 'length' is never read" by removing assignment 2014-07-17 09:44:57 +10:00
Tinderbox User
b6f7267093 update copyright notice 2014-07-15 23:45:19 +00:00
Mark Andrews
71ec6d0940 3894. [bug] Buffers in isc_print_vsnprintf were not properly 
initialized leading to potential overflows when
                        printing out quad values. [RT #36505]
 2014-07-15 22:53:07 +10:00
Mark Andrews
a920fb9dc2 3893. [bug] Peer DSCP values could be returned without being set. 
[RT #36538]
 2014-07-15 22:40:39 +10:00
Tinderbox User
8a9485517e update copyright notice 2014-07-10 23:45:19 +00:00
Mark Andrews
7eb82402e3 Revert "update description to match code; doxygen fixes" 
This reverts commit 1fc784da63.
 2014-07-10 10:37:10 +10:00
Mark Andrews
9862191c37 update description to match code; doxygen fixes 2014-07-10 10:36:33 +10:00
Mark Andrews
1fc784da63 update description to match code; doxygen fixes 2014-07-10 10:32:54 +10:00
Mark Andrews
dcc7a2738f hold a nta reference while fetching 2014-07-10 10:24:47 +10:00
Mark Andrews
63e1ac1e09 3890. [bug] RRSIG sets that were not loaded in a single transaction 
at start up where not being correctly added to
                        re-signing heaps.  [RT #36302]
 2014-07-07 12:05:01 +10:00
Mark Andrews
769224a8dc state fw_copy is never used; n only needs to be set for fw_ordinary; 
(cherry picked from commit d956d9689c13b093fff5faf6b10f06338354dcfc)
 2014-07-04 08:51:26 +10:00
Mark Andrews
e58154a6ec silence coverity warnings 2014-07-02 15:28:02 +10:00
Mark Andrews
7dbd309799 be consistent about expire time 2014-07-02 14:12:46 +10:00
Mark Andrews
5d63868ad0 DNS_VALIDATOR_NONTA needs passed to sub validator 2014-07-02 14:12:15 +10:00
Mark Andrews
e31a37787b silence coverity - reviewed by Evan over jabber 2014-07-01 09:52:02 +10:00
Mark Andrews
1a03e9eb52 rename closesocket to socketclose to avoid coverity model for window's closesocket 2014-06-26 10:47:48 +10:00
Mark Andrews
33399d6a14 3888. [func] 'rndc status' now reports the number of automatic 
zones. [RT #36015]
 2014-06-25 13:17:03 +10:00
Mark Andrews
65eba0a5a8 add init_count 2014-06-25 12:40:28 +10:00
Mark Andrews
777ea03a92 move definition of FILE_VERSION to after #define of FILE_VERSION 2014-06-25 12:29:15 +10:00
Mark Andrews
c312172e13 more statics that were optimised out 2014-06-25 11:10:25 +10:00
Mark Andrews
c21e9f1a92 add and deserialize are structure element names 2014-06-25 09:45:53 +10:00
Mark Andrews
ef117da205 3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so 
they are easier to use in a debugger. [RT #36373]
 2014-06-25 08:33:37 +10:00
Mark Andrews
d2dc08308f set now on all paths 2014-06-25 00:44:11 +10:00
Mark Andrews
6343df7150 silence signed vs unsigned 2014-06-25 00:19:17 +10:00
Mark Andrews
ba5c73b383 3886. [bug] rbtdb_write_header should use a once to initialize 
FILE_VERSION. [RT #36374]
 2014-06-24 19:58:25 +10:00
Mark Andrews
a421f4458d use isc_time_seconds rather than .seconds 2014-06-23 23:15:19 +10:00
Evan Hunt
4ef06963a4 [master] unresolved externals 2014-06-20 13:51:36 -07:00
Tinderbox User
5a31767b09 update copyright notice 2014-06-19 23:45:23 +00:00
Evan Hunt
cac2181160 [master] CDS/CDNSKEY rrtypes 
3884.	[protocol]	Add CDS and CDNSKEY record types. [RT #36333]
 2014-06-19 00:35:11 -07:00
Mark Andrews
bfbd478cdb silence coverity 2014-06-19 11:33:22 +10:00
Evan Hunt
5e6cfc7c9a [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-06-18 17:25:19 -07:00
Evan Hunt
f47ed4bb4d [master] silence warning 2014-06-18 17:24:48 -07:00
Mark Andrews
3a37159a95 add #include <isc/print.h> 2014-06-19 10:20:34 +10:00
Evan Hunt
b8a9632333 [master] complete NTA work 
3882.	[func]		By default, negative trust anchors will be tested
			periodically to see whether data below them can be
			validated, and if so, they will be allowed to
			expire early. The "rndc nta -force" option
			overrides this behvaior.  The default NTA lifetime
			and the recheck frequency can be configured by the
			"nta-lifetime" and "nta-recheck" options. [RT #36146]
 2014-06-18 16:50:38 -07:00
Mark Andrews
8eb2d262dc silence coverity - add nul termination 2014-06-18 20:04:21 +10:00
Tinderbox User
636aadbfe4 update copyright notice 2014-06-17 23:45:20 +00:00
Evan Hunt
a4e76a630e [master] update gitignore files; use rev-parse to get srcid 2014-06-17 13:49:30 -07:00
Mark Andrews
e177c7b814 add EAI_OVERFLOW to lwres 2014-06-17 10:20:24 +10:00
Tinderbox User
51437e2eea update copyright notice 2014-06-16 23:45:20 +00:00
Evan Hunt
56510cd031 [master] null terminate strings for coverity 2014-06-16 15:30:11 -07:00
Tinderbox User
4ded8003e3 update copyright notice 2014-06-12 23:45:22 +00:00
Evan Hunt
06e0d6bb12 [master] address rpz bugs 
3877.	[bug]		Inserting and deleting parent and child nodes
			in response policy zones could trigger an assertion
			failure. [RT #36272]
 2014-06-11 20:00:19 -07:00
Mark Andrews
1208790272 make lhs unsigned 2014-06-12 11:12:22 +10:00
Mark Andrews
8a2ff13c3d add INSISTs to silence tainted data false positive in Coverity 2014-06-12 10:42:39 +10:00
Tinderbox User
889eb2e055 update copyright notice 2014-06-11 23:45:23 +00:00
Mark Andrews
23fe5cbb07 pass rng to destroy 2014-06-11 22:57:46 +10:00
Mark Andrews
0c57bf16a5 fix unbalanced lock; test for non NULL before dereference; 2014-06-11 21:42:36 +10:00
Evan Hunt
8d8f9f7f86 [master] suppress unnecessary db lookups in DLZ redirect zones 
3876.	[bug]		Improve efficiency of DLZ redirect zones by
			suppressing unnecessary database lookups. [RT #35835]
 2014-06-10 16:25:26 -07:00
Evan Hunt
7c9d11b654 [master] add print.h, CHANGES note 2014-06-10 08:54:16 -07:00
Mukund Sivaraman
aa232396ee [24702] Include key filename in logged message 
Squashed commit of the following:

commit 593e6bc7e29938ff5c2f7508bde303fb069a97a9
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue Jun 10 19:17:40 2014 +0530

    Increase size of filename buffers

commit b8685678e026ba98b8833e26664193b6345eb00e
Author: Evan Hunt <each@isc.org>
Date:   Wed Jun 4 18:57:44 2014 -0700

    [rt24702] some tweaks during review

commit adfbc8f808716c63e9e097d92beef104527e5c6f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed Jun 4 18:18:35 2014 +0530

    [24702] Include key filename in logged message

commit f1eff77e7e3704b145c3d65101a735467dd81dc3
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed Jun 4 18:12:43 2014 +0530

    Add dst_key_getfilename()
 2014-06-10 19:18:34 +05:30
Mark Andrews
5331f97edc silence compiler warnings 2014-06-10 12:38:32 +10:00
Tinderbox User
1b2ae58ef1 update copyright notice 2014-06-09 23:45:20 +00:00
Mark Andrews
3b187cad7a 3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210] 2014-06-10 09:32:43 +10:00
Mark Andrews
b16d99bac1 3872. [bug] Address issues found by static analysis. [RT #36209] 2014-06-10 09:17:15 +10:00
Mukund Sivaraman
5456bddd39 [27303] Supply format string as first arg to printf() 
No CHANGES entry for this as it isn't proved to cause an issue for
anyone (isc_msgcat_get() has to return a format specifier) and isn't a
user visible change.

Squashed commit of the following:

commit bcb15c9aa17b0b706aefd9efef5f7e0e951064a3
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed Jun 4 16:55:16 2014 +0530

    [27303] Supply format string as first arg to printf()

    The old code only had a problem if isc_msgcat_get() returned a format
    specifier (%n).
 2014-06-08 19:06:37 +05:30
Tinderbox User
780169512e update copyright notice 2014-06-04 23:45:22 +00:00
Mukund Sivaraman
79d27f505a [35063] Don't publish an activated key automatically before its publish time 2014-06-04 14:31:42 +05:30
Mukund Sivaraman
84dc4b3e7e [35942] Update random number generator to ChaCha based (and add tests) 
Squashed commit of the following:

commit 219a904fea95c74016229b6f4436d4f09de1bfd0
Author: Evan Hunt <each@isc.org>
Date:   Mon Jun 2 12:20:54 2014 -0700

    [rt35942] style

commit 90bc77185e9798af4595989abb8698efef8c70d7
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 18:01:30 2014 +0530

    Return p-value=0 when prerequisite (monobit) fails

commit 5594669728f1181a447616f60b835e4a043d1b21
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:44:25 2014 +0530

    Print proportion of test sequences passing too

commit 9e94b67a4114651224a8285f7c4a7fb03907f376
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:34:03 2014 +0530

    Check uniform distribution of p-values

commit acf911b32dd84ac1c30c57d8937cfeb6b3ff972f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:17:39 2014 +0530

    Check proportion of sequences passing a test

commit 7289eb441fc4ec623364ad882e22b240ba8da308
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 04:33:37 2014 +0530

    Refactor common setup code into random_test()

    No behavioral change is made.

commit 51feef3e08c233d34a6b8b9d25a72d43110b4eed
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun Jun 1 17:31:57 2014 +0530

    Fix binary rank computation

commit 0ea3c03dea353f309d13c38e26aa0abbffdcff2b
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit eb4e7c53540ac97436d94714d30084907eeff01a
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 1292a06e0e09ebd37d4ecf5337814951dcacc4a4
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 16:21:51 2014 -0700

    [rt35942] style; check whether we need libm for exp()

commit c19788e5a89235e937a5aedf2ebea50f33406609
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 15:31:19 2014 -0700

    [rt35942] incidental spelling error fixed

commit c833326ad0df21e2a8b35958e85ccc0a692e38be
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:34:37 2014 +0530

    Revert "Add function to find rank of a binary matrix"

    This reverts commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb.

    This test will be added in RT#36125.

commit cf786a533d34fdcd9e1c5650356e56d33e93a29f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:33:18 2014 +0530

    Revert "Add binary matrix rank RNG test"

    This reverts commit dd843b9ca84fa9af80ec39631152f82778f0b97c.

    This test will be added in RT#36125.

commit dd843b9ca84fa9af80ec39631152f82778f0b97c
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 313c30088d6ba933bde3abb920f2a6d16b9b77e1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:38:44 2014 +0530

    Add block frequency random test

commit 0d279c60ed3eabe52cf3e1435bf14ec62752536f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:04:03 2014 +0530

    Add preconditions from NIST spec

commit 7a6c5f2ce5078814d5cf0fea30596e58171174c1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 12:51:03 2014 +0530

    Add functions to use in RNG tests

commit 8c5cb5594f904f6669cdffaa364f799b4a2c6b58
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 22 00:26:10 2014 +0530

    Add runs RNG test

commit 4882f078cc2596c0911066ffb783e4dd145a63ec
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:58:20 2014 +0530

    Pre-compute bitcounts LUT

commit 896db3809fba2d9884a4a3a2fa847a73e007ad7f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:30:23 2014 +0530

    Fix the bit value being checked (this shouldn't affect the test)

commit b932cbb5dae39eb819db29cf9490fb51d59b7c56
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 19:35:12 2014 +0530

    Add monobits RNG test

commit 7bef19fd8b095aa567a975ef5c97d5812162d92e
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:53:02 2014 +0530

    Add API documentation

commit 54483f7feb64b5646dd1da45b1fd396e7d04b926
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:39:03 2014 +0530

    Rename isc_rngctx_t to isc_rng_t

commit 7c5031b53555137a82c6b6218cd4dd5e95acf94d
Author: Evan Hunt <each@isc.org>
Date:   Tue May 20 23:29:53 2014 -0700

    [rt35942] use attach/detach with isc_rngctx_t

commit 8aabae5e09888e6af651ed27bd6b4e9f76334d55
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 20 18:32:42 2014 +0530

    Move RNG from dispatch.c to libisc

commit e6d4ad4f389998b91d46e95e258cf420cb21d977
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 12 19:16:27 2014 +0530

    Replace old arc4random with new ChaCha implementation from OpenBSD
 2014-06-04 13:44:10 +05:30
Mark Andrews
b925be3e54 attempt to silence leaked lock false positive 2014-06-04 14:07:16 +10:00
Mark Andrews
7cce33eb78 place a upper bound on rdcount 2014-06-04 13:20:42 +10:00
Mark Andrews
f4db7287da bad size on isc_mem_put 2014-06-04 11:45:09 +10:00
Tinderbox User
6efae581d0 update copyright notice 2014-06-03 23:45:20 +00:00
Mark Andrews
6fc3efb93f keytable depends on openssl/pkcs11 2014-06-03 15:15:19 +10:00
Mark Andrews
50a7454174 3868. [bug] isc_mem_setwater incorrectly cleared hi_called 
potentially leaving over memory cleaner running.
                        [RT #35270]
 2014-06-02 16:31:42 +10:00
Tinderbox User
803d842603 update copyright notice 2014-05-30 23:45:21 +00:00
Evan Hunt
0cfb247368 [master] rndc nta 
3867.	[func]		"rndc nta" can now be used to set a temporary
			negative trust anchor, which disables DNSSEC
			validation below a specified name for a specified
			period of time (not exceeding 24 hours).  This
			can be used when validation for a domain is known
			to be failing due to a configuration error on
			the part of the domain owner rather than a
			spoofing attack. [RT #29358]
 2014-05-29 22:22:53 -07:00
Mark Andrews
536da846f6 update copyrights 2014-05-30 09:41:33 +10:00
Evan Hunt
caa252e5ad [master] Fix bin/tests/rbt_test.c, use portable int types 2014-05-29 07:37:13 -07:00
Mukund Sivaraman
9ff0b976a1 Add missing include 
Reported by tinderbox. It is not required on this developer's machine,
but would be required on platforms that don't supply snprintf().
 2014-05-29 14:04:35 +05:30
Mukund Sivaraman
ce376a81fa [35904] Add various RBT unit tests 
No CHANGES entry was added as this commit mainly adds tests related
code.

Squashed commit of the following:

commit d3d44508daa128fb8b60f64b3a8c81f80602273d
Author: Evan Hunt <each@isc.org>
Date:   Wed May 7 09:36:41 2014 -0700

    [rt35904] remove private non-static names from .def file

commit dbca45661c3939f21c3bb3f405d08cfe1b35d7aa
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 7 21:39:32 2014 +0530

    Remove test for shortcut findnode()

    The implementation was not included in this review branch, but the tests
    erroneously made it through.

    This functionality will be addressed in a different ticket (RT#35906).

commit 94ff14576ab3407f2612d34727b7eacfefc3668c
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 7 21:36:50 2014 +0530

    Minor indent fix

commit 50972f17697bb222996e433faa8224843366f9b2
Author: Evan Hunt <each@isc.org>
Date:   Tue May 6 20:05:21 2014 -0700

    [rt35904] style

commit 5c4d5d41fcc5bfecdeebc008896974385c841b8d
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun May 4 19:19:36 2014 +0530

    RBT related updates

    * Add various RBT unit tests
    * Add some helper methods useful in unit testing RBT code
    * General cleanup
 2014-05-29 11:09:23 +05:30
Mark Andrews
57d5f5abe1 silence coverity warning 2014-05-28 10:43:19 +10:00
Mark Andrews
358cc47a25 address typo 2014-05-27 14:10:12 +10:00
Mark Andrews
586d94eb74 3861. [security] Missing isc_buffer_availablelength check results 
in a REQUIRE assertion when printing out a packet.
                        [RT #36078]
 2014-05-25 12:39:03 +10:00
Mark Andrews
4b22b8decb fix typo == -> = 2014-05-24 23:24:19 +10:00
Mark Andrews
a569e1b321 3860. [bug] ioctl(DP_POLL) array size needs to be determined 
at run time as it is limited to {OPEN_MAX}.
                        [RT #35878]
 2014-05-23 13:05:23 +10:00
Mark Andrews
35711d3c73 correct EDNSOK sense 2014-05-22 22:02:09 +10:00
Mark Andrews
ba586e9568 3857. [bug] Make it harder for a incorrect NOEDNS classification 
to be made. [RT #36020]
 2014-05-22 21:38:53 +10:00
Tinderbox User
9d9626fb77 update copyright notice 2014-05-21 23:45:21 +00:00
Mark Andrews
8d56a8531d remove unused assignment 2014-05-22 00:58:43 +10:00
Mark Andrews
0fe0789181 3855. [bug] Limit smoothed round trip time aging to no more than 
once a second. [RT #32909]
 2014-05-21 10:08:52 +10:00
Mark Andrews
27b09ceb12 3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out 
the handling of a rdataset with no records. [RT #35968]
 2014-05-20 11:36:03 +10:00
Evan Hunt
896f49f8bd [master] increase and allow configuration of lwresd tasks/clients 
3852.	[func]		Increase the default number of clients available
			for servicing lightweight resolver queries, and
			make them configurable via the "lwres-tasks" and
			"lwres-clients" options.  (Thanks to Tomas Hozza.)
			[RT #35857]
 2014-05-15 22:01:19 -07:00
Mark Andrews
0e338b60cd 3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire. 
[RT #35969]

Conflicts:
	CHANGES
 2014-05-13 21:57:40 +10:00
Mark Andrews
e188b84bc4 suppress clang static analysis warning 2014-05-11 10:47:56 +10:00
Tinderbox User
c381ccf794 update copyright notice 2014-05-07 23:45:21 +00:00
Mark Andrews
faa01edd13 3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt. 
[RT #35924]
 2014-05-08 09:38:05 +10:00
Evan Hunt
1ea6e09c37 [master] check for arc4random_addrandom() 
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]
 2014-05-07 08:58:25 -07:00
Mark Andrews
cd07e4d038 3838. [protocol] EDNS EXPIRE as been assigned a code point of 9. 2014-05-05 16:40:45 +10:00
Mark Andrews
b36fc8294e 3837. [security] A NULL pointer is passed to query_prefetch resulting 
a REQUIRE assertion failure when a fetch is actually
                        initiated.  [ RT #35899]

Squashed commit of the following:

commit 7f4e1f3917d743089c42cc52ec2c0eea598d2c00
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun May 4 22:34:34 2014 +0530

    Fix a comment

commit 6a35a6a2346013fa8e3798b9b680d8a3031fcb03
Author: Mark Andrews <marka@isc.org>
Date:   Sun May 4 23:34:25 2014 +1000

    pass the correct name to query_prefetch
 2014-05-05 10:12:12 +10:00
Tinderbox User
abc71f216a update copyright notice 2014-05-02 23:45:19 +00:00
Mark Andrews
dd820d8fd2 3836. [bug] Address C++ keyword usage in header file. 2014-05-02 11:34:32 +10:00
Mark Andrews
c25d9da3f1 add keyboard.h [RT #35887] 2014-05-02 10:19:10 +10:00
Mark Andrews
d26c36b1d9 silence clang compiler warnings 2014-05-02 10:02:27 +10:00
Mark Andrews
3b27d9a318 dec_adbstats should decrement rather than increment 2014-05-01 20:58:32 +10:00
Mark Andrews
c2638d3d5a protect geoip_elem use with HAVE_GEOIP 2014-05-01 15:03:11 +10:00
Mark Andrews
ab02ecbb30 silence compiler warning 2014-05-01 14:55:04 +10:00
Mark Andrews
4442141672 silence NULL pointer dereference warning 2014-05-01 14:23:23 +10:00
Evan Hunt
c0c4512020 [master] fixed geoip elements in named ACLs 
3835.	[bug]		Geoip ACL elements didn't work correctly when
                        referenced via named or nested ACLs. [RT #35879]
 2014-04-30 20:21:56 -07:00
Mark Andrews
c2abd6efeb update copyrights 2014-05-01 10:00:00 +10:00
Mark Andrews
5d739300d1 3834. [bug] The re-signing heaps were not being updated soon enough 
leading to multiple re-generations of the same RRSIG
                        when a zone transfer was in progress. [RT #35273]
 2014-04-30 11:58:07 +10:00
Evan Hunt
2b78610512 [master] reduce EDNS logging noise 
3831.	[cleanup]	Reduce logging noise when EDNS state changes occur.
			[RT #35843]
 2014-04-29 17:06:19 -07:00
Evan Hunt
cd750f6e74 [master] dig +ttlunits 
3829.	[func]		"dig +ttlunits" causes dig to print TTL values
			with time-unit suffixes: w, d, h, m, s for
			weeks, days, hours, minutes, and seconds. (Thanks
			to Tony Finch.) [RT #35823]
 2014-04-29 16:58:36 -07:00
Tinderbox User
f6ea2b1d09 update copyright notice 2014-04-29 23:45:21 +00:00
Evan Hunt
b4ba66ba1e [master] "dnssec-signzone -N date" 
3827.	[func]		"dnssec-signzone -N date" updates serial number
			to the current date in YYYYMMDDNN format.
			[RT #35800]
 2014-04-29 16:29:20 -07:00
Evan Hunt
3e5743068c [master] use-after-free in isc_radix_remove() 
3826.	[bug]		Corrected a use-after-free in isc_radix_remove().
			(This function is not used in BIND, but could have
			caused problems in programs linking to libisc.)
			[RT #35870]
 2014-04-29 15:21:46 -07:00
Mark Andrews
c11e46110b 3825. [bug] Address sign extension bug in isc_regex_validate. 
[RT #35758]
 2014-04-29 14:33:21 +10:00
Evan Hunt
e01fbe2a45 [master] SIT/max-cache-size flag collision 
3824.	[bug]		A collision between two flag values could cause
			problems with cache cleaning when SIT was enabled.
			[RT #35858]
 2014-04-28 10:24:39 -07:00
Tinderbox User
06081a0d61 update copyright notice 2014-04-25 23:45:21 +00:00
Evan Hunt
aefb3e308b [master] better DDNS in DLZ; mysqldyn 
3821.	[contrib]	Added a new "mysqldyn" DLZ module with dynamic
			update and transaction support. Thanks to Marty
			Lee for the contribution. [RT #35656]

3820.	[func]		The DLZ API doesn't pass the database version to
			the lookup() function; this can cause DLZ modules
			that allow dynamic updates to mishandle prerequisite
			checks. This has been corrected by adding a
			'dbversion' field to the dns_clientinfo_t
			structure. [RT #35656]
 2014-04-25 13:06:30 -07:00
Mark Andrews
1deeb567fa remove const 2014-04-25 14:26:41 +10:00
Mark Andrews
618053b8be additional places: 
3818.   [bug]           Stop lying to the optimizer that 'void *arg' is a
                        constant in isc_event_allocate.

(cherry picked from commit 39b5269577)
 2014-04-25 12:22:27 +10:00
Tinderbox User
37f7c4c673 update copyright notice 2014-04-24 23:45:21 +00:00
Mark Andrews
44c6deacdd additional changes for: 
3818.   [bug]           Stop lying to the optimizer that 'void *arg' is a
                        constant in isc_event_allocate.
 2014-04-24 18:59:01 +10:00
Mark Andrews
36e5ac0033 3819. [bug] NSEC3 hashes need to be able to be entered and 
displayed without padding.  This is not a issue for
                        currently defined algorithms but may be for future
                        hash algorithms. [RT #27925]
 2014-04-24 18:58:03 +10:00
Mark Andrews
e916c4f840 3818. [bug] Stop lying to the optimizer that 'void *arg' is a 
constant in isc_event_allocate.
 2014-04-24 13:43:59 +10:00
Mark Andrews
974fb3a9c5 make days a const 2014-04-24 13:15:40 +10:00
Evan Hunt
2ae159b376 [master] globally rename "delve" to "delv" 
3817.	[func]		The "delve" command is now spelled "delv" to avoid
			a namespace collision with the Xapian project.
			[RT #35801]
 2014-04-23 11:14:12 -07:00
Tinderbox User
953189d30e update copyright notice 2014-04-22 23:45:19 +00:00
Evan Hunt
ec3b216506 [master] masterfile-style 
3814.	[func]		The "masterfile-style" zone option controls the
			formatting of dumped zone files. Options are
			"relative" (multiline format) and "full" (one
			record per line). The default is "relative".
			[RT #20798]
 2014-04-17 17:10:29 -07:00
Evan Hunt
4e7973990c [master] host recognizes /etc/resolv.conf options 
3813.	[func]		"host" now recognizes the "timeout", "attempts" and
			"debug" options when set in /etc/resolv.conf.
			(Thanks to Adam Tkac at RedHat.) [RT #21885]
 2014-04-17 17:04:51 -07:00
Evan Hunt
7318bbc262 [master] serial-update-method date; 
3811.	[func]		"serial-update-method date;" sets serial number
			on dynamic update to today's date in YYYYMMDDNN
			format. (Thanks to Bradley Forschinger.) [RT #24903]
 2014-04-17 16:05:50 -07:00
Evan Hunt
088b1abfd0 [master] prep 9.10.0 respin 2014-04-16 22:49:02 -07:00
Mark Andrews
469bbe0f97 3810. [bug] Work around broken nameservers that fail to ignore 
unknown EDNS options. [RT #35766]
 2014-04-17 15:43:38 +10:00
Evan Hunt
2dc978b8a1 [master] fix "prefetch" doc 
3808.	[doc]		Clean up "prefetch" documentation. [RT #35751]
 2014-04-13 18:50:34 -07:00
Francis Dupont
c80fef792a fix char sign extension [#35743] 2014-04-11 13:25:49 +02:00
Mark Andrews
51af0a72ad sort 2014-04-08 10:43:43 +10:00
Mark Andrews
c7bd423cec order.h 2014-04-08 10:37:21 +10:00
Mark Andrews
2d1c1ee28a keyboard.h 2014-04-08 10:37:08 +10:00
Evan Hunt
38c3ed154a [master] fix race 
3804.   [bug]           Corrected a race condition in dispatch.c in which
                        portentry could be reset leading to an assertion
                        failure in socket_search(). (Change #3708
                        addressed the same issue but was incomplete.)
                        [RT #35128]
 2014-04-07 13:54:08 -07:00
Tinderbox User
1756e623f9 update copyright notice 2014-04-04 23:46:15 +00:00
Mark Andrews
866606b9c7 3802. [bug] Various header files were not being installed 2014-04-04 21:56:08 +11:00
Evan Hunt
4c4d6213e1 [master] prep 9.10.0rc1 2014-04-03 20:34:46 -07:00
Evan Hunt
f0e9d6e905 [master] fix gssapi probing on freebsd 
3801.	[port]		Fix probing for gssapi support on FreeBSD. [RT #35615]
 2014-04-03 19:52:03 -07:00
Mukund Sivaraman
ef9334d745 3795. [bug] Make named-checkconf detect raw masterfiles for 
hint zones and reject them. [RT #35268]

Squashed commit of the following:

commit 5b0254711d6b77940d6217b9131b9d401df8a866
Author: Mukund Sivaraman <muks@isc.org>
Date:   Fri Mar 28 02:09:01 2014 +0530

    Remove redundant helper function

commit a4341c1a2ba830c8cee1def57a533f987f67c3dc
Author: Mark Andrews <marka@isc.org>
Date:   Thu Jan 30 10:08:17 2014 +1100

    error out if masterfile-format raw is specified for a hint zone.
 2014-03-31 04:55:37 +05:30
Tinderbox User
657099c9bc update copyright notice 2014-03-29 23:46:04 +00:00
Mark Andrews
6ffa8fcf76 3794. [maint] Added AAAA for C.ROOT-SERVERS.NET. 2014-03-29 10:30:40 +11:00
Tinderbox User
934b17be8d update copyright notice 2014-03-27 23:46:09 +00:00
Mark Andrews
6d5740075b fix typo in comment 2014-03-27 18:21:31 +11:00
Mark Andrews
1fa64087e7 sigprocmask sets errno on error 2014-03-27 12:33:40 +11:00
Evan Hunt
bbd5c0ab33 [master] fix possible assertion in save_nsec3param() 
3793.	[bug]		zone.c:save_nsec3param() could assert when out of
			memory. [RT #35621]
 2014-03-26 13:12:35 -07:00
Mark Andrews
c1f26bd63c silence clang compiler warnings 2014-03-26 16:20:31 +11:00
Mark Andrews
b4a819a44f othererror should not include badvers now that we have a badvers counter 2014-03-25 16:46:11 +11:00
Tinderbox User
9d7e943c3d update copyright notice 2014-03-19 23:46:06 +00:00
Mark Andrews
a78ffa0cc8 only set FCTX_ADDRINFO_NOSIT if we don't have a existing sit 2014-03-20 07:17:00 +11:00
Mark Andrews
09ab38c151 3790. [bug] Handle broken nameservers that send BADVERS in 
response to unknown EDNS options.  Maintain
                        statistics on BADVERS responses.
 2014-03-20 05:00:55 +11:00
Mark Andrews
adbb48b4a0 3789. [bug] Null pointer dereference on rbt creation failure. 2014-03-17 23:25:21 +11:00
Mark Andrews
61cfadb50e 3788. [bug] dns_peer_getrequestsit was returning request_nsid by 
mistake.
 2014-03-16 03:31:40 +11:00
Mark Andrews
03296893bc fix include path for out of source tree build 2014-03-15 13:25:27 +11:00
Mark Andrews
8058292627 install context.h dnsconf.h; resconf.h types.h were not being installed when cross compiling 2014-03-14 11:42:16 +11:00
Mark Andrews
b0e6f5dfd7 copy named-rrchecker.html 2014-03-14 11:16:13 +11:00
Tinderbox User
24a4fabc0b update copyright notice 2014-03-13 23:53:24 +00:00
Tinderbox User
3c15417fc1 update copyright notice 2014-03-13 23:46:07 +00:00
Evan Hunt
9ff6800ed0 [master] fix merge error 2014-03-13 07:00:13 -07:00
Evan Hunt
e4d524bd91 [master] missing win32 include files 2014-03-13 06:33:32 -07:00
Evan Hunt
9896a01aeb [master] prep 9.10.0b2 2014-03-12 21:57:11 -07:00
Evan Hunt
22e29471c7 [master] check allow-update in view/options 
3787.	[bug]		The code that checks whether "auto-dnssec" is
			allowed was ignoring "allow-update" ACLs set at
			the options or view level. [RT #29536]
 2014-03-12 21:36:01 -07:00
Evan Hunt
acbb301e64 [master] better error output when initializing pkcs11 
3786.	[func]		Provide more detailed error codes when using
			native PKCS#11. "pkcs11-tokens" now fails robustly
			rather than asserting when run against an HSM with
			an incomplete PCKS#11 API implementation. [RT #35479]
 2014-03-12 20:52:01 -07:00
Mark Andrews
3911e7610f 3785. [bug] Debugging code dumphex didn't accept arbitarily long 
input (only compiled with -DDEBUG). [RT #35544]
 2014-03-13 12:37:07 +11:00
Evan Hunt
ffbd79e978 [master] fix possible uninitialized variable 2014-03-10 20:55:26 -07:00
Tinderbox User
7bd4556414 update copyright notice 2014-03-10 23:46:12 +00:00
Evan Hunt
8cbf3b6fc3 [master] use adaptive locks when available 
3781.	[tuning]	Use adaptive mutex locks when available; this
			has been found to improve performance under load
			on many systems. "configure --with-locktype=standard"
			restores conventional mutex locks. [RT #32576]
 2014-03-10 12:14:35 -07:00
Evan Hunt
7b46a4aa41 [master] fix negative numbers in $GENERATE 
3780.	[bug]		$GENERATE handled negative numbers incorrectly.
			[RT #25528]
 2014-03-10 11:55:32 -07:00
Francis Dupont
83bb42c635 fix opensslgost_link.c when OPENSSL is not defined 2014-03-08 19:32:34 +01:00
Evan Hunt
9ba2cef72d [master] clarify error 
3779.	[cleanup]	Clarify the error message when using an option
			that was not enabled at compile time. [RT #35504]
 2014-03-07 15:59:55 -08:00
Tinderbox User
4b1a933811 update copyright notice 2014-03-07 23:47:09 +00:00
Evan Hunt
78f79084fc [master] warn when wrong address family used in listen-on/-v6 
3778.	[bug]		Log a warning when the wrong address family is
			used in "listen-on" or "listen-on-v6". [RT #17848]
 2014-03-07 11:31:51 -08:00
Evan Hunt
e29c2b3903 [master] fix misuses of isc__buffer functions, update comment 2014-03-06 17:26:21 -08:00
Tinderbox User
cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt
b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Evan Hunt
f6d0284ec2 [master] fix memory leak 2014-03-04 08:56:09 -08:00
Evan Hunt
e69790ac00 [master] printable NSID logging 
3774.	[func]		When using "request-nsid", log the NSID value in
			printable form as well as hex. [RT #20864]
 2014-03-03 20:51:14 -08:00
Tinderbox User
794b79e6bb regen master 2014-02-28 01:07:06 +00:00
Evan Hunt
e71905610c [master] fixed out-of-tree build 
3766.	[cleanup]	Fixed problems with building outside the source
			tree when using native PKCS#11. [RT #35459]
 2014-02-27 16:49:35 -08:00
Evan Hunt
1aced7b870 [master] fix possible rndc secroots crash 
3765.	[bug]		Fixed a bug in "rndc secroots" that could crash
			named when dumping an empty keynode. [RT #35469]
 2014-02-27 16:42:35 -08:00
Tinderbox User
938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Evan Hunt
1753d3c4d7 [master] correct dates in man pages 2014-02-27 11:43:10 -08:00
Mark Andrews
7fbbc9bfd3 3762. [bug] Address build problems with --pkcs11-native + 
--with-openssl with ECDSA support. [RT #35467]
 2014-02-27 18:29:52 +11:00
Mark Andrews
96c17c5ecb 3761. [bug] Address dangling reference bug in dns_keytable_add. 
[RT #35471]
 2014-02-27 16:55:46 +11:00
Evan Hunt
98922b2b2b [master] merge several interdependent fixes 
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
 2014-02-26 19:00:05 -08:00
Mark Andrews
86ec04712b #include <inttypes.h> 2014-02-27 11:57:51 +11:00
Evan Hunt
3a01ded15d [master] enable windows python tools 
3757.	[port]		Enable Python tools (dnssec-coverage,
			dnssec-checkds) to run on Windows. [RT #34355]
 2014-02-26 08:43:50 -08:00
Mark Andrews
b0d8002354 use cfg_type_sstring rather than cfg_type_qstring for sit-secret 2014-02-27 01:11:13 +11:00
Mark Andrews
79bd3cf027 we only use 32 octets 2014-02-26 15:54:23 +11:00
Mark Andrews
f4193c2021 update copyrights 2014-02-25 12:07:41 +11:00
Mark Andrews
53ebc0959b #ifdef notyet error handling for bad sit 2014-02-24 23:49:21 +11:00
Mark Andrews
0072ae822d 3756. [bug] GSSAPI Kerberos realm checking was broken in 
check_config leading to spurious messages being
                        logged.  [RT #35443]
 2014-02-24 12:15:37 +11:00
Mark Andrews
9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Francis Dupont
2ab466bf79 more missing WIN32 docs 2014-02-22 03:01:56 +01:00
Mark Andrews
5e45c8aabf add CFG_CLAUSEFLAG_NOTCONFIGURED flag 2014-02-21 12:48:39 +11:00
Mark Andrews
edd82b2ce2 3753. [bug] allow-notify was ignoring keys. [RT #35425] 2014-02-21 00:09:28 +11:00
Mark Andrews
86856f4f30 3752. [bug] Address potential REQUIRE failure if 
DNS_STYLEFLAG_COMMENTDATA is set when printing out
                        a rdataset.
 2014-02-20 23:04:54 +11:00
Evan Hunt
4a0beb64be [master] start prep for 9.10.0b1 2014-02-19 21:39:35 -08:00
Evan Hunt
9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews
d17d32a7bf set setok/sitbad 2014-02-20 16:16:53 +11:00
Mark Andrews
f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews
51d6d7eea4 continue rather than break 2014-02-20 15:20:12 +11:00
Mark Andrews
45b8dc626a add #ifdef notdef check of DNS_OPT_EXPIRE length 2014-02-20 15:06:49 +11:00
Evan Hunt
6cba0b8e61 [expireopt] format expire time 2014-02-20 14:57:47 +11:00
Mark Andrews
16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described 
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
 2014-02-20 14:56:20 +11:00
Mark Andrews
801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews
72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews
e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt
d7b9756a21 [master] ENDS client-subnet in dig 
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
 2014-02-19 15:51:02 -08:00
Tinderbox User
1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont
f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Evan Hunt
7f5bdf7f40 [master] fix dns_resolver_destroyfetch race 
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]
 2014-02-18 23:32:02 -08:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Evan Hunt
6a3fa181d1 [master] add "--with-tuning=large" option 
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
 2014-02-18 22:36:14 -08:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Mark Andrews
38eabfcee7 3743. [bug] delegation-only flag wasn't working in forward zone 
declarations despite being documented.  This is
                        needed to support turning off forwarding and turning
                        on delegation only at the same name.  [RT #35392]
 2014-02-18 10:09:07 +11:00
Mark Andrews
823eadf26d #include <isc/string.h> 2014-02-17 12:22:42 +11:00
Tinderbox User
72141595cf update copyright notice 2014-02-16 23:46:32 +00:00
Evan Hunt
1d761cb453 [master] delve 
3741.	[func]		"delve" (domain entity lookup and validation engine):
			A new tool with dig-like semantics for performing DNS
			lookups, with internal DNSSEC validation, using the
			same resolver and validator logic as named. This
			allows easy validation of DNSSEC data in environments
			with untrustworthy resolvers, and assists with
			troubleshooting of DNSSEC problems. (Note: not yet
			available on win32.) [RT #32406]
 2014-02-16 13:03:17 -08:00
Evan Hunt
31f6244cc2 [master] tcp and udp stats counters 
3739.	[func]		Added per-zone stats counters to track TCP and
			UDP queries. [RT #35375]
 2014-02-15 20:57:00 -08:00
Tinderbox User
56af756b6c update copyright notice 2014-02-14 23:46:27 +00:00
Evan Hunt
f2ea8c2f96 [master] updated published drafts 2014-02-14 08:53:06 -08:00
Mark Andrews
2729aea3c1 3738. [bug] --enable-openssl-hash failed to build. [RT #35343] 2014-02-13 15:09:08 +11:00
Tinderbox User
1124950b35 update copyright notice 2014-02-12 23:46:27 +00:00
Mark Andrews
a1271e2404 3737. [bug] 'rndc retransfer' could trigger a assertion failure 
with inline zones. [RT #35353]

(cherry picked from commit 8e30a7e9fd)
 2014-02-13 08:55:09 +11:00
Mark Andrews
afdcff15c0 #ifdef PF_ROUTE use 2014-02-13 01:13:05 +11:00
Evan Hunt
842a3e6d0e [master] try multiple addresses per server name in nsupdate 
3736.	[bug]		nsupdate: When specifying a server by name,
			fall back to alternate addresses if the first
			address for that name is not reachable. [RT #25784]
 2014-02-11 21:29:10 -08:00
Evan Hunt
dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Mark Andrews
850b5e8093 Add Linux support to: 
3733.   [func]          Improve interface scanning support.  Interface
                        information will be automatically updated if the
                        OS supports routing sockets (MacOS, *BSD, Linux).
                        Use "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-10 09:46:54 +11:00
Tinderbox User
81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Mark Andrews
d896314990 remove dns_pkcs11.h 2014-02-07 23:19:08 +11:00
Mark Andrews
6a47daef7e #ifdef PF_ROUTE 2014-02-07 20:36:48 +11:00
Mark Andrews
62ec9fd168 3733. [func] Improve interface scanning support. Interface 
information will be automatically updated if the
                        OS supports routing sockets.  Use
                        "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-07 17:16:37 +11:00
Evan Hunt
166341d554 [master] add no-case-compress 
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]
 2014-02-06 19:37:26 -08:00
Evan Hunt
dd19c1a352 [master] report T_SKIPPED from t_dst 2014-02-06 16:21:38 -08:00
Evan Hunt
e5f9fa7e18 [master] deprecate isc_bitsrting 
3727.	[func]		The isc_bitstring API is no longer used and
			has been removed from libisc. [RT #35284]
 2014-02-06 15:36:13 -08:00
Evan Hunt
a8cdf2a2e7 [master] fixed win32 dig problem 
3724.   [bug]           win32: Fixed a bug that prevented dig and
                        host from exiting properly after completing
                        a UDP query. [RT #35288]
 2014-02-04 12:01:20 -08:00
Tinderbox User
0666e6db54 update copyright notice 2014-01-31 23:46:22 +00:00
Evan Hunt
48def18179 [master] silence coverity warnings 
- remove dead code in server.c
- initialize a struct tm.c
 2014-01-31 09:34:37 -08:00
Mark Andrews
bc021b8ef5 #include <inttypes.h> 2014-01-31 22:38:26 +11:00
Evan Hunt
4e182f01a1 [master] add stdint.h 2014-01-31 00:05:30 -08:00
Evan Hunt
0a35160f4e [master] prep 9.10.0a2 2014-01-30 18:02:26 -08:00
Evan Hunt
3249da26fc [master] rationalize external key handling 
3723.	[cleanup]	Imported keys are now handled the same way
			regardless of DNSSEC algorithm. [RT #35215]
 2014-01-30 17:49:32 -08:00
Evan Hunt
d0803df331 [master] fixed geoip in blackhole ACLs 
3722.	[bug]		Using geoip ACLs in a blackhole statement
			could cause a segfault. [RT #35272]
 2014-01-30 17:03:32 -08:00
Tinderbox User
4734976943 update copyright notice 2014-01-30 23:46:20 +00:00
Tinderbox User
04b5785fde update copyright notice 2014-01-29 23:46:19 +00:00
Mark Andrews
63add83a26 3720. [bug] Address compiler warnings. [RT #35261] 2014-01-30 10:33:28 +11:00
Mark Andrews
75d747e1c5 3719. [bug] Address memory leak in in peer.c. [RT #35255] 2014-01-30 07:54:52 +11:00
Mark Andrews
fbc0e37e0c 3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260] 2014-01-30 07:44:02 +11:00
Tinderbox User
0ff8ed750e update copyright notice 2014-01-27 23:46:24 +00:00
Mark Andrews
ffa83ffb22 doxygen markup 
(cherry picked from commit bc28371004d70b17f0ca872da8bd84e70591eaf4)
 2014-01-28 09:12:58 +11:00
Mark Andrews
b8cf73a3b3 3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when 
probing to see if it is possible to set dscp values
                        on a per packet basis. [RT #35252]

3716.   [bug]           The dns_request code was setting dcsp values when not
                        requested.  [RT #35252]
 2014-01-28 08:25:28 +11:00
Tinderbox User
85167bb10f update copyright notice 2014-01-24 23:46:22 +00:00
Evan Hunt
bff64bf12b [master] correct copyrights and attributions 
see RT #35423 for details; highlights:
    - remove license clauses 3 and 4 from NetBSD code
    - remove advertising clause from historical BSD code
    - add openssl advertising attributions
 2014-01-24 09:46:00 -08:00
Tinderbox User
fbe600459d update copyright notice 2014-01-23 23:46:17 +00:00
Evan Hunt
83f69fcd6e [master] fix a problem with libgeoip 1.5 and higher 
3715.	[bug]		The region and city databases could fail to
			initialize when using some versions of libGeoIP,
			causing assertion failures when named was
			configured to use them. [RT #35427]
 2014-01-23 12:46:02 -08:00
Mark Andrews
db519a99ce remove src files not available for 'make depend' 2014-01-22 10:49:18 +11:00
Tinderbox User
aa7b16ec2a update copyright notice 2014-01-21 23:46:16 +00:00
Mark Andrews
395a4c7f6f s/gai_sterror.c/gai_strerror.c/ 2014-01-22 10:10:47 +11:00
Mark Andrews
8fbf08d961 silence compiler warning 2014-01-22 10:01:01 +11:00
Evan Hunt
5c6f38b19b [master] silence compiler warning 2014-01-21 11:21:29 -08:00
Evan Hunt
1b255a0c4e [master] overlooked some memcpy->memmove changes with pkcs11 merge 2014-01-21 10:08:01 -08:00
Evan Hunt
a40b8e025a [master] remove unnecessary test in name.c 2014-01-20 17:58:47 -08:00
Evan Hunt
d58e33bfab [master] testcrypto.sh in system tests 
3714.	[test]		System tests that need to test for cryptography
			support before running can now use a common
			"testcrypto.sh" script to do so. [RT #35213]
 2014-01-20 16:08:09 -08:00
Evan Hunt
e45d0508c3 [master] skip unnecesary also-notify data 
3713.	[bug]		Save memory by not storing "also-notify" addresses
			in zone objects that are configured not to send
			notify requests. [RT #35195]
 2014-01-20 15:53:51 -08:00
Evan Hunt
12bf5d4796 [master] address several issues with native pkcs11 2014-01-18 11:51:07 -08:00
Francis Dupont
6972eaffdb fix external key handling 2014-01-17 17:12:20 +01:00
Francis Dupont
1893156781 fix GSSAPI with native PKCS#11 typo [#35207] 2014-01-17 14:32:12 +01:00
Mark Andrews
e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Mark Andrews
64819a98a9 cast to unsigned char 2014-01-16 11:46:28 +11:00
Tinderbox User
b269de36be update copyright notice 2014-01-15 23:46:24 +00:00
Mark Andrews
636c2f488c initalize ret 2014-01-16 09:23:12 +11:00
Evan Hunt
90b513b2a0 [master] another build fix for pkcs11+atf+libtool 2014-01-15 12:07:04 -08:00
Evan Hunt
0a3fafde84 [master] try again, ensuring atf tests build... 2014-01-15 11:46:17 -08:00
Evan Hunt
e4f484b7b7 [master] address compiler warnings 2014-01-15 09:35:44 -08:00
Evan Hunt
d868cce6eb [master] correct library build order 2014-01-15 09:20:09 -08:00
Mark Andrews
1b5dcef875 include <isc/tm.h>, <isc/lang.h> and <isc/types.h> 2014-01-15 20:42:22 +11:00
Evan Hunt
a147de10fe [master] portable strptime/timegm 
3709.	[port]		Use built-in versions of strptime() and timegm()
			on all platforms to avoid portability issues.
			[RT #35183]
 2014-01-14 23:17:47 -08:00
Mark Andrews
702958d202 3708. [bug] Address a portentry locking issue in dispatch.c. 
[RT #35128]
 2014-01-15 15:55:35 +11:00
Mark Andrews
cd7f8d18f8 3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND 
on a missing resolv.conf file and initializes the
                        structure as if it had been configured with:

                                nameserver ::1
                                nameserver 127.0.0.1

                        Note: Callers will need to be updated to treat
                        ISC_R_FILENOTFOUND as a qualified success or else
                        they will leak memory. The following code fragment
                        will work with both only and new versions without
                        changing the behaviour of the existing code.

                        resconf = NULL;
                        result = irs_resconf_load(mctx, "/etc/resolv.conf",
                                                  &resconf);
                        if (result != ISC_SUCCESS) {
                                if (resconf != NULL)
                                        irs_resconf_destroy(&resconf);
                                ....
                        }

                        [RT #35194]
 2014-01-15 15:22:55 +11:00
Mark Andrews
d8b83f0e2b silence compiler warning 2014-01-15 12:40:09 +11:00
Tinderbox User
bf0266f286 update copyright notice 2014-01-14 23:46:22 +00:00
Evan Hunt
ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Mark Andrews
07fb9b8330 3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185] 2014-01-14 16:12:30 +11:00
Tinderbox User
2cf1d5b098 update copyright notice 2014-01-12 23:46:23 +00:00
Mark Andrews
c24b6b4a40 fix for pre C99 compiler 2014-01-13 09:29:25 +11:00
Mark Andrews
fb756ba304 3703. [func] Prefetch about to expire records if they are queried 
for, see prefetch option for details. [RT #35041]
 2014-01-12 21:29:15 +11:00
Evan Hunt
dc1cfff92a [master] fix win32 isc_time_set() 2014-01-11 22:01:40 -08:00
Evan Hunt
6736c84f11 [master] missing prototype in time.h 2014-01-10 20:19:17 -08:00
Evan Hunt
903247531a [master] portable replacement for timegm() 2014-01-10 19:22:02 -08:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt
f459b70c8e [master] one more win32 build error 2014-01-10 11:20:46 -08:00
Evan Hunt
480172bf6a [master] missing prototypes 2014-01-10 11:17:12 -08:00
Evan Hunt
1bb2f53b9f [master] fix win32 build problems 2014-01-10 10:58:06 -08:00
Mark Andrews
fd0f3e7cd8 add unit test for isc_time_parsehttptimestamp 2014-01-11 00:30:41 +11:00
Mark Andrews
52e6d8a36d add ISC_PLATFORM_NEEDSTRCASESTR 2014-01-10 23:53:41 +11:00
Mark Andrews
429ab67296 strptime returns time in the local time zone so use mktime 2014-01-10 23:44:59 +11:00
Evan Hunt
0cd166e0a9 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 22:04:29 -08:00
Evan Hunt
60fb67079e [master] add isc_string_strcasestr for portability 2014-01-09 22:04:03 -08:00
Mark Andrews
ff6de396a9 3701. [func] named-checkconf can now suppress the printing of 
shared secrets by specifying '-x'. [RT #34465]
 2014-01-10 16:56:36 +11:00
Evan Hunt
57a46f4b19 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 19:05:46 -08:00
Evan Hunt
789252d55f [master] stats improvements 
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
 2014-01-09 18:46:25 -08:00
Tinderbox User
431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Mark Andrews
109f477ed7 silence compiler warning 2014-01-09 15:57:59 +11:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
 2014-01-08 16:39:05 -08:00
Tinderbox User
ca8ad4871e update copyright notice 2014-01-06 23:46:06 +00:00
Jeremy C. Reed
c55b7dce48 See ticket 35140 for details. 
Install some include files:

dns/client.h
dns/tsec.h
irs/resconf.h
irs/types.h
(I noticed these when building DHCP using installed BIND9.)

This was okayed during the 2014-01-02 BIND9 phone meeting.
 2014-01-06 14:20:31 -06:00
Evan Hunt
2b258a1f5b [master] dispatch.c race 
3695.	[bug]		Address a possible race in dispatch.c. [RT #35107]
 2013-12-23 09:50:18 -08:00
Evan Hunt
c14ba71070 [master] warn if key-directory doesn't exist 
3694.	[bug]		Warn when a key-directory is configured for a zone,
			but does not exist or is not a directory. [RT #35109]
 2013-12-20 14:57:03 -08:00
Tinderbox User
1baa4729ce update copyright notice 2013-12-16 23:46:18 +00:00
Mark Andrews
a2ca594252 sort and one file per line 2013-12-17 10:35:45 +11:00
Mark Andrews
161e803a56 3692. [bug] Two calls to dns_db_getoriginnode were fatal if there 
was no data at the node. [RT #35080]
 2013-12-17 09:08:59 +11:00
Evan Hunt
0606c47750 [master] correct dispatch address/port check 
3690.	[bug]		Iterative responses could be missed when the source
			port for an upstream query was the same as the
			listener port (53). [RT #34925]
 2013-12-12 22:39:12 -08:00
Evan Hunt
9b895f30f1 [master] fix insecure delegation across static-stub zones 
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]
 2013-12-12 22:19:33 -08:00
Mark Andrews
1bdc17e54e remove from load_rpzs 2013-12-12 13:53:10 +11:00
Mark Andrews
e4d0018d4c 3688. [bug] loadnode could return a freed node on out of memory. 
[RT #35106]
 2013-12-12 12:49:44 +11:00
Tinderbox User
de77dcc2c1 update copyright notice 2013-12-11 23:47:38 +00:00
Mark Andrews
00112618bc 3687. [bug] Address null pointer dereference in zone_xfrdone. 
[RT #35042]
 2013-12-12 10:38:35 +11:00
Evan Hunt
0bbe3273a2 [master] dnssec-signzone -Q 
3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
			that are still published but no longer active.
			[RT #34990]
 2013-12-11 13:25:21 -08:00
Mark Andrews
8539d19c04 handle underflow now that n is unsigned 
(cherry picked from commit 536ac53126)
 2013-12-10 07:24:44 +11:00
Mark Andrews
131333682c silence compiler warning 
(cherry picked from commit b14c6a1caf)
 2013-12-10 07:24:44 +11:00
Mark Andrews
7d65cbaca0 3684. [bug] The list of included files would grow on reload. 
[RT 35090]
 2013-12-07 09:44:45 +11:00
Mark Andrews
53f70575bd silence compiler warnings 2013-12-06 17:38:25 +11:00
Mark Andrews
2bdfb330af update copyrights 2013-12-05 15:04:53 +11:00
Tinderbox User
5465b124f1 update copyright notice 2013-12-04 23:46:51 +00:00
Curtis Blackburn
8009525601 3682. [bug] Correct the behavior of rndc retransfer to allow 
inline-signing slave zones to retain NSEC3 parameters instead of
			reverting to NSEC [RT #34745]
 2013-12-04 12:26:20 -06:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature 
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
 2013-12-04 12:47:23 +11:00
Evan Hunt
43bbab6d0b [master] typo 2013-11-18 15:26:50 -08:00
Tinderbox User
432d8fa3b4 update copyright notice 2013-11-14 23:46:24 +00:00
Evan Hunt
434bfc3dfa [master] "in-view" zone option 
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
 2013-11-13 20:35:40 -08:00
Mark Andrews
6a671a840d add missing break; 2013-11-14 12:26:57 +11:00
Tinderbox User
c0de084bbd update copyright notice 2013-11-13 23:46:31 +00:00
Evan Hunt
0618287859 [master] allow setting local addr in dns_client 
3672.	[func]		Local address can now be specified when using
			dns_client API. [RT #34811]
 2013-11-13 10:52:22 -08:00
Mark Andrews
7c19754bac add partial legend for Address database dump 2013-11-13 12:10:43 +11:00
Tinderbox User
a4fa22bf14 update copyright notice 2013-11-11 23:46:29 +00:00
Mark Andrews
0a47bc90af 3668. [bug] Fix cast in lex.c which could see 0xff treated as eof. 
[RT #34993]
 2013-11-11 10:49:28 +11:00
Mark Andrews
37bd255fd4 3665. [bug] Failure to release lock on error in receive_secure_db. 
[RT #34944]
 2013-10-31 22:15:12 +11:00
Mark Andrews
2502a568e7 use smaller buffers 2013-10-26 20:36:17 +11:00
Tinderbox User
3a34908497 update copyright notice 2013-10-25 23:46:32 +00:00
Mark Andrews
938aea1dc4 address memory leak in change #3662, force format matching, attempt to address coverity false positives 2013-10-26 10:04:36 +11:00
Mark Andrews
34416a7954 3663. [bug] Address bugs in dns_rdata_fromstruct and 
dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
 2013-10-25 13:06:09 +11:00
Mark Andrews
6100b17699 3662. [bug] 'host' could die if a UPD query timed out. [RT #34870] 2013-10-25 10:09:33 +11:00
Mark Andrews
0bfc15fe59 missing FCTXTRACE2 macro RT#34914 2013-10-21 15:51:43 +11:00
Tinderbox User
bfc4a951c5 update copyright notice 2013-10-08 23:46:23 +00:00
Mark Andrews
03a9daede1 be consistent in how ISC_PLATFORM_USETHREADS is defined and used 2013-10-08 16:47:57 +11:00
Tinderbox User
4e3e8cbea0 update copyright notice 2013-10-08 04:13:49 +00:00
Mark Andrews
c6e6cac4ea call isc_mutex_trylock rather than pthread_mutex_trylock 2013-10-08 12:11:09 +11:00
Mark Andrews
03152360db 3661. [bug] Address lock order reversal deadlock with inline zones. 
[RT #34856]
 2013-10-08 11:43:08 +11:00
Mark Andrews
368c4556c8 remove redudant #ifdef; address imprecise #ifdef usage 2013-10-02 11:59:39 +10:00
Mark Andrews
fb623f9a07 3655. [cleanup] Simplify TCP message processing when requesting a 
zone transfer.  [RT #34825]
 2013-09-25 09:57:34 +10:00
Mark Andrews
5116f25421 3654. [bug] Address race condition with manual notify requests. 
[RT #34806]
 2013-09-25 09:47:31 +10:00
Tinderbox User
0e17b4207e update copyright notice 2013-09-23 23:46:20 +00:00
Mark Andrews
9084a3e58f silence clang warning 2013-09-23 13:26:33 +10:00
Mark Andrews
97a2a26cd9 3651. [tuning] Adjust when a master server is deemed unreachable. 
[RT #27075]
 2013-09-21 17:12:39 +10:00
Mark Andrews
c1b8fa6160 3650. [tuning] Use separate rate limiting queues for refresh and 
notify requests. [RT #30589]
 2013-09-21 16:29:58 +10:00
Mark Andrews
6c57978413 refresh_callback needs to check if the zone is exiting 
(cherry picked from commit 2e314abcf0a47acfbab55e5ef0463c04c08476be)
 2013-09-18 14:52:38 +10:00
Mark Andrews
7667dd1a03 call zone_settimer; sub test failure was not being detected 
(cherry picked from commit ebd7900670)
 2013-09-18 12:57:46 +10:00
Evan Hunt
213c41c9f7 [master] fix to change #3647 2013-09-13 09:52:15 -07:00
Mark Andrews
76df835d59 3647. [bug] Address a race condition when shutting down a zone. 
[RT #34750]
 2013-09-12 13:37:43 +10:00
Evan Hunt
18df9e628e [master] strdup journal filename 
3646.	[bug]		Journal filename string could be set incorrectly,
                        causing garbage in log messages.  [RT #34738]
 2013-09-09 22:12:47 -07:00
Evan Hunt
78f20eda3c [master] clean up tests, update .gitignore 2013-09-09 19:37:17 -07:00
Evan Hunt
41dabe089f [master] remove namespace.h from installed files 2013-09-09 09:22:37 -07:00
Tinderbox User
63737247d1 update copyright notice 2013-09-05 23:46:16 +00:00
Mark Andrews
0327c6de3e remove accidentally added line 2013-09-05 16:23:12 +10:00
Evan Hunt
012648ce19 [master] missed an external 2013-09-04 19:45:30 -07:00
Evan Hunt
eb8fae696c [master] remove rollforward2 from libdns.def 2013-09-04 19:36:12 -07:00
Tinderbox User
473d3168f0 update copyright notice 2013-09-04 23:46:16 +00:00
Evan Hunt
8e3b246dc8 [master] remove "resign" member from dns_diff struct 
no longer needed since change #3641
 2013-09-04 16:35:11 -07:00
Evan Hunt
79e6f6e519 [master] deprecate dns_journal_rollforward2 
no longer needed since change #3641
 2013-09-04 16:19:52 -07:00
Mark Andrews
3ad8f24ddd 3644. [protocol] Check that EDNS subnet client options are well formed. 
[RT #34718]
 2013-09-05 09:18:59 +10:00
Evan Hunt
8e1655931b [master] add missing externals 2013-09-04 15:52:10 -07:00
Evan Hunt
09755f7270 [master] prep 9.10.0a1 release 2013-09-04 15:41:50 -07:00
Mark Andrews
e9921500e1 remove unused variable 2013-09-04 22:34:44 +10:00
Mark Andrews
0c91911b4d 3642. [func] Allow externally generated DNSKEY to be imported 
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
 2013-09-04 13:53:02 +10:00
Mark Andrews
b5f4cc132e 3641. [bug] Handle changes to sig-validity-interval settings 
better. [RT #34625]
 2013-09-04 13:45:00 +10:00
Mark Andrews
d6f99498d6 3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used 
in a key zone. [RT #34238]
 2013-09-04 13:14:06 +10:00
Curtis Blackburn
c4348cb50f 3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is 
encountered. [RT #34668]
 2013-08-28 15:56:49 -05:00
Tinderbox User
377b774598 update copyright notice 2013-08-15 23:46:17 +00:00
Mark Andrews
d1e22676de 3635. [bug] Signatures were not being removed from a zone with 
only KSK keys for a algorithm. [RT #24439]
 2013-08-15 13:37:07 +10:00
Mark Andrews
7ace327795 3632. [bug] Signature from newly inactive keys were not being 
removed.  [RT #32178]
 2013-08-15 10:48:05 +10:00
Evan Hunt
5f630b9417 [master] change 3630 incomplete--needed to check fromtext too 2013-08-14 17:23:41 -07:00
Tinderbox User
3c04ca47c6 update copyright notice 2013-08-13 23:46:14 +00:00
Evan Hunt
5d4343a998 [master] fix md5 key id computation 
3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]
 2013-08-13 16:03:42 -07:00
Tinderbox User
21c8938824 update copyright notice 2013-08-12 23:46:05 +00:00
Mark Andrews
75ae74f8fd 3629. [func] Allow the printing of cryptographic fields in DNSSEC 
records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]
 2013-08-12 15:37:51 +10:00
Mark Andrews
16bd30ae69 3628. [func] Report DNSKEY key id's when dumping the cache. 
[RT #34533]
 2013-08-12 14:38:26 +10:00
Mark Andrews
df0892aea6 3627. [bug] RPZ changes were not effective on slaves. [RT #34450] 2013-08-09 13:23:01 +10:00
Evan Hunt
7ade93c328 [master] fix build error when IP_TOS is undefined 2013-08-08 19:15:11 -07:00
Evan Hunt
a499dddb4b [master] easier to read NSID output 
3626.	[func]		dig: NSID output now easier to read. [RT #21160]
 2013-08-08 16:50:34 -07:00
Mark Andrews
e543b4e5db remove redundent 'request-ixfr' 2013-08-01 14:38:27 +10:00
Mark Andrews
f45818b82a add comment 2013-07-26 10:25:45 +10:00
Evan Hunt
d640b4a0ab [master] perf: eliminate cache stats attach/detach 
3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]
 2013-07-25 10:51:31 -07:00
Tinderbox User
345a210f51 update copyright notice 2013-07-16 23:46:10 +00:00
Mark Andrews
fdb4ae8f6c 3621. [security] Incorrect bounds checking on private type 'keydata' 
can lead to a remotely triggerable REQUIRE failure
                        (CVE-2013-4854). [RT #34238]
 2013-07-17 08:03:50 +10:00
Mark Andrews
975172e3dc remove unused variable 2013-07-16 10:18:54 +10:00
Mark Andrews
6142269dcc remove unused assignment 2013-07-15 13:09:27 +10:00
Mark Andrews
7236e1bd00 remove dead code 2013-07-15 09:30:53 +10:00
Tinderbox User
44c016134f update copyright notice 2013-07-13 23:46:06 +00:00
Mark Andrews
09fec18669 fix unchecked null; value not read 2013-07-14 00:26:23 +10:00
Francis Dupont
41a6b3031e spelling 2013-07-13 01:39:41 +02:00
Evan Hunt
421d4a0647 [master] rpz work 
3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]
 2013-07-12 14:46:47 -07:00
Tinderbox User
dbd8673fa0 update copyright notice 2013-07-11 23:46:13 +00:00
Evan Hunt
0949306cb9 [master] check include file mtimes 
3618.	[func]		"rndc reload" now checks modification times of
			include files as well as master files to determine
			whether to skip reloading a zone. [RT #33936]
 2013-07-11 16:32:36 -07:00
Evan Hunt
cf0a69e999 [master] address zone->db races 
3616.	[bug]		Change #3613 was incomplete. [RT #34177]
 2013-07-11 09:51:47 -07:00
Evan Hunt
f4e309b177 [master] silence warning 2013-07-10 09:15:51 -07:00
Francis Dupont
a96e5ffbe0 spelling 2013-07-10 10:56:18 +02:00
Evan Hunt
927e4c9fec [master] address race conditions with removing inline zones 
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
 2013-07-09 17:39:21 -07:00
Tinderbox User
ca48f47d88 update copyright notice 2013-07-09 23:46:11 +00:00
Evan Hunt
4b13ea47db [master] check for -ljson-c as well as -ljson 
3512.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]
 2013-07-09 16:43:59 -07:00
Evan Hunt
5b7abbef51 [master] added isc_safe_memcmp() 
3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]
 2013-07-09 11:47:16 -07:00
Evan Hunt
eb4458b478 [master] prevent exportlib deadlock 
3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]
 2013-07-06 18:23:41 -07:00
Francis Dupont
c46fb8092d remove dns_adb_flushmatch from libdns.def 2013-07-04 10:56:18 +02:00
Evan Hunt
5bcbfa2da0 [master] add missing symbols 2013-07-01 10:44:16 -07:00
Evan Hunt
9d4ec6d2c5 [master] "flushtree -all" no longer optional 
Updated CHANGES note:
3606.	[func]		"rndc flushtree" now flushes matching
			records in the address database and bad cache
                        as well as the DNS cache. (Previously only the
                        DNS cache was flushed.) [RT #33970]
 2013-06-30 18:53:48 -07:00
Tinderbox User
9c5faa2ba8 update copyright notice 2013-06-26 23:46:14 +00:00
Evan Hunt
9fa5a723e1 [master] "rndc flushtree -all <name>" 
3606.	[func]		"rndc flushtree -all" flushes matching
			records in the ADB and bad cache as well as
			the DNS cache.  (Without the "-all" option,
			flushtree will still only flush records from
			the DNS cache.) [RT #33970]
 2013-06-26 14:59:32 -07:00
Evan Hunt
c5a53e9ab5 [master] fix WIN32 nmake crc64 
- trivial typo in CRC-64 windows build
 2013-06-26 14:49:01 -07:00
Evan Hunt
f42c0dcca8 [master] win32 fixes 
3605.	[port]		win32: Addressed several compatibility issues
			with newer versions of Visual Studio. [RT #33916]

Squashed commit of the following:

commit 4127af15f85da90cf2bd3a0c5a558daae89e833a
Author: Francis Dupont <fdupont@isc.org>
Date:   Tue Jun 25 22:41:53 2013 +0200

    make the last change to be text

commit 21ef4891b9ee3e3aefb45d4c80d5cb7ec78f264f
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Jun 25 12:35:08 2013 -0500

    [rt33916] re-worded for easier reading

commit 83828e47e62fea4070441e645ba8fed338255ceb
Author: Francis Dupont <fdupont@isc.org>
Date:   Mon Jun 24 16:08:11 2013 +0200

    introduce a VCRedistPath env var

commit 0337f2554f168993a65945e78c2879e9bfca5293
Author: Francis Dupont <fdupont@isc.org>
Date:   Sun Jun 23 01:23:26 2013 +0200

    _adjust_fdiv for VS < 2010

commit 375fdd5c06be276b0ff0ad589c0e22b809339fe9
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 16:27:04 2013 +0200

    move to MSVC v1600 as it still breaks on VS 2010

commit bfcaf72071e9d8df1d0ce0c5f05b69acd51bf698
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:57:35 2013 +0200

    WIN32: avoid addrinfo redef

commit 18504c3e50b11e66a0b573c7cb3d61094bfa5b52
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:54:38 2013 +0200

    WIN32: fseek/ftell

commit f9a4fdccc5ab1c74c64412fb76da7dfd161787b2
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:13:01 2013 +0200

    fix WIN32 error redefs in net.h (isc ad lwres libs)
 2013-06-26 14:38:35 -07:00
Evan Hunt
7aba1a9660 [master] fix compile bug with json but no xml 
3604.	[bug]		Fixed a compile-time error when building with
			JSON but not XML. [RT #33959]
 2013-06-26 14:12:27 -07:00
Tinderbox User
ca283f2ecb update copyright notice 2013-06-25 23:48:02 +00:00
Mark Andrews
682a574e67 3603. [bug] Install <isc/stat.h>. [RT #33956] 2013-06-25 23:56:45 +10:00
Evan Hunt
c3b5542144 [master] check for physical equivalence in names 
3599.	[tuning]	Check for pointer equivalence in name comparisons.
			[RT #18125]
 2013-06-18 18:14:28 -07:00
Mark Andrews
77fa1a27dd pass correct type off_t 2013-06-19 07:00:07 +10:00
Mark Andrews
e457f75632 handle file offsets bigger that memory offsets 2013-06-19 01:25:35 +10:00
Tinderbox User
2777329775 update copyright notice 2013-06-17 23:46:12 +00:00
Evan Hunt
31707708c5 [master] portability fixes for map files 
3598.	[cleanup]	Improved portability of map file code. [RT #33820]
 2013-06-17 09:09:43 -07:00
Evan Hunt
b7e40659ef [master] rebuild resigning heaps when loading map files 
3597.	[bug]		Ensure automatic-resigning heaps are reconstructed
			when loading zones in map format. [RT #33381]
 2013-06-14 10:16:10 -07:00
Evan Hunt
8f1e278931 [master] updated win32 build 
3596.	[port]		Updated win32 build documentation, added
                        dnssec-verify. [RT #22067]
 2013-06-13 17:31:41 -07:00
Tinderbox User
1443158c11 update copyright notice 2013-06-13 23:46:13 +00:00
Evan Hunt
166c4c6c5b [master] fix win32 build 
3595.	[port]		win32: Fix build problems introduced by change #3550.
			[RT #33807]
 2013-06-13 12:36:39 -07:00
Tinderbox User
8e9b13f510 update copyright notice 2013-06-12 23:46:16 +00:00
Francis Dupont
b4a865ee13 merge rt33813: MSVC doesn't propage const to dynamic array sizes 2013-06-12 19:14:30 +02:00
Francis Dupont
c213258356 merge rt33812: trivial updates for WIN32 build 2013-06-12 19:09:40 +02:00
Mark Andrews
baa9d706bd move declaration to begining of block 2013-06-12 21:06:00 +10:00
Mark Andrews
cc74f3ade0 silence compiler warning 2013-06-12 11:57:52 +10:00
Mark Andrews
8e15d5eb3a 3593. [func] Update EDNS processing to better track remote server 
capabilities. [RT #30655]
 2013-06-12 11:31:30 +10:00
Mark Andrews
0a6bfbc939 handle realloc failure [RT #32105] 2013-06-11 16:03:22 +10:00
Mark Andrews
8dda0f671d remove unnecessary DE_CONST; pass in as (const void *) 2013-06-11 12:25:43 +10:00
Evan Hunt
7422f1f981 [master] fix compiler warning 2013-06-10 18:53:41 -07:00
Tinderbox User
5924e4ace0 update copyright notice 2013-06-10 23:46:19 +00:00
Evan Hunt
e59937c728 [rt33746] use CRC64 for map file error detection 
3591.	[func]		Use CRC-64 to detect map file corruption at load
			time. [RT #33746]
 2013-06-10 14:19:22 -07:00
Mark Andrews
c6eb92beb1 3589. [func] Report serial numbers in when starting zone transfers. 
Report accepted NOTIFY requests including serial.
                        [RT# 33037]
 2013-06-08 09:49:03 +10:00
Mark Andrews
8144dc702b 3587. [func] 'named -g' now checks the logging configuration but 
does not use it. [RT #33473]
 2013-06-06 11:08:16 +10:00
Tinderbox User
099fa63e55 update copyright notice 2013-06-05 23:46:14 +00:00
Evan Hunt
276457f7a3 [master] assertion failure in resolver.c 
3584.	[security]	Caching data from an incompletely signed zone could
			trigger an assertion failure in resolver.c [RT #33690]
 2013-06-04 11:22:47 -07:00
Mark Andrews
2347c72129 3583. [bug] Address memory leak in GSS-API processing [RT #33574] 2013-06-04 11:59:57 +10:00
Mark Andrews
1e34fe9044 3582. [bug] Silence false positive warning regarding missing file 
directive for inline slave zones.  [RT #33662]
 2013-06-04 11:34:03 +10:00
Mark Andrews
ff8ab6befe redo: 3576. [bug] Address a shutdown race when validating. [RT #33573] 2013-06-04 11:27:26 +10:00
Evan Hunt
5183f9d9da [master] possible race in acache.c 
3580.	[bug]		Addressed a possible race in acache.c [RT #33602]
 2013-05-31 17:30:09 -07:00
Mark Andrews
c611465739 address memory in dns_view_getsecroots failure 2013-05-31 12:31:01 +10:00
Mark Andrews
5f238c3c64 3577. [bug] Handle zero TTL values better. [RT #33411] 2013-05-29 18:10:11 +10:00
Mark Andrews
2cd3c8856c 3576. [bug] Address a shutdown race when validating. [RT #33573] 2013-05-29 18:02:24 +10:00
Evan Hunt
f3c8e48b95 [master] change RRL log category 'query-errors' 
3575.	[func]		Changed the logging category for RRL events from
			'queries' to 'query-errors'. [RT #33540]
 2013-05-21 12:20:54 -07:00
Mark Andrews
f9ed68cc5d permit hexadecimal and octal dscp values 2013-05-17 21:01:02 +10:00
Mark Andrews
01e41f88b0 check for data being null 2013-05-09 21:29:57 +10:00
Mark Andrews
fb89b7cb33 add gen.dSYM 2013-05-09 10:54:36 +10:00
Tinderbox User
ee53fcb61c update copyright notice 2013-05-08 23:46:09 +00:00
Mark Andrews
62f016d5d3 3571. [bug] Address race condition in dns_client_startresolve(). 
[RT #33234]

Squashed commit of the following:

commit ebfb9f3e783531cc1369bf519eb1c33437ec6f1a
Author: Evan Hunt <each@isc.org>
Date:   Wed May 8 11:47:52 2013 -0700

    [rt33234] style

commit 0a915af759670aadb2455711997d9f29e5c3f794
Author: Mark Andrews <marka@isc.org>
Date:   Wed May 8 18:23:57 2013 +1000

    handle dns_client race
 2013-05-09 08:41:24 +10:00
Mark Andrews
3f97149ea3 assert if zone and zone->raw are the same; this should help coverity static analysis 2013-05-08 13:03:38 +10:00
Tinderbox User
180c8cf5fa update copyright notice 2013-05-07 23:46:05 +00:00
Evan Hunt
127a4a90b0 [master] more map file sanity checks 
(not adding a new CHANGES note because this is an extension of the
previous one, change #3570.)
 2013-05-07 13:54:58 -07:00
Mark Andrews
831b70f5bd remove dead code 2013-05-07 22:28:19 +10:00
Evan Hunt
d9f0c713fe [master] handle corrupted pointers in map files 
3570.	[bug]		Check internal pointers are valid when loading map
                        files. [RT #33403]
 2013-05-06 15:40:40 -07:00
Evan Hunt
e47208b6fb [master] silence ccc-analyzer 
3567.	[bug]		Silence clang static analyzer warnings. [RT #33365]
 2013-05-03 14:31:27 -07:00
Evan Hunt
34f3693b93 [master] log forwarded updates 
3566.	[func]		Log when forwarding updates to master. [RT #33240]
 2013-05-03 14:05:32 -07:00
Evan Hunt
1a076410c2 [master] fix corrupt map file handling 
3564.	[bug]		Improved handling of corrupted map files. [RT #33380]
 2013-05-03 14:00:12 -07:00
Mark Andrews
b07086de42 add missing parameter sha1 2013-05-03 16:01:22 +10:00
Mark Andrews
0dc44869b9 remove special distclean target for irs 2013-05-03 13:32:57 +10:00
Tinderbox User
52d3ce3ada update copyright notice 2013-05-02 23:46:13 +00:00
Evan Hunt
03b5d2689d [master] add hash to map files 
3562.	[func]		Update map file header format to include a SHA-1 hash
			of the database content, so that corrupted map files
			can be rejected at load time. [RT #32459]
 2013-05-01 22:20:02 -07:00
Tinderbox User
954e43e605 update copyright notice 2013-04-30 04:51:59 +00:00
Mark Andrews
26bb3b7a67 3559. [func] Check that both forms of Sender Policy Framework 
records exist or do not exist. [RT #33355]
 2013-04-30 13:49:41 +10:00
Mark Andrews
ec8a802114 3557. [bug] Reloading redirect zones was broken. [RT #33292] 2013-04-29 15:20:09 +10:00
Tinderbox User
9f40a78322 update copyright notice 2013-04-28 23:46:07 +00:00
Evan Hunt
73ad83bcf0 [master] d.root-servers.net AAAA 
3556.	[maint]		Added AAAA for D.ROOT-SERVERS.NET.
 2013-04-27 16:42:59 -07:00
Evan Hunt
5cedb1e345 [master] minor code cleanup in rrl.c:expand_entries() 
from RT #33137
 2013-04-26 10:59:50 -07:00
Evan Hunt
ff5ac6d421 [master] address two more possible acache asserts 
3555.	[bug]		Address theoretical race conditions in acache.c
			(change #3553 was incomplete). [RT #33252]
 2013-04-25 18:02:52 -07:00
Evan Hunt
a6d43d18b1 [master] fixed several RRL issues 
3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]
 2013-04-25 14:42:44 -07:00
Evan Hunt
330f98fe3b [master] double free caused assertion in acache 
3553.	[bug]		Address suspected double free in acache. [RT #33252]
(cherry picked from commit 11b04b18f8ecb7c0119a7a6b6bbf8f5bad789c9a)
 2013-04-25 10:41:06 -07:00
Mark Andrews
b4914b3d69 3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686] 2013-04-19 12:36:02 +10:00
Tinderbox User
d1fd0990fc update copyright notice 2013-04-12 23:46:05 +00:00
Mark Andrews
865e411997 include <irs/netdb.h> as we are linking against libirs 2013-04-12 22:50:11 +10:00
Mark Andrews
214692d622 check result code 2013-04-12 14:41:10 +10:00
Mark Andrews
02638c8b40 silence hpux compiler warnings 2013-04-12 14:06:41 +10:00
Mark Andrews
794f12f4ff fixup copyrights 2013-04-12 13:49:32 +10:00
Tinderbox User
08df939613 update copyright notice 2013-04-11 23:46:07 +00:00
Mark Andrews
8ce8052bb8 handle both cmsg types IP_TOS and IP_RECVTOS being used to return IP_TOS 2013-04-12 09:33:33 +10:00
Mark Andrews
da87a34cd2 don't call dns_message_destroy in make_querymessage 2013-04-11 18:11:12 +10:00
Mark Andrews
45b727f651 silence coverity warnings 2013-04-11 17:07:50 +10:00
Evan Hunt
fce7ba0f07 [master] fix build failure on hpux 2013-04-10 21:59:14 -07:00
Evan Hunt
634a52966f [master] catch SIGHUP correctly in nothreads 2013-04-10 19:43:43 -07:00
Mark Andrews
e035632392 remove lib/export 2013-04-11 10:16:14 +10:00
Tinderbox User
12253af346 update copyright notice 2013-04-10 23:46:01 +00:00
Evan Hunt
53b6877dde [master] add config.h 2013-04-10 14:23:54 -07:00
Evan Hunt
b99bfa184b [master] unify internal and export libraries 
3550.	[func]		Unified the internal and export versions of the
			BIND libraries, allowing external clients to use
			the same libraries as BIND. [RT #33131]
 2013-04-10 13:49:57 -07:00
Tinderbox User
526cc7c2c0 update copyright notice 2013-04-09 23:46:07 +00:00
Mark Andrews
11d945cd75 silence signed/unsigned compare warning 2013-04-09 06:32:10 +10:00
Mark Andrews
4adf97c32f 3548. [bug] The NSID request code in resolver.c was broken 
resulting in invalid EDNS options being sent.
                        [RT #33153]
 2013-04-08 16:29:26 +10:00
Mark Andrews
1cc4695f0d 3547. [bug] Some malformed unknown rdata records were not properly 
detected and rejected. [RT #33129]
 2013-04-08 09:55:14 +10:00
Tinderbox User
ea3dd509f6 update copyright notice 2013-04-04 23:46:06 +00:00
Mark Andrews
3a6d62c59f 3546. [func] Add EUI48 and EUI64 types. [RT #33082] 2013-04-05 09:07:28 +11:00
Evan Hunt
ad668472f1 [master] bug in rrl slip 
3545.	[bug]		RRL slip behavior was incorrect when set to 1.
			[RT #33111]
 2013-04-04 10:32:19 -07:00
Tinderbox User
f9adb48aea update copyright notice 2013-04-03 23:46:07 +00:00
Mark Andrews
515991cda4 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2013-04-03 14:04:48 +00:00
Mark Andrews
1b2ba49571 link export/libisccfg againt DNS_CRYPTO_LIBS 2013-04-03 14:03:27 +00:00
Mark Andrews
c15b536ddb 3543. [bug] Update socket stucture before attaching to socket 
manager after accert. [RT #33084]
 2013-04-03 17:42:42 +11:00
Mark Andrews
b1fb5abb50 add insist to try to prevent coverity false positive 2013-04-03 17:37:15 +11:00
Mark Andrews
8013077aa7 3541. [bug] The parts if libdns was not being properly initialized 
in when built in libexport mode. [RT #33028]
 2013-04-03 17:27:40 +11:00
Mark Andrews
8c460e0159 3540. [bug] libt_api: t_info and t_assert were not thread safe. 2013-04-03 17:17:02 +11:00
Tinderbox User
d458ef4acb update copyright notice 2013-04-02 23:46:03 +00:00
Evan Hunt
99bf6a57d9 [master] fix isc_time_formathttptmestamp() on win32 
3539.	[port]		win32: timestamp format didn't match other platforms.
 2013-04-01 22:27:49 -07:00
Evan Hunt
73b3019760 [master] address windows build warnings 2013-03-28 15:37:47 -07:00
Evan Hunt
96139421d6 [master] win32 portability fixes 2013-03-26 23:01:13 -07:00
Mark Andrews
36279f1ce1 assign to a int before calling setsockopt 2013-03-27 10:59:34 +11:00
Tinderbox User
0a00c3eb03 update copyright notice 2013-03-26 23:47:51 +00:00
Mark Andrews
d8c1e4eccf check that sent packet arrives 2013-03-26 16:41:49 +11:00
Mark Andrews
12753e9e31 check for MAP_FILE 2013-03-26 16:41:20 +11:00
Mark Andrews
22b5363195 printf -> fprintf 2013-03-26 16:40:14 +11:00
Mark Andrews
d91274d003 remove unnecessary close 2013-03-25 10:02:31 +11:00
Mark Andrews
0266cebbf0 use unsigned constant 2013-03-25 07:31:37 +11:00
Mark Andrews
6f85ff3aac cast to (void ) 2013-03-25 07:29:35 +11:00
Mark Andrews
cfb605168d include <sys/uio.h> 2013-03-25 07:24:59 +11:00
Tinderbox User
313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Mark Andrews
464e32079c address warnings 2013-03-23 19:41:34 +11:00
Mark Andrews
72b0326c20 check if IPV6_TCLASS is defined 2013-03-23 19:04:41 +11:00
Tinderbox User
1e9f7a42bc update copyright notice 2013-03-22 23:46:17 +00:00
Evan Hunt
cd594861c2 [master] add missing include 2013-03-22 14:50:22 -07:00
Evan Hunt
e57a83b576 [master] slaves notify before writing to disk 
3537.	[tuning]	Slave zones, when updated, now send NOTIFY messages
			to peers before being dumped to disk rather than
			after. [RT #27242]
 2013-03-22 14:14:59 -07:00
Evan Hunt
67adc03ef8 [master] add DSCP support 
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
 2013-03-22 14:05:33 -07:00
Mark Andrews
bbb3705e4c 3535. [bug] Minor win32 cleanups. [RT #32962] 2013-03-22 22:23:48 +11:00
Mark Andrews
80f1365a59 sock could be used uninitalized in isc_socketmgr_renderxml on error 2013-03-22 15:30:20 +11:00
Evan Hunt
4bf686cf5d [master] zone parsing broken with embedded null 
3534.	[bug]		Extra text after an embedded NULL was ignored when
			parsing zone files. [RT #32699]
 2013-03-21 19:30:10 -07:00
Tinderbox User
ad67363430 update copyright notice 2013-03-21 23:46:12 +00:00
Mark Andrews
c82da2167d 3531. [bug] win32: A uninitialized value could be returned on out 
of memory. [RT #32960]
 2013-03-22 09:21:30 +11:00
Tinderbox User
171f12f31e update copyright notice 2013-03-19 23:46:08 +00:00
Evan Hunt
625ee5d015 [master] add inttypes.h to rbt_test.c 2013-03-18 17:13:48 -07:00
Tinderbox User
be8fedce2a update copyright notice 2013-03-16 23:46:03 +00:00
Evan Hunt
741ebf1004 [master] make dst test work outside srcdir 
3526.	[cleanup]	Set up dependencies for unit tests correctly during
			build. [RT #32803]
 2013-03-15 07:35:56 -07:00
Tinderbox User
cfa2326b5c update copyright notice 2013-03-14 23:46:11 +00:00
Mark Andrews
73273ce28f add json.h 2013-03-15 09:11:13 +11:00
Mark Andrews
3d0aa29c26 add json.h 2013-03-15 00:04:11 +11:00
Evan Hunt
4eb998928b [master] algorithm flexibility for rndc 
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
 2013-03-13 17:53:11 -07:00
Mark Andrews
cedd50b3b6 make work without json 2013-03-14 11:12:27 +11:00
Tinderbox User
22dd28c5bc update copyright notice 2013-03-13 23:46:08 +00:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Evan Hunt
8a64253066 [master] fixed srcdir in nothreads build 2013-03-12 23:42:12 -07:00
Evan Hunt
62ac31d7fd [master] add inttypes.h to rbt.c 2013-03-12 20:44:41 -07:00
Evan Hunt
72c86c105a [master] DLZ modules: filesystem, ldap, wildcard 
3523.	[contrib]	Ported filesystem and ldap DLZ drivers to
			dynamically-loadable modules, and added the
			"wildcard" module based on a contribution from
			Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
 2013-03-11 17:03:46 -07:00
Evan Hunt
21a7fde6ba [master] handle servfail at DLZ zone apex 
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]
 2013-03-11 15:54:03 -07:00
Tinderbox User
b7e6fc2a4c update copyright notice 2013-03-08 23:47:06 +00:00
Mark Andrews
aababae795 3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249] 2013-03-08 21:12:42 +11:00
Mark Andrews
3a0da183bb 3520. [bug] 'mctx' was not being referenced counted in some places 
where it should have been.  [RT #32794]
 2013-03-08 14:38:03 +11:00
Mark Andrews
af21fc6644 3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit 
so that all dns_rrl_rtype_t enum values fit regardless
                        of whether it is teated as signed or unsigned by
                        the compiler. [RT #32792]
 2013-03-07 18:44:45 +11:00
Evan Hunt
929eed35ac [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-03-06 18:10:17 -08:00
Evan Hunt
61ddb38c2b [master] remove leftover debugging printf 2013-03-06 18:09:05 -08:00
Mark Andrews
e7b9603ead 3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777] 2013-03-07 07:13:38 +11:00
Mark Andrews
f3350b6718 silence compiler warnings 2013-03-05 23:41:22 +11:00
Mark Andrews
f9de007a57 #ifdef HAVE_GEOIP 2013-03-01 21:33:49 +11:00
Mark Andrews
e69e6105b2 #ifdef HAVE_GEOIP 2013-03-01 16:11:16 +11:00
Mark Andrews
8e5fce1f9c update copyrights 2013-03-01 10:39:29 +11:00
Evan Hunt
f61b05a6a5 [master] address warnings building exportlibs 2013-02-28 15:22:44 -08:00
Mark Andrews
8a896bc645 fix configure.in to remove warnings when running autoconf 
only compile geoip.o when requested.
    silence compiler warnings
 2013-03-01 09:58:32 +11:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size 
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
 2013-02-28 09:29:12 -08:00
Mark Andrews
33c14ca653 silence clang warning 2013-02-28 16:48:42 +11:00
Mark Andrews
fa23a7b8e9 silence locking false positive by puttling lock/unlock in same routine 2013-02-28 14:00:39 +11:00
Mark Andrews
b34b328287 explicitly ignore error returns 2013-02-28 13:44:14 +11:00
Evan Hunt
3fccc26025 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-27 18:29:53 -08:00
Evan Hunt
9cc2e4b4ab [master] ifdef around geoip syntax in parser 2013-02-27 18:29:30 -08:00
Mark Andrews
3426bd337d check the returns from isc_task_beginexclusive 2013-02-28 13:14:52 +11:00
Evan Hunt
501941f0b6 [master] add geoip support 
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
 2013-02-27 17:19:39 -08:00
Tinderbox User
bea3baa50c update copyright notice 2013-02-27 23:46:03 +00:00
Evan Hunt
f79c13fed8 [master] silence warning due to incorrect assert 2013-02-27 13:52:30 -08:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax 
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
 2013-02-27 11:53:58 -08:00
Evan Hunt
dbe761ac41 [master] better rrl shutdown bug fix 2013-02-26 23:39:38 -08:00
Evan Hunt
87ffe1bea7 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 22:41:48 -08:00
Evan Hunt
ae0fb42535 [master] back out previous rrl.c change 
Not the right fix; use ISC_LIST_INITANDAPPEND instead.
 2013-02-26 22:41:14 -08:00
Mark Andrews
36b3ac4dce add <isc/util.h> 2013-02-27 16:14:44 +11:00
Mark Andrews
fdc5f1702e silence compiler warnings 2013-02-27 15:57:46 +11:00
Evan Hunt
68357e5241 [master] avoid double-free in rrl 
- RRL could assert when freeing qname
 - also, changed test addresses from 192.168/16 to 192.0/16
 2013-02-26 19:15:11 -08:00
Evan Hunt
55f5787b35 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 17:29:51 -08:00
Evan Hunt
a4ee78d003 [master] silence warning 2013-02-26 17:28:41 -08:00
Mark Andrews
609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00