upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-27 03:51:16 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
25079 commits 18 branches 854 tags 440 MiB
Commit graph

10345 commits

Author SHA1 Message Date
Evan Hunt
5d4343a998 [master] fix md5 key id computation 
3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]
 2013-08-13 16:03:42 -07:00
Tinderbox User
21c8938824 update copyright notice 2013-08-12 23:46:05 +00:00
Mark Andrews
75ae74f8fd 3629. [func] Allow the printing of cryptographic fields in DNSSEC 
records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]
 2013-08-12 15:37:51 +10:00
Mark Andrews
16bd30ae69 3628. [func] Report DNSKEY key id's when dumping the cache. 
[RT #34533]
 2013-08-12 14:38:26 +10:00
Mark Andrews
df0892aea6 3627. [bug] RPZ changes were not effective on slaves. [RT #34450] 2013-08-09 13:23:01 +10:00
Evan Hunt
7ade93c328 [master] fix build error when IP_TOS is undefined 2013-08-08 19:15:11 -07:00
Evan Hunt
a499dddb4b [master] easier to read NSID output 
3626.	[func]		dig: NSID output now easier to read. [RT #21160]
 2013-08-08 16:50:34 -07:00
Mark Andrews
e543b4e5db remove redundent 'request-ixfr' 2013-08-01 14:38:27 +10:00
Mark Andrews
f45818b82a add comment 2013-07-26 10:25:45 +10:00
Evan Hunt
d640b4a0ab [master] perf: eliminate cache stats attach/detach 
3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]
 2013-07-25 10:51:31 -07:00
Tinderbox User
345a210f51 update copyright notice 2013-07-16 23:46:10 +00:00
Mark Andrews
fdb4ae8f6c 3621. [security] Incorrect bounds checking on private type 'keydata' 
can lead to a remotely triggerable REQUIRE failure
                        (CVE-2013-4854). [RT #34238]
 2013-07-17 08:03:50 +10:00
Mark Andrews
975172e3dc remove unused variable 2013-07-16 10:18:54 +10:00
Mark Andrews
6142269dcc remove unused assignment 2013-07-15 13:09:27 +10:00
Mark Andrews
7236e1bd00 remove dead code 2013-07-15 09:30:53 +10:00
Tinderbox User
44c016134f update copyright notice 2013-07-13 23:46:06 +00:00
Mark Andrews
09fec18669 fix unchecked null; value not read 2013-07-14 00:26:23 +10:00
Francis Dupont
41a6b3031e spelling 2013-07-13 01:39:41 +02:00
Evan Hunt
421d4a0647 [master] rpz work 
3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]
 2013-07-12 14:46:47 -07:00
Tinderbox User
dbd8673fa0 update copyright notice 2013-07-11 23:46:13 +00:00
Evan Hunt
0949306cb9 [master] check include file mtimes 
3618.	[func]		"rndc reload" now checks modification times of
			include files as well as master files to determine
			whether to skip reloading a zone. [RT #33936]
 2013-07-11 16:32:36 -07:00
Evan Hunt
cf0a69e999 [master] address zone->db races 
3616.	[bug]		Change #3613 was incomplete. [RT #34177]
 2013-07-11 09:51:47 -07:00
Evan Hunt
f4e309b177 [master] silence warning 2013-07-10 09:15:51 -07:00
Francis Dupont
a96e5ffbe0 spelling 2013-07-10 10:56:18 +02:00
Evan Hunt
927e4c9fec [master] address race conditions with removing inline zones 
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
 2013-07-09 17:39:21 -07:00
Tinderbox User
ca48f47d88 update copyright notice 2013-07-09 23:46:11 +00:00
Evan Hunt
4b13ea47db [master] check for -ljson-c as well as -ljson 
3512.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]
 2013-07-09 16:43:59 -07:00
Evan Hunt
5b7abbef51 [master] added isc_safe_memcmp() 
3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]
 2013-07-09 11:47:16 -07:00
Evan Hunt
eb4458b478 [master] prevent exportlib deadlock 
3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]
 2013-07-06 18:23:41 -07:00
Francis Dupont
c46fb8092d remove dns_adb_flushmatch from libdns.def 2013-07-04 10:56:18 +02:00
Evan Hunt
5bcbfa2da0 [master] add missing symbols 2013-07-01 10:44:16 -07:00
Evan Hunt
9d4ec6d2c5 [master] "flushtree -all" no longer optional 
Updated CHANGES note:
3606.	[func]		"rndc flushtree" now flushes matching
			records in the address database and bad cache
                        as well as the DNS cache. (Previously only the
                        DNS cache was flushed.) [RT #33970]
 2013-06-30 18:53:48 -07:00
Tinderbox User
9c5faa2ba8 update copyright notice 2013-06-26 23:46:14 +00:00
Evan Hunt
9fa5a723e1 [master] "rndc flushtree -all <name>" 
3606.	[func]		"rndc flushtree -all" flushes matching
			records in the ADB and bad cache as well as
			the DNS cache.  (Without the "-all" option,
			flushtree will still only flush records from
			the DNS cache.) [RT #33970]
 2013-06-26 14:59:32 -07:00
Evan Hunt
c5a53e9ab5 [master] fix WIN32 nmake crc64 
- trivial typo in CRC-64 windows build
 2013-06-26 14:49:01 -07:00
Evan Hunt
f42c0dcca8 [master] win32 fixes 
3605.	[port]		win32: Addressed several compatibility issues
			with newer versions of Visual Studio. [RT #33916]

Squashed commit of the following:

commit 4127af15f85da90cf2bd3a0c5a558daae89e833a
Author: Francis Dupont <fdupont@isc.org>
Date:   Tue Jun 25 22:41:53 2013 +0200

    make the last change to be text

commit 21ef4891b9ee3e3aefb45d4c80d5cb7ec78f264f
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Jun 25 12:35:08 2013 -0500

    [rt33916] re-worded for easier reading

commit 83828e47e62fea4070441e645ba8fed338255ceb
Author: Francis Dupont <fdupont@isc.org>
Date:   Mon Jun 24 16:08:11 2013 +0200

    introduce a VCRedistPath env var

commit 0337f2554f168993a65945e78c2879e9bfca5293
Author: Francis Dupont <fdupont@isc.org>
Date:   Sun Jun 23 01:23:26 2013 +0200

    _adjust_fdiv for VS < 2010

commit 375fdd5c06be276b0ff0ad589c0e22b809339fe9
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 16:27:04 2013 +0200

    move to MSVC v1600 as it still breaks on VS 2010

commit bfcaf72071e9d8df1d0ce0c5f05b69acd51bf698
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:57:35 2013 +0200

    WIN32: avoid addrinfo redef

commit 18504c3e50b11e66a0b573c7cb3d61094bfa5b52
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:54:38 2013 +0200

    WIN32: fseek/ftell

commit f9a4fdccc5ab1c74c64412fb76da7dfd161787b2
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:13:01 2013 +0200

    fix WIN32 error redefs in net.h (isc ad lwres libs)
 2013-06-26 14:38:35 -07:00
Evan Hunt
7aba1a9660 [master] fix compile bug with json but no xml 
3604.	[bug]		Fixed a compile-time error when building with
			JSON but not XML. [RT #33959]
 2013-06-26 14:12:27 -07:00
Tinderbox User
ca283f2ecb update copyright notice 2013-06-25 23:48:02 +00:00
Mark Andrews
682a574e67 3603. [bug] Install <isc/stat.h>. [RT #33956] 2013-06-25 23:56:45 +10:00
Evan Hunt
c3b5542144 [master] check for physical equivalence in names 
3599.	[tuning]	Check for pointer equivalence in name comparisons.
			[RT #18125]
 2013-06-18 18:14:28 -07:00
Mark Andrews
77fa1a27dd pass correct type off_t 2013-06-19 07:00:07 +10:00
Mark Andrews
e457f75632 handle file offsets bigger that memory offsets 2013-06-19 01:25:35 +10:00
Tinderbox User
2777329775 update copyright notice 2013-06-17 23:46:12 +00:00
Evan Hunt
31707708c5 [master] portability fixes for map files 
3598.	[cleanup]	Improved portability of map file code. [RT #33820]
 2013-06-17 09:09:43 -07:00
Evan Hunt
b7e40659ef [master] rebuild resigning heaps when loading map files 
3597.	[bug]		Ensure automatic-resigning heaps are reconstructed
			when loading zones in map format. [RT #33381]
 2013-06-14 10:16:10 -07:00
Evan Hunt
8f1e278931 [master] updated win32 build 
3596.	[port]		Updated win32 build documentation, added
                        dnssec-verify. [RT #22067]
 2013-06-13 17:31:41 -07:00
Tinderbox User
1443158c11 update copyright notice 2013-06-13 23:46:13 +00:00
Evan Hunt
166c4c6c5b [master] fix win32 build 
3595.	[port]		win32: Fix build problems introduced by change #3550.
			[RT #33807]
 2013-06-13 12:36:39 -07:00
Tinderbox User
8e9b13f510 update copyright notice 2013-06-12 23:46:16 +00:00
Francis Dupont
b4a865ee13 merge rt33813: MSVC doesn't propage const to dynamic array sizes 2013-06-12 19:14:30 +02:00
Francis Dupont
c213258356 merge rt33812: trivial updates for WIN32 build 2013-06-12 19:09:40 +02:00
Mark Andrews
baa9d706bd move declaration to begining of block 2013-06-12 21:06:00 +10:00
Mark Andrews
cc74f3ade0 silence compiler warning 2013-06-12 11:57:52 +10:00
Mark Andrews
8e15d5eb3a 3593. [func] Update EDNS processing to better track remote server 
capabilities. [RT #30655]
 2013-06-12 11:31:30 +10:00
Mark Andrews
0a6bfbc939 handle realloc failure [RT #32105] 2013-06-11 16:03:22 +10:00
Mark Andrews
8dda0f671d remove unnecessary DE_CONST; pass in as (const void *) 2013-06-11 12:25:43 +10:00
Evan Hunt
7422f1f981 [master] fix compiler warning 2013-06-10 18:53:41 -07:00
Tinderbox User
5924e4ace0 update copyright notice 2013-06-10 23:46:19 +00:00
Evan Hunt
e59937c728 [rt33746] use CRC64 for map file error detection 
3591.	[func]		Use CRC-64 to detect map file corruption at load
			time. [RT #33746]
 2013-06-10 14:19:22 -07:00
Mark Andrews
c6eb92beb1 3589. [func] Report serial numbers in when starting zone transfers. 
Report accepted NOTIFY requests including serial.
                        [RT# 33037]
 2013-06-08 09:49:03 +10:00
Mark Andrews
8144dc702b 3587. [func] 'named -g' now checks the logging configuration but 
does not use it. [RT #33473]
 2013-06-06 11:08:16 +10:00
Tinderbox User
099fa63e55 update copyright notice 2013-06-05 23:46:14 +00:00
Evan Hunt
276457f7a3 [master] assertion failure in resolver.c 
3584.	[security]	Caching data from an incompletely signed zone could
			trigger an assertion failure in resolver.c [RT #33690]
 2013-06-04 11:22:47 -07:00
Mark Andrews
2347c72129 3583. [bug] Address memory leak in GSS-API processing [RT #33574] 2013-06-04 11:59:57 +10:00
Mark Andrews
1e34fe9044 3582. [bug] Silence false positive warning regarding missing file 
directive for inline slave zones.  [RT #33662]
 2013-06-04 11:34:03 +10:00
Mark Andrews
ff8ab6befe redo: 3576. [bug] Address a shutdown race when validating. [RT #33573] 2013-06-04 11:27:26 +10:00
Evan Hunt
5183f9d9da [master] possible race in acache.c 
3580.	[bug]		Addressed a possible race in acache.c [RT #33602]
 2013-05-31 17:30:09 -07:00
Mark Andrews
c611465739 address memory in dns_view_getsecroots failure 2013-05-31 12:31:01 +10:00
Mark Andrews
5f238c3c64 3577. [bug] Handle zero TTL values better. [RT #33411] 2013-05-29 18:10:11 +10:00
Mark Andrews
2cd3c8856c 3576. [bug] Address a shutdown race when validating. [RT #33573] 2013-05-29 18:02:24 +10:00
Evan Hunt
f3c8e48b95 [master] change RRL log category 'query-errors' 
3575.	[func]		Changed the logging category for RRL events from
			'queries' to 'query-errors'. [RT #33540]
 2013-05-21 12:20:54 -07:00
Mark Andrews
f9ed68cc5d permit hexadecimal and octal dscp values 2013-05-17 21:01:02 +10:00
Mark Andrews
01e41f88b0 check for data being null 2013-05-09 21:29:57 +10:00
Mark Andrews
fb89b7cb33 add gen.dSYM 2013-05-09 10:54:36 +10:00
Tinderbox User
ee53fcb61c update copyright notice 2013-05-08 23:46:09 +00:00
Mark Andrews
62f016d5d3 3571. [bug] Address race condition in dns_client_startresolve(). 
[RT #33234]

Squashed commit of the following:

commit ebfb9f3e783531cc1369bf519eb1c33437ec6f1a
Author: Evan Hunt <each@isc.org>
Date:   Wed May 8 11:47:52 2013 -0700

    [rt33234] style

commit 0a915af759670aadb2455711997d9f29e5c3f794
Author: Mark Andrews <marka@isc.org>
Date:   Wed May 8 18:23:57 2013 +1000

    handle dns_client race
 2013-05-09 08:41:24 +10:00
Mark Andrews
3f97149ea3 assert if zone and zone->raw are the same; this should help coverity static analysis 2013-05-08 13:03:38 +10:00
Tinderbox User
180c8cf5fa update copyright notice 2013-05-07 23:46:05 +00:00
Evan Hunt
127a4a90b0 [master] more map file sanity checks 
(not adding a new CHANGES note because this is an extension of the
previous one, change #3570.)
 2013-05-07 13:54:58 -07:00
Mark Andrews
831b70f5bd remove dead code 2013-05-07 22:28:19 +10:00
Evan Hunt
d9f0c713fe [master] handle corrupted pointers in map files 
3570.	[bug]		Check internal pointers are valid when loading map
                        files. [RT #33403]
 2013-05-06 15:40:40 -07:00
Evan Hunt
e47208b6fb [master] silence ccc-analyzer 
3567.	[bug]		Silence clang static analyzer warnings. [RT #33365]
 2013-05-03 14:31:27 -07:00
Evan Hunt
34f3693b93 [master] log forwarded updates 
3566.	[func]		Log when forwarding updates to master. [RT #33240]
 2013-05-03 14:05:32 -07:00
Evan Hunt
1a076410c2 [master] fix corrupt map file handling 
3564.	[bug]		Improved handling of corrupted map files. [RT #33380]
 2013-05-03 14:00:12 -07:00
Mark Andrews
b07086de42 add missing parameter sha1 2013-05-03 16:01:22 +10:00
Mark Andrews
0dc44869b9 remove special distclean target for irs 2013-05-03 13:32:57 +10:00
Tinderbox User
52d3ce3ada update copyright notice 2013-05-02 23:46:13 +00:00
Evan Hunt
03b5d2689d [master] add hash to map files 
3562.	[func]		Update map file header format to include a SHA-1 hash
			of the database content, so that corrupted map files
			can be rejected at load time. [RT #32459]
 2013-05-01 22:20:02 -07:00
Tinderbox User
954e43e605 update copyright notice 2013-04-30 04:51:59 +00:00
Mark Andrews
26bb3b7a67 3559. [func] Check that both forms of Sender Policy Framework 
records exist or do not exist. [RT #33355]
 2013-04-30 13:49:41 +10:00
Mark Andrews
ec8a802114 3557. [bug] Reloading redirect zones was broken. [RT #33292] 2013-04-29 15:20:09 +10:00
Tinderbox User
9f40a78322 update copyright notice 2013-04-28 23:46:07 +00:00
Evan Hunt
73ad83bcf0 [master] d.root-servers.net AAAA 
3556.	[maint]		Added AAAA for D.ROOT-SERVERS.NET.
 2013-04-27 16:42:59 -07:00
Evan Hunt
5cedb1e345 [master] minor code cleanup in rrl.c:expand_entries() 
from RT #33137
 2013-04-26 10:59:50 -07:00
Evan Hunt
ff5ac6d421 [master] address two more possible acache asserts 
3555.	[bug]		Address theoretical race conditions in acache.c
			(change #3553 was incomplete). [RT #33252]
 2013-04-25 18:02:52 -07:00
Evan Hunt
a6d43d18b1 [master] fixed several RRL issues 
3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]
 2013-04-25 14:42:44 -07:00
Evan Hunt
330f98fe3b [master] double free caused assertion in acache 
3553.	[bug]		Address suspected double free in acache. [RT #33252]
(cherry picked from commit 11b04b18f8ecb7c0119a7a6b6bbf8f5bad789c9a)
 2013-04-25 10:41:06 -07:00
Mark Andrews
b4914b3d69 3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686] 2013-04-19 12:36:02 +10:00
Tinderbox User
d1fd0990fc update copyright notice 2013-04-12 23:46:05 +00:00
Mark Andrews
865e411997 include <irs/netdb.h> as we are linking against libirs 2013-04-12 22:50:11 +10:00
Mark Andrews
214692d622 check result code 2013-04-12 14:41:10 +10:00
Mark Andrews
02638c8b40 silence hpux compiler warnings 2013-04-12 14:06:41 +10:00
Mark Andrews
794f12f4ff fixup copyrights 2013-04-12 13:49:32 +10:00
Tinderbox User
08df939613 update copyright notice 2013-04-11 23:46:07 +00:00
Mark Andrews
8ce8052bb8 handle both cmsg types IP_TOS and IP_RECVTOS being used to return IP_TOS 2013-04-12 09:33:33 +10:00
Mark Andrews
da87a34cd2 don't call dns_message_destroy in make_querymessage 2013-04-11 18:11:12 +10:00
Mark Andrews
45b727f651 silence coverity warnings 2013-04-11 17:07:50 +10:00
Evan Hunt
fce7ba0f07 [master] fix build failure on hpux 2013-04-10 21:59:14 -07:00
Evan Hunt
634a52966f [master] catch SIGHUP correctly in nothreads 2013-04-10 19:43:43 -07:00
Mark Andrews
e035632392 remove lib/export 2013-04-11 10:16:14 +10:00
Tinderbox User
12253af346 update copyright notice 2013-04-10 23:46:01 +00:00
Evan Hunt
53b6877dde [master] add config.h 2013-04-10 14:23:54 -07:00
Evan Hunt
b99bfa184b [master] unify internal and export libraries 
3550.	[func]		Unified the internal and export versions of the
			BIND libraries, allowing external clients to use
			the same libraries as BIND. [RT #33131]
 2013-04-10 13:49:57 -07:00
Tinderbox User
526cc7c2c0 update copyright notice 2013-04-09 23:46:07 +00:00
Mark Andrews
11d945cd75 silence signed/unsigned compare warning 2013-04-09 06:32:10 +10:00
Mark Andrews
4adf97c32f 3548. [bug] The NSID request code in resolver.c was broken 
resulting in invalid EDNS options being sent.
                        [RT #33153]
 2013-04-08 16:29:26 +10:00
Mark Andrews
1cc4695f0d 3547. [bug] Some malformed unknown rdata records were not properly 
detected and rejected. [RT #33129]
 2013-04-08 09:55:14 +10:00
Tinderbox User
ea3dd509f6 update copyright notice 2013-04-04 23:46:06 +00:00
Mark Andrews
3a6d62c59f 3546. [func] Add EUI48 and EUI64 types. [RT #33082] 2013-04-05 09:07:28 +11:00
Evan Hunt
ad668472f1 [master] bug in rrl slip 
3545.	[bug]		RRL slip behavior was incorrect when set to 1.
			[RT #33111]
 2013-04-04 10:32:19 -07:00
Tinderbox User
f9adb48aea update copyright notice 2013-04-03 23:46:07 +00:00
Mark Andrews
515991cda4 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2013-04-03 14:04:48 +00:00
Mark Andrews
1b2ba49571 link export/libisccfg againt DNS_CRYPTO_LIBS 2013-04-03 14:03:27 +00:00
Mark Andrews
c15b536ddb 3543. [bug] Update socket stucture before attaching to socket 
manager after accert. [RT #33084]
 2013-04-03 17:42:42 +11:00
Mark Andrews
b1fb5abb50 add insist to try to prevent coverity false positive 2013-04-03 17:37:15 +11:00
Mark Andrews
8013077aa7 3541. [bug] The parts if libdns was not being properly initialized 
in when built in libexport mode. [RT #33028]
 2013-04-03 17:27:40 +11:00
Mark Andrews
8c460e0159 3540. [bug] libt_api: t_info and t_assert were not thread safe. 2013-04-03 17:17:02 +11:00
Tinderbox User
d458ef4acb update copyright notice 2013-04-02 23:46:03 +00:00
Evan Hunt
99bf6a57d9 [master] fix isc_time_formathttptmestamp() on win32 
3539.	[port]		win32: timestamp format didn't match other platforms.
 2013-04-01 22:27:49 -07:00
Evan Hunt
73b3019760 [master] address windows build warnings 2013-03-28 15:37:47 -07:00
Evan Hunt
96139421d6 [master] win32 portability fixes 2013-03-26 23:01:13 -07:00
Mark Andrews
36279f1ce1 assign to a int before calling setsockopt 2013-03-27 10:59:34 +11:00
Tinderbox User
0a00c3eb03 update copyright notice 2013-03-26 23:47:51 +00:00
Mark Andrews
d8c1e4eccf check that sent packet arrives 2013-03-26 16:41:49 +11:00
Mark Andrews
12753e9e31 check for MAP_FILE 2013-03-26 16:41:20 +11:00
Mark Andrews
22b5363195 printf -> fprintf 2013-03-26 16:40:14 +11:00
Mark Andrews
d91274d003 remove unnecessary close 2013-03-25 10:02:31 +11:00
Mark Andrews
0266cebbf0 use unsigned constant 2013-03-25 07:31:37 +11:00
Mark Andrews
6f85ff3aac cast to (void ) 2013-03-25 07:29:35 +11:00
Mark Andrews
cfb605168d include <sys/uio.h> 2013-03-25 07:24:59 +11:00
Tinderbox User
313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Mark Andrews
464e32079c address warnings 2013-03-23 19:41:34 +11:00
Mark Andrews
72b0326c20 check if IPV6_TCLASS is defined 2013-03-23 19:04:41 +11:00
Tinderbox User
1e9f7a42bc update copyright notice 2013-03-22 23:46:17 +00:00
Evan Hunt
cd594861c2 [master] add missing include 2013-03-22 14:50:22 -07:00
Evan Hunt
e57a83b576 [master] slaves notify before writing to disk 
3537.	[tuning]	Slave zones, when updated, now send NOTIFY messages
			to peers before being dumped to disk rather than
			after. [RT #27242]
 2013-03-22 14:14:59 -07:00
Evan Hunt
67adc03ef8 [master] add DSCP support 
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
 2013-03-22 14:05:33 -07:00
Mark Andrews
bbb3705e4c 3535. [bug] Minor win32 cleanups. [RT #32962] 2013-03-22 22:23:48 +11:00
Mark Andrews
80f1365a59 sock could be used uninitalized in isc_socketmgr_renderxml on error 2013-03-22 15:30:20 +11:00
Evan Hunt
4bf686cf5d [master] zone parsing broken with embedded null 
3534.	[bug]		Extra text after an embedded NULL was ignored when
			parsing zone files. [RT #32699]
 2013-03-21 19:30:10 -07:00
Tinderbox User
ad67363430 update copyright notice 2013-03-21 23:46:12 +00:00
Mark Andrews
c82da2167d 3531. [bug] win32: A uninitialized value could be returned on out 
of memory. [RT #32960]
 2013-03-22 09:21:30 +11:00
Tinderbox User
171f12f31e update copyright notice 2013-03-19 23:46:08 +00:00
Evan Hunt
625ee5d015 [master] add inttypes.h to rbt_test.c 2013-03-18 17:13:48 -07:00
Tinderbox User
be8fedce2a update copyright notice 2013-03-16 23:46:03 +00:00
Evan Hunt
741ebf1004 [master] make dst test work outside srcdir 
3526.	[cleanup]	Set up dependencies for unit tests correctly during
			build. [RT #32803]
 2013-03-15 07:35:56 -07:00
Tinderbox User
cfa2326b5c update copyright notice 2013-03-14 23:46:11 +00:00
Mark Andrews
73273ce28f add json.h 2013-03-15 09:11:13 +11:00
Mark Andrews
3d0aa29c26 add json.h 2013-03-15 00:04:11 +11:00
Evan Hunt
4eb998928b [master] algorithm flexibility for rndc 
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
 2013-03-13 17:53:11 -07:00
Mark Andrews
cedd50b3b6 make work without json 2013-03-14 11:12:27 +11:00
Tinderbox User
22dd28c5bc update copyright notice 2013-03-13 23:46:08 +00:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Evan Hunt
8a64253066 [master] fixed srcdir in nothreads build 2013-03-12 23:42:12 -07:00
Evan Hunt
62ac31d7fd [master] add inttypes.h to rbt.c 2013-03-12 20:44:41 -07:00
Evan Hunt
72c86c105a [master] DLZ modules: filesystem, ldap, wildcard 
3523.	[contrib]	Ported filesystem and ldap DLZ drivers to
			dynamically-loadable modules, and added the
			"wildcard" module based on a contribution from
			Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
 2013-03-11 17:03:46 -07:00
Evan Hunt
21a7fde6ba [master] handle servfail at DLZ zone apex 
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]
 2013-03-11 15:54:03 -07:00
Tinderbox User
b7e6fc2a4c update copyright notice 2013-03-08 23:47:06 +00:00
Mark Andrews
aababae795 3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249] 2013-03-08 21:12:42 +11:00
Mark Andrews
3a0da183bb 3520. [bug] 'mctx' was not being referenced counted in some places 
where it should have been.  [RT #32794]
 2013-03-08 14:38:03 +11:00
Mark Andrews
af21fc6644 3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit 
so that all dns_rrl_rtype_t enum values fit regardless
                        of whether it is teated as signed or unsigned by
                        the compiler. [RT #32792]
 2013-03-07 18:44:45 +11:00
Evan Hunt
929eed35ac [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-03-06 18:10:17 -08:00
Evan Hunt
61ddb38c2b [master] remove leftover debugging printf 2013-03-06 18:09:05 -08:00
Mark Andrews
e7b9603ead 3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777] 2013-03-07 07:13:38 +11:00
Mark Andrews
f3350b6718 silence compiler warnings 2013-03-05 23:41:22 +11:00
Mark Andrews
f9de007a57 #ifdef HAVE_GEOIP 2013-03-01 21:33:49 +11:00
Mark Andrews
e69e6105b2 #ifdef HAVE_GEOIP 2013-03-01 16:11:16 +11:00
Mark Andrews
8e5fce1f9c update copyrights 2013-03-01 10:39:29 +11:00
Evan Hunt
f61b05a6a5 [master] address warnings building exportlibs 2013-02-28 15:22:44 -08:00
Mark Andrews
8a896bc645 fix configure.in to remove warnings when running autoconf 
only compile geoip.o when requested.
    silence compiler warnings
 2013-03-01 09:58:32 +11:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size 
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
 2013-02-28 09:29:12 -08:00
Mark Andrews
33c14ca653 silence clang warning 2013-02-28 16:48:42 +11:00
Mark Andrews
fa23a7b8e9 silence locking false positive by puttling lock/unlock in same routine 2013-02-28 14:00:39 +11:00
Mark Andrews
b34b328287 explicitly ignore error returns 2013-02-28 13:44:14 +11:00
Evan Hunt
3fccc26025 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-27 18:29:53 -08:00
Evan Hunt
9cc2e4b4ab [master] ifdef around geoip syntax in parser 2013-02-27 18:29:30 -08:00
Mark Andrews
3426bd337d check the returns from isc_task_beginexclusive 2013-02-28 13:14:52 +11:00
Evan Hunt
501941f0b6 [master] add geoip support 
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
 2013-02-27 17:19:39 -08:00
Tinderbox User
bea3baa50c update copyright notice 2013-02-27 23:46:03 +00:00
Evan Hunt
f79c13fed8 [master] silence warning due to incorrect assert 2013-02-27 13:52:30 -08:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax 
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
 2013-02-27 11:53:58 -08:00
Evan Hunt
dbe761ac41 [master] better rrl shutdown bug fix 2013-02-26 23:39:38 -08:00
Evan Hunt
87ffe1bea7 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 22:41:48 -08:00
Evan Hunt
ae0fb42535 [master] back out previous rrl.c change 
Not the right fix; use ISC_LIST_INITANDAPPEND instead.
 2013-02-26 22:41:14 -08:00
Mark Andrews
36b3ac4dce add <isc/util.h> 2013-02-27 16:14:44 +11:00
Mark Andrews
fdc5f1702e silence compiler warnings 2013-02-27 15:57:46 +11:00
Evan Hunt
68357e5241 [master] avoid double-free in rrl 
- RRL could assert when freeing qname
 - also, changed test addresses from 192.168/16 to 192.0/16
 2013-02-26 19:15:11 -08:00
Evan Hunt
55f5787b35 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 17:29:51 -08:00
Evan Hunt
a4ee78d003 [master] silence warning 2013-02-26 17:28:41 -08:00
Mark Andrews
609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00
Mark Andrews
30b7c81c13 3500. [port] Support NAPTR regular expression validation on 
all platforms.  [RT #32688]
 2013-02-27 08:59:04 +11:00
Evan Hunt
e0c4f1f5cc [master] silence RRL warnings 2013-02-26 00:03:49 -08:00
Tinderbox User
f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt
37418116d5 [master] handle failures from dns_rpz_add() 
- I noticed a problem after merge, vjs supplied a fix, I have
    reviewed it, no ticket number.
 2013-02-25 14:38:08 -08:00
Evan Hunt
dcf426e9b5 [master] corrected typos & unintialized variable 2013-02-25 13:23:42 -08:00
Evan Hunt
94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's) 
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
 2013-02-25 12:46:51 -08:00
Evan Hunt
55e5c51e66 [master] DNS RRL 
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
 2013-02-25 12:45:56 -08:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
df925e6c66 [master] add zone memory context pools 
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]
 2013-02-20 21:39:05 -08:00
Evan Hunt
a81ae06ed3 [master] forbid inline-signing slave with no file 
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
 2013-02-20 14:01:31 -08:00
Tinderbox User
9d8985bea9 update copyright notice 2013-02-18 23:45:58 +00:00
Mark Andrews
740e7340c5 3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT. 
dns_dlzcreate() failed to properly initialize
                        dlzdb.link.  When cloning a rdataset do not copy
                        the link contents.  [RT #32651]

Squashed commit of the following:

commit c36c49cbdaeec8b2506dffadbffa543283702fa2
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:24:57 2013 +1100

    don't copy the link when cloning a rdataset

commit 9fef5827edcc925075832dcce900eeca9057456d
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:23:25 2013 +1100

    initialise the dlzdb link; don't return a stale pointer on error

commit a13c584732eae2dde48920a73886b54f1fe6b030
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:21:59 2013 +1100

    turn on ISC_LIST_CHECKINIT
 2013-02-19 07:28:24 +11:00
Mark Andrews
3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User
32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00
Mark Andrews
c9297d3759 3487. [bug] Change 3444 was not complete. There was a additional 
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
 2013-02-16 07:45:43 +11:00
Evan Hunt
0b8bd3a4ae [master] address TKEY bugs 
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:59:46 2013 -0800

    [rt32506] don't dump key if dump is unimplemented

commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:42:25 2013 -0800

    [rt32506] make sure LRU needs adjusting before adjusting it

commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 12:28:28 2013 -0800

    [rt32506] demonstrate bugs in tkey test
 2013-02-15 10:19:50 -08:00
Mark Andrews
52946dc6c0 silence compiler warning 2013-02-15 17:41:53 +11:00
Mark Andrews
7e9ccec638 3485. [cleanup] Only compile openssl_gostlink.c if we support GOST. 2013-02-12 13:03:34 +11:00
Tinderbox User
4486374631 update copyright notice 2013-02-08 23:45:50 +00:00
Evan Hunt
b748b5e2c2 [master] fix cache/ADB stats in new stats schema 
new stats that were added for 9.10 (changes 3319-3326) were not
    all updated when the new statistics schema was merged (change 3418).

3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]
 2013-02-08 14:53:14 -08:00
Tinderbox User
e38affadb3 update copyright notice 2013-02-05 23:45:50 +00:00
Mark Andrews
7d517b64d5 explict cast to (char *) from (void *) to silence compiler warning in %s checking 2013-02-05 14:24:32 +11:00
Evan Hunt
9dac1de625 [master] silence logging noise 
3480.	[bug]		Silence logging noise when setting up zone
			statistics. [RT #32525]
 2013-02-02 13:59:49 -08:00
Tinderbox User
17131a9459 update copyright notice 2013-01-25 23:45:56 +00:00
Mark Andrews
9c9b75c435 3479. [bug] Address potential memory leaks in gssapi support 
code. [RT #32405]
 2013-01-25 12:23:38 +11:00
Evan Hunt
c9611b4573 [master] change "fast" to "map" 
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
 2013-01-24 14:20:48 -08:00
Evan Hunt
8f7d23a25c Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-23 15:48:47 -08:00
Tinderbox User
3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00
Evan Hunt
ffff5d6792 [master] fix dns_request_createvia assert 
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
 2013-01-23 15:39:05 -08:00
Evan Hunt
641e87a1a0 [master] avoid active-counter underflow 
3472.	[bug]		The active-connections counter in the socket
			statistics could underflow. [RT #31747]
(cherry picked from commit 4dfe072abe4e76f5078a38ea0b97800333290877)
 2013-01-23 14:28:23 -08:00
Evan Hunt
a0a1003895 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-22 16:13:09 -08:00
Evan Hunt
214836c184 [master] dump masterfile after successful xfrin 
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
 2013-01-22 15:49:50 -08:00
Tinderbox User
b95504f9a7 update copyright notice 2013-01-22 23:45:48 +00:00
Evan Hunt
cbd1fa092e [master] DLZ fixes 
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
 2013-01-22 15:13:08 -08:00
Tinderbox User
5ac5300fdf update copyright notice 2013-01-17 23:46:25 +00:00
Mark Andrews
444f2a8efd add POST's 2013-01-17 23:24:54 +11:00
Mark Andrews
2afbf0891c s/head/tail/ 2013-01-17 21:47:39 +11:00
Mark Andrews
d8e8abdff9 Silence "Access to field 'refs' results in a dereference of a null pointer" by adding appropriate assertions. 2013-01-17 14:38:28 +11:00
Mark Andrews
d710475e18 Silence "Use of memory after it is freed" by asserting the head and tail of list are not the element after it is unlinked from the list. 2013-01-17 14:22:30 +11:00
Tinderbox User
54c820164a update copyright notice 2013-01-15 23:45:50 +00:00
Mark Andrews
70b0f9e179 silence compiler warning: Value stored to '?' is never used 2013-01-16 07:13:08 +11:00
Tinderbox User
dc3d68d6fe update copyright notice 2013-01-11 23:46:02 +00:00
Mark Andrews
c8bfcec3c9 silence compiler warning 2013-01-11 17:38:58 +11:00
Mark Andrews
3760ce53f2 add dns_zone_clearqueryaoncl, dns_zone_getqueryaoncl 2013-01-11 16:56:26 +11:00
Mark Andrews
5cd7ca9dbd windows snprint support 2013-01-11 16:26:30 +11:00
Mark Andrews
99394e9807 3465. [bug] Handle isolated reserved ports. [RT #31778] 2013-01-11 14:10:07 +11:00
Mark Andrews
0762ca086e record 9.8.x range info 2013-01-11 11:51:37 +11:00
Tinderbox User
5c6b95ba1b update copyright notice 2013-01-10 23:46:00 +00:00
Mark Andrews
4801931443 3461. [bug] Negative responses could incorrectly have AD=1 
set. [RT #32237]
 2013-01-10 23:09:08 +11:00
Mark Andrews
6a528eaa09 remove dead code 2013-01-10 18:13:25 +11:00
Tinderbox User
b941edbeb5 update copyright notice 2013-01-09 23:45:53 +00:00
Mark Andrews
c07c2a862e 3458. [bug] Return FORMERR when presented with a overly long 
domain named in a request. [RT #29682]
 2013-01-10 10:30:15 +11:00
Mark Andrews
f1c1aab2c9 3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836] 2013-01-10 08:26:31 +11:00
Mark Andrews
6018bd957d remove dead code 2013-01-09 21:50:20 +11:00
Mark Andrews
f622386388 use known length for known algorithns in fromtext_dlv cf fromtext_ds 2013-01-09 21:11:16 +11:00
Mark Andrews
513b5e8e51 3373. [bug] win32: open raw files in binary mode. [RT #30944] 
was not complete openfile_fast and openfile_raw should be using mode "rb"
rather than "r".
 2013-01-09 17:03:03 +11:00
Mark Andrews
aa24128022 3454. [port] sparc64: improve atomic support. [RT #25182] 2013-01-09 12:55:32 +11:00
Tinderbox User
afe7d4b934 update copyright notice 2013-01-08 23:45:50 +00:00
Mark Andrews
fc0bfa07c7 3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;' 
failed. [RT #31960]
 2013-01-09 07:40:27 +11:00
Mark Andrews
c9cecf7bb5 3452. [bug] Accept duplicate singlton records. [RT #32329] 2013-01-08 10:58:42 +11:00
Tinderbox User
e436a3d965 update copyright notice 2013-01-06 23:45:45 +00:00
Mark Andrews
c359f7b10f 3451. [port] Increase per thread stack size from 64K to 1M. 
[RT #32230]
 2013-01-07 09:52:16 +11:00
Mark Andrews
016eea4c62 remove dead code 2013-01-06 07:48:01 +11:00
Tinderbox User
6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Mark Andrews
f7d6bc93d1 make static 2013-01-05 00:32:38 +11:00
Mark Andrews
cbb2a0ebea silence compiler warning 2013-01-04 15:57:38 +11:00
Evan Hunt
f0a3b10baa [master] add print.h 2013-01-03 18:22:52 -08:00
Mark Andrews
8bd5bcd2a7 3445. [bug] Warn about zone files with blank owner names 
immediately after $ORIGIN directives. [RT #31848]

Conflicts:
	lib/dns/tests/master_test.c
 2013-01-04 12:16:55 +11:00
Mark Andrews
e285c6ea84 3449. [bug] gen.c: use the pre-processor to construct format 
strings so that compiler can perform sanity checks;
                        check the snprintf results. [RT #17576]
 2013-01-04 11:07:58 +11:00
Tinderbox User
d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User
024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Tinderbox User
9191b6c9e8 update copyright notice 2012-12-20 23:45:48 +00:00
Evan Hunt
086cb64a78 [master] remove unnecessary memcpy 2012-12-20 10:33:47 -08:00
Mark Andrews
45d4341eed silence signed/unsigned warning; rename log -> fctx_log 2012-12-19 12:39:54 +11:00
Evan Hunt
3ad3e9c948 [master] reject $ORIGIN before inherited name 
3445.	[bug]		Reject zone files with blank owner names immediately
			after $ORIGIN directives. [RT #31848]
 2012-12-18 16:17:55 -08:00
Tinderbox User
b16174507d update copyright notice 2012-12-18 23:45:50 +00:00
Mark Andrews
8462dfb880 3443. [bug] The NOQNAME proof was not being returned from cached 
insecure responses. [RT #21409]
 2012-12-19 09:55:02 +11:00
Mark Andrews
9f6b57798d 3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13. 2012-12-14 12:48:29 +11:00
Mark Andrews
fcc04c160f 3440. [bug] Reorder get_key_struct to not trigger a assertion when 
cleaning up due to out of memory error. [RT #32131]
 2012-12-13 11:18:01 +11:00
Mark Andrews
463f4ad70b silence clang --analyzer warnin by checking rdata.length 2012-12-10 08:24:17 +11:00
Tinderbox User
b8e2e5dd86 update copyright notice 2012-12-08 23:45:51 +00:00
Mark Andrews
50aaa90130 RETTOK -> RETERR 2012-12-09 07:45:51 +11:00
Mark Andrews
e85702ce5b 3438. [bug] Don't accept unknown data escape in quotes. [RT #32031] 
Squashed commit of the following:

commit 7ad3daade513c94a1c92ee7c91c112f161d13ef4
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 15:03:44 2012 +1100

    look at the second token to determine if a TXT record in of unknown format or not

commit 7df32138462646f6aee84ffa56d02ac24ec8d672
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 12:42:18 2012 +1100

    '"\#"' was incorrectly being treated as a unknown data escape sequence.
 2012-12-08 14:05:32 +11:00
Mark Andrews
6f7abb89ec 3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialise 
buffers with constant data. [RT #32064]

Squashed commit of the following:

commit 3433b96bf11f8c90ccbe412f01d02a6d8bbc2d33
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:41:16 2012 +1100

    isc_buffer_init -> isc_buffer_constinit

commit c22dbcc1122a0a44f7b46068e0ccbc25353a57d5
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:38:39 2012 +1100

    isc_buffer_init -> isc_buffer_constinit

commit 900820416c45c1887d0d22d7a010df60a903bd56
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:24:19 2012 +1100

    remove isc_buffer_reconstinit

commit f815711c17b05f9961786a90b9bae902d3c01494
Author: Mark Andrews <marka@isc.org>
Date:   Wed Dec 5 15:42:57 2012 +1100

    add isc_buffer_constinit
 2012-12-08 12:48:57 +11:00
Tinderbox User
aae306e914 update copyright notice 2012-12-07 23:45:48 +00:00
Evan Hunt
45f3693294 [master] check malloc/calloc return values 
3436.	[bug]		Check malloc/calloc return values. [RT #32088]
 2012-12-07 12:23:58 -08:00
Evan Hunt
abff0f462a [master] pass client info to DLZ findzone method 
3434.   [bug]           Pass client info to the DLZ findzone() entry
                        point in addition to lookup().  This makes it
                        possible for a database to answer differently
                        whether it's authoritative for a name depending
                        on the address of the client.  [RT #31775]
 2012-12-06 12:59:36 -08:00
Evan Hunt
177be355d4 [master] handle ISC_R_NOMORE correctly 
3433.	[bug]		dlz_findzone() did not correctly handle
			ISC_R_NOMORE. [RT #31172]
 2012-12-06 12:41:58 -08:00
Evan Hunt
2b8bed6681 [master] multiple-dlz/dlz-nxdomain 
3432.	[func]		Multiple DLZ databases can now be configured.
			DLZ databases are searched in the order configured,
			unless set to "search no", in which case a
			zone can be configured to be retrieved from a
			particular DLZ database by using a "dlz <name>"
			option in the zone statement.  DLZ databases can
			support type "master" and "redirect" zones.
			[RT #27597]
 2012-12-06 12:39:52 -08:00
Mark Andrews
8a6f41d86a 3430. [bug] win32: isc_time_formatISO8601 was missing the 
'T' between the date and time. [RT #32044]
 2012-12-04 14:59:56 +11:00
Mark Andrews
c6f03e7903 treat clang 3.x and 4.x as independent release streams 2012-12-03 09:10:43 +11:00
Mark Andrews
6ebf3dbb33 workaround only needed for clang 3.1 2012-12-03 07:58:01 +11:00
Mark Andrews
c6af776a7e silence compiler warnings 2012-12-01 21:32:31 +11:00
Mark Andrews
4151109b94 silence clang --analyze warnings 2012-11-30 18:50:38 +11:00
Mark Andrews
85a873f000 conditionally silence false positives from clang --analyze 2012-11-30 16:19:00 +11:00
Mark Andrews
538f4a22b1 3429. [bug] dns_zone_getserial2 could a return success without 
returning a valid serial. [RT #32007]

Squashed commit of the following:

commit 0057f4b6e843c3998b987dbc7f32ceeee8afc150
Author: Mark Andrews <marka@isc.org>
Date:   Fri Nov 30 08:13:15 2012 +1100

    zone_get_from_db could return success without setting return valuses; serial is only valid if soacount is none zero
 2012-11-30 11:39:37 +11:00
Mark Andrews
22f3afddd2 null pointer derefernce on out of memory 2012-11-30 00:58:56 +11:00
Mark Andrews
d4af2cc0db initialize the octet string to empty so that we don't free garbage on error 2012-11-29 18:11:05 +11:00
Mark Andrews
965605e238 link against @DNS_CRYPTO_LIBS@ 2012-11-29 07:27:11 +11:00
Mark Andrews
2e22f903da 3425. [bug] "acacheentry" reference counting was broken resulting 
in use after free. [RT #31908]
 2012-11-27 16:03:36 +11:00
Mark Andrews
c46aa71433 dupped/created reversed in log message 2012-11-23 17:28:16 +11:00
Tinderbox User
7e75b6266d update copyright notice 2012-11-21 23:45:45 +00:00
ckb
2786b6c53f 3422. [bug] Added a clear error message for when the SOA does not 
match the referral. [RT #31281]
 2012-11-21 16:44:34 -06:00
Mark Andrews
20b95f5ff6 3421. [bug] Named loops when re-signing if all keys are offline. 
[RT #31916]

Squashed commit of the following:

commit f47af0ca6793687b9c8d08fd44b0c091ba5a4f9a
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 21 17:45:21 2012 +1100

    dns_dns_zonediff_t -> dns_zonediff_t, clarify comment

commit 344edefc3ee90856a7ff990abe7971925ba843b2
Author: Mark Andrews <marka@isc.org>
Date:   Tue Nov 20 13:12:26 2012 +1100

    commit the zone changes if a keep was marked as being offline

commit cad2c2446ebfc20b6d8c4f6dd0d6596d7106cc0f
Author: Mark Andrews <marka@isc.org>
Date:   Tue Nov 20 13:08:29 2012 +1100

    check for looping when re-signing expiring.example
 2012-11-21 17:48:57 +11:00
Mar Andrews
c3b9fad5e3 3420. [bug] Address VPATH compilation issues. [RT #31879] 2012-11-17 09:33:46 +00:00
Mark Andrews
39bfdc2ff9 3419. [bug] Memory leak on validation cancel. [RT #31869] 
Squashed commit of the following:

commit 452b07ec7cb31784d90d9c2e45ca708df306302e
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 14 23:36:36 2012 +1100

    destroy fetch when canceling validator
 2012-11-15 11:16:28 +11:00
ckb
aecadaf3b1 3418. [func] New XML schema (version 3.0) for the statistics channel 
adds query type statistics at the zone level, and
			flattens the XML tree and uses compressed format to
			optimize parsing. Includes new XSL that permits
			charting via the Google Charts API on browsers that
			support javascript in XSL.  The old XML schema has been
			deprecated. [RT #30023]

3417.	[placeholder]
 2012-11-14 12:44:15 -06:00
Mark Andrews
d8fc410cf8 Redo 
3415.   [bug]           named could die with a REQUIRE failure if a valdation
                        was canceled. [RT #31804]
 2012-11-14 07:41:32 +11:00
Mark Andrews
1a09fefa59 3415. [bug] named could die with a REQUIRE failure id a valdation 
was canceled. [RT #31804]

Squashed commit of the following:

commit d414d3cb4244daeca4159ac1f8a82322e4a20e5a
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 7 14:19:28 2012 +1100

    check that val->fetch != NULL before calling dns_resolver_destroyfetch
 2012-11-09 09:09:52 +11:00
Mark Andrews
07cab7ffa8 improve isc_mempool_put memory model 2012-11-02 16:02:15 +11:00
Mark Andrews
ffd17aca38 move memory accounting to before free of memory to avoid "using" a pointer after it is freed 2012-11-02 15:57:56 +11:00
Mark Andrews
6316438336 spelling 2012-11-02 11:19:02 +11:00
Mark Andrews
d9baadbb0c add coverity[+free : arg-1] directive 2012-11-02 11:16:32 +11:00
Mark Andrews
8f4572372c 3414. [bug] Address locking issues found by Coverity. [RT #31626] 2012-11-02 06:41:45 +11:00
Mark Andrews
18a148d998 sock is potentially unused in use_min_mtu 2012-11-01 15:28:36 +11:00
Mark Andrews
a004a82ee3 uninitalised use 2012-11-01 13:53:20 +11:00
Mark Andrews
4d30dd89f5 3412. [bug] Copy timeval structure from control message data. 
[RT #31548]
 2012-11-01 11:16:59 +11:00
Tinderbox User
fcd7c22fdf update copyright notice 2012-10-31 23:45:49 +00:00
Mark Andrews
bbf31e6b62 More coverity fixes: 
3410.   [bug]           Addressed Coverity warnings. [RT #31626]
Squashed commit of the following:

commit 6fec07bbb69ead784063052f2099674f8b52c6b3
Author: Mark Andrews <marka@isc.org>
Date:   Tue Oct 30 18:14:35 2012 +1100

    use strl{cat,cpy}

commit 19a5d3766f3dbc8a2944b21640a8226a89aae7ba
Author: Mark Andrews <marka@isc.org>
Date:   Tue Oct 30 14:38:55 2012 +1100

    address unchecked xmlTextWriter* calls
 2012-11-01 10:22:11 +11:00
Mark Andrews
c2e80cf47e 3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition to UDP. [RT #31690] 
Squashed commit of the following:

commit bcbe9ae7a99e1f7f4236a22739a793b51ace8684
Author: Mark Andrews <marka@isc.org>
Date:   Wed Oct 31 15:10:53 2012 +1100

    Use IPV6_USE_MIN_MTU for TCP as well as UDP
 2012-11-01 08:42:56 +11:00
Mark Andrews
16a2ddb2ce more: 3410. [bug] Addressed Coverity warnings. [RT #31626] 
move set_refreshkeytimer call within loop so that keydata is valid.
 2012-10-30 13:00:58 +11:00
Mark Andrews
15fdec98df check more dns_rdata_tostruct returns 2012-10-30 08:50:06 +11:00
Mark Andrews
f83542787f 3410. [bug] Addressed Coverity warnings. [RT #31626] 
Squashed commit of the following:

commit bce2efe66d69d60b746b85df49974ca341723169
Author: Mark Andrews <marka@isc.org>
Date:   Mon Oct 29 12:59:25 2012 +1100

    use 'static dns_rdata_xxxx_t xxxx'

commit 704d3c29acbf2dd350a26f2df82a57cb077ba72e
Author: Mark Andrews <marka@isc.org>
Date:   Mon Oct 29 12:35:16 2012 +1100

    return ISC_R_NOTFOUND if private record length does not make sense

commit 7596610c12c5685336fc0909860173d2fae359af
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:41:17 2012 +1100

    check private->length == 5

commit 3836365a3e3e83b057bd940350f032279e080296
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:40:50 2012 +1100

    properly set private->length

commit a295778ac53109d39ef3a8b233751100edae678b
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:13:30 2012 +1100

    check dns_rdata_tostruct result

commit e33c37ca9112159e0b2363615bb018d27fa7d1a5
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:10:43 2012 +1100

    check remove/fopen/chmod return values

commit 3a675e0666aae25d1c51f51ec7bd3fbe25545aae
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:59:10 2012 +1100

    check isc_socket_accept result

commit 696923344f4b07ce0dba4cf2675b1cbb6eba7e8e
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:55:40 2012 +1100

    change variable scopes

commit b9e9d9ad58270271003e463f10744e0ceaf9ad97
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:53:19 2012 +1100

    check inet_pton return value

commit 70698e9589da77e3745efb6ea24b8830addd6ae4
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:52:40 2012 +1100

    break -> /* NOTREACHED */

commit 88de9de2e8e201ab2fef16a868f241e8206ea826
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:52:06 2012 +1100

    strcpy -> strlcpy

commit 6ba79c7cec0e48014cdfa76e8a9406b7a921556e
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:51:26 2012 +1100

    check dns_rdata_tostruct return values
 2012-10-29 20:04:59 +11:00
Evan Hunt
f46168b879 [master] allow dnssec options in inline-signing slaves 
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
 2012-10-26 16:14:59 -07:00
Evan Hunt
2f57f353e8 [master] address mem.c compilation problems 
3406.	[bug]		mem.c: Fix compilation errors when building with
			ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
                        Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
 2012-10-25 18:56:47 -07:00
Tinderbox User
814fc913e6 update copyright notice 2012-10-25 23:47:00 +00:00
Mark Andrews
f3e10cca1b 3405. [bug] Handle time going backwards in acache. [RT #31253] 
Squashed commit of the following:

commit fbf4c8fe2644c101bac870360d3f2c159a90f203
Author: Mark Andrews <marka@isc.org>
Date:   Wed Oct 24 14:43:14 2012 +1100

    remove INSIST and handle time going backwards
 2012-10-25 14:29:10 +11:00
Tinderbox User
a3fb84bd1b update copyright notice 2012-10-24 23:46:51 +00:00
Evan Hunt
9dca437081 [master] silence warning 2012-10-24 15:40:00 -07:00
Evan Hunt
98f9571bd9 [master] silence unused variable warning 2012-10-24 15:36:04 -07:00
Evan Hunt
c241017dcd [master] fix fedora 17 ecdsa compilation problem 2012-10-24 13:56:41 -07:00
Evan Hunt
0e37e9e3d7 [master] silence noisy OpenSSL logging 
3402.	[bug]		Correct interface numbers for IPv4 and IPv6 interfaces.
 2012-10-24 12:58:16 -07:00
Evan Hunt
47c5b8af92 [master] silence coverity warnings 
3401.	[bug]		Addressed Coverity warnings. [RT #31484]
 2012-10-23 22:04:06 -07:00
Mark Andrews
965371b8cf 3399. [port] netbsd: rename 'bool' parameter to avoid namespace 
clash.  [RT #31515]
 2012-10-22 11:42:23 +11:00
Tinderbox User
94f86d37b2 update copyright notice 2012-10-19 23:45:58 +00:00
Mark Andrews
3624e53916 remove redundant UNUSED(callbacks) 2012-10-19 16:28:57 +11:00
Tinderbox User
c37fbb91e3 update copyright notice 2012-10-18 23:46:07 +00:00
Mark Andrews
de0fd68097 3398. [bug] SOA parameters were not being updated with inline 
signed zones if the zone was modified while the
                        server was offline. [RT #29272]
 2012-10-19 10:25:06 +11:00
Mark Andrews
0fbd29837a 3396. [bug] OPT records were incorrectly removed from signed, 
truncated responses. [RT #31439]
 2012-10-18 13:25:06 +11:00
Mark Andrews
70bd5ae6fa missing space before other len after change #3389 2012-10-17 12:48:12 +11:00
Mark Andrews
47c6d89485 3394. [bug] Adjust 'sucessfully validated after lower casing 
signer' log level and category. [RT #31414]
 2012-10-16 11:56:05 +11:00
Tinderbox User
603a182e43 update copyright notice 2012-10-15 23:46:02 +00:00
Mark Andrews
4b17401c9c add test support for dropping edns messages (-T dropedns); ignoring edns in queries (-T noedns); variable max UDP (-T maxudp=value) 2012-10-16 10:23:08 +11:00
Mark Andrews
71dfdcbfae 3392. [func] Keep statistics on REFUSED responses. [RT #31412] 2012-10-16 10:21:22 +11:00
Mark Andrews
9432ef6cdb remove redundent call 2012-10-12 21:57:22 +11:00
Mark Andrews
6700284a4f fix typos in variable names 2012-10-10 13:10:07 +11:00
Mark Andrews
1559dfd341 silence compiler warning 2012-10-08 14:30:10 +11:00
Tinderbox User
15c7a1bf20 update copyright notice 2012-10-06 23:46:11 +00:00
Mark Andrews
dbf693fdfd 3391. [bug] DNSKEY that encountered a CNAME failed. [RT #31262] 2012-10-06 14:56:33 +10:00
Mark Andrews
611dc88768 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 14:20:45 +10:00
Mark Andrews
14889e7b17 add <dns/dsdigest.h> to the list of header files to be installed 2012-10-05 15:10:50 +10:00
Mark Andrews
2ec7373254 3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275] 2012-10-05 06:57:05 +10:00
Tinderbox User
7ce7ecf6bc update copyright notice 2012-10-03 23:46:17 +00:00
Mark Andrews
e0ad27d822 Revert "include <isc/print.h> in gen.c" 
This reverts commit 3f6cec1a35.
 2012-10-04 08:11:21 +10:00
Evan Hunt
3f6cec1a35 include <isc/print.h> in gen.c 2012-10-03 07:59:57 -07:00
Evan Hunt
41bbb34bc2 fix coverity issues 
3388.	[bug]		Fixed several Coverity warnings. [RT #30996]
 2012-10-02 23:44:03 -07:00
Mark Andrews
02bbbc26be lib/dns/include/dns/dsdigest.h 2012-10-03 14:47:30 +10:00
Mark Andrews
058e44186b 3387. [func] Support for a DS digest can be disabled at 
runtime with disable-ds-digests. [RT #21581]
 2012-10-03 12:38:43 +10:00
Mark Andrews
f4f15cbf71 white space; move pause to before comment. 2012-10-03 10:11:07 +10:00
Mark Andrews
9e70b51d3b 3386. [bug] Address locking violation when generating new NSEC / 
NSEC3 chains. [RT #31224]
 2012-10-03 09:02:28 +10:00
Mark Andrews
37702cb83c reapply accidentally reversed change 2012-10-02 16:42:50 +10:00
Mark Andrews
aa49af836c 3385. [bug] named-checkconf didn't detect missing master lists 
in also-notify clauses. [RT #30810]
 2012-10-02 13:06:02 +10:00
Evan Hunt
31c6f9cc85 silence warning 2012-09-28 18:47:05 -07:00
Tinderbox User
0fc76b64fb update copyright notice 2012-09-28 23:46:10 +00:00
Evan Hunt
d1ac7adb3e improve logging of ecdsa errors 
3384.	[bug]		Improved logging of crypto errors. [RT #30963]
 2012-09-28 13:46:47 -07:00
Tinderbox User
04a9fcecf5 update copyright notice 2012-09-26 23:46:13 +00:00
Evan Hunt
da35568c71 use correct port range 
3382.	[bug]		SOA query from slave used use-v6-udp-ports range,
			if set, regardless of the address family in use.
			[RT #24173]
 2012-09-26 13:55:18 -07:00
Mark Andrews
27809a2ee5 3379. [bug] isc_interval_zero and isc_time_epoch should be 
"const (type)* const". [RT #31069]
 2012-09-26 14:58:53 +10:00
Evan Hunt
05284949f7 handle nonexistent managed-keys-directory 
3378.	[bug]		Handle missing 'managed-keys-directory' better.
			[RT #30625]
 2012-09-25 18:19:17 -07:00
Evan Hunt
664320a88f remove spurious newline 
3377.	[bug]		Removed spurious newline from NSEC3 multiline
			output. [RT #31044]
 2012-09-18 14:22:33 -07:00
Mark Andrews
96f1aa2458 add missing extern qualiers 2012-09-17 18:37:24 +10:00
Mark Andrews
eed495737b 3376. [bug] Lack of EDNS support was being recorded without a 
successful response. [RT #30811]
 2012-09-14 11:01:06 +10:00
Mark Andrews
5f26ffc2b4 3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808] 2012-09-14 07:53:19 +10:00
Tinderbox User
14725aff16 update copyright notice 2012-09-12 23:46:13 +00:00
ckb
179d8f4cc8 3374. [bug] isc_parse_uint32 failed to return a range error on 
systems with 64 bit longs [RT #30232]
 2012-09-12 15:08:19 -05:00
Mark Andrews
0b9ea3fca6 O_BINARY -> _O_BINARY 2012-09-12 13:51:49 +10:00
Mark Andrews
7e9d637131 3373. [bug] win32: open raw files in binary mode. [RT #30944] 2012-09-12 11:44:24 +10:00
Mark Andrews
4c2168728c 3372. [bug] Silence spurious "deleted from unreachable cache" 
messages.  [RT #30501]
 2012-09-08 17:59:14 +10:00
Mark Andrews
d27343c554 make dns_rbt_zero_header static 2012-08-24 10:44:26 +10:00
Mark Andrews
68eb4dca5a unsigned constants 2012-08-24 08:45:56 +10:00
Mark Andrews
4738df0c5c v9_8_4rc2 2012-08-23 23:39:43 +10:00
Mark Andrews
8e0a15f42f 3370. [bug] Address use after free while shutting down. [RT #30241] 2012-08-22 19:19:30 +10:00
Tinderbox User
72de8965c8 update copyright notice 2012-08-21 23:46:02 +00:00
Mark Andrews
8f7e0e25a5 3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h> 
where not C++ safe.
 2012-08-21 16:42:19 +10:00
Mark Andrews
b29e848220 3367. [bug] dns_dnsseckey_create() result was not being checked. 
[RT #30685]
 2012-08-21 12:04:09 +10:00
Tinderbox User
0c156cfa39 update copyright notice 2012-08-17 23:46:06 +00:00
ckb
339f08ee1e 3366. [bug] Fixed Read-After-Write dependency violation for IA64 
atomic operations. [RT #25181]
 2012-08-17 13:02:50 -05:00
Mark Andrews
076bda8c2e we didn't catch a zero option at the global level when views are active 2012-08-17 13:40:17 +10:00
Evan Hunt
78ba74e63d remove spurious newlines in zone.c logging 
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
 2012-08-16 10:41:09 -07:00
Mark Andrews
1bbd36c4db 3364. [security] Named could die on specially crafted record. 
[RT #30416]
 2012-08-16 09:42:14 +10:00
Evan Hunt
85705b4b5a allow "forward" and "forwarders" in static-stub 
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]
 2012-08-15 13:08:15 -07:00
Tinderbox User
23554e8479 update copyright notice 2012-08-14 23:46:02 +00:00
Evan Hunt
820fdd61dd properly range-check fields that do not allow 0 
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
 2012-08-13 22:39:42 -07:00
Mark Andrews
4e8090f1c1 test against unsigned zero 2012-08-14 14:31:51 +10:00
Mark Andrews
f06dad6860 3360. [bug] 'host -w' could die. [RT #18723] 2012-08-14 11:05:29 +10:00
Evan Hunt
3f755529ee address memory leak with bad tsig secret 
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
 2012-08-10 20:15:59 -07:00
Tinderbox User
953692fa1e update copyright notice 2012-07-25 23:46:04 +00:00
ckb
e7857b5ee0 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are 
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
 2012-07-25 17:06:34 -05:00
Mark Andrews
1495117889 cast mode to unsigned int for fprintf 2012-07-24 12:58:04 +10:00
Mark Andrews
2634750ce5 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2012-07-24 12:18:43 +10:00
Mark Andrews
1d2f282840 cleanup unused variables 2012-07-24 12:18:10 +10:00
Tinderbox User
0b637179cc update copyright notice 2012-07-23 23:46:06 +00:00
Mark Andrews
6eb6af6732 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:08:21 +10:00
Mark Andrews
13518a9636 windows fixes 2012-07-20 18:08:28 +10:00
Tinderbox User
c207dd8394 update copyright notice 2012-07-19 23:45:53 +00:00
Mark Andrews
c965b18690 3353. [bug] Use a single task for task exclusive operations. 
[RT #29872]
 2012-07-19 23:00:21 +10:00
Mark Andrews
ee2f98d5cf 3352. [bug] Ensure that learned server attributes timeout of the 
adb cache. [RT #29856]
 2012-07-18 14:16:37 +10:00
Mark Andrews
c963ca7542 3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report 
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
                        memory debugging flags are set. [RT #30243]
 2012-07-18 10:02:32 +10:00
Mark Andrews
d0d892f449 3350. [bug] Memory read overrun in isc___mem_reallocate if 
ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]
 2012-07-18 09:50:52 +10:00
Mark Andrews
1a594d204a fix race in ISC_QUEUE_PUSH 2012-07-17 15:12:20 +10:00
ckb
ad7fdba1ed 3348. [security] prevent RRSIG data from being cached if a negative 
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well.
 2012-07-09 12:51:11 -05:00
Evan Hunt
bb5c950e7c update .def file 2012-07-05 18:05:44 -07:00
Evan Hunt
4476b98f89 missed out a variable declaration 2012-07-05 17:18:22 -07:00
ckb
c514f38c80 Conflicts: 
lib/dns/dst_parse.c
	lib/isc/win32/file.c
 2012-07-05 16:07:31 -05:00
Evan Hunt
cdd271b14a fix bad-cache assert 
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
 2012-07-02 10:01:48 -07:00
Evan Hunt
d64138e577 addressed possible race in ISC_QUEUE 
3345.	[bug]		Addressed race condition when removing the last item
			or inserting the first item in an ISC_QUEUE.
			[RT #29539]
 2012-07-02 09:37:17 -07:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
da5d53fb14 update copyright notice 2012-06-26 23:45:56 +00:00
Mark Andrews
c41c261fc7 3342. [bug] Change #3314 broke saving of stub zones to disk 
resulting in excessive cpu usage in some cases.
                        [RT #29952]
 2012-06-27 09:21:09 +10:00
Tinderbox User
6d5f928b26 update copyright notice 2012-06-25 23:46:00 +00:00
Mark Andrews
ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
 2012-06-25 13:57:32 +10:00
Mark Andrews
1a3894ca22 silence compiler warning by using offsetof to get structure elelment offsets 2012-06-25 11:57:10 +10:00
Mark Andrews
171d2c23f1 remove 'inline' on dns_rbt_serialize_align 2012-06-25 08:14:34 +10:00
Mark Andrews
abeb649619 check fwrite results 2012-06-23 18:21:52 +10:00
Mark Andrews
d70f7b9e46 change type of where to uintptr_t 2012-06-23 18:06:33 +10:00
Mark Andrews
aeed8b4d3b change offset type to long 2012-06-23 18:02:13 +10:00
Tinderbox User
3b398443f0 update copyright notice 2012-06-21 23:46:36 +00:00
Tinderbox User
620620df3a silence pointer/int conversion warnings using uintptr_t, since we are using stdio file offsets are longs 2012-06-22 07:37:09 +10:00
Evan Hunt
5506903c92 Merge rt28412b 
- check for mmap() in configure
- implement isc_file_mmap() and isc_file_munmap() to do
  malloc()/read() and free() when run on systems that do not
  support mmap().
 2012-06-21 12:58:46 -07:00
Mark Andrews
46e025d82e remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);' 2012-06-21 14:28:32 +10:00
Tinderbox User
8e6b386ab7 update copyright notice 2012-06-20 23:46:40 +00:00
ckb
5f5f8b1dd4 removed .cvsignore files 2012-06-20 14:23:12 -05:00
ckb
7829fad409 merging fast format zone files 
Conflicts:
	.gitignore
	bin/named/zoneconf.c
	bin/tests/.gitignore
	bin/tests/system/autosign/tests.sh
	bin/tests/system/masterformat/clean.sh
	bin/tests/system/masterformat/ns1/compile.sh
	bin/tests/system/masterformat/tests.sh
	configure
	lib/dns/db.c
	lib/dns/include/dns/db.h
	lib/dns/include/dns/types.h
	lib/dns/master.c
	lib/dns/masterdump.c
	lib/dns/rbt.c
	lib/dns/rbtdb.c
	lib/dns/sdb.c
	lib/dns/sdlz.c
	lib/dns/tests/.cvsignore
	lib/dns/tests/Makefile.in
	lib/dns/win32/libdns.def
	lib/dns/xfrin.c
	lib/dns/zone.c
	lib/export/dns/Makefile.in
	lib/isc/include/isc/file.h
	lib/isc/unix/file.c
	lib/isc/win32/file.c
	lib/isccfg/namedconf.c
 2012-06-20 14:13:12 -05:00
Tinderbox User
ef1963d83d update copyright notice 2012-06-15 23:45:49 +00:00
Mark Andrews
ec048f4600 make maxbits signed as BN_num_bits is signed 2012-06-15 11:54:58 +10:00
Mark Andrews
7865ea9545 3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228] 2012-06-14 15:44:20 +10:00
Mark Andrews
57f1d800f8 3338. [bug] Address race condition in units tests: asyncload_zone 
and asyncload_zt. [RT #26100]
 2012-06-14 15:13:44 +10:00
Mark Andrews
c298583db5 3337. [bug] Change #3294 broke support for the multiple keys 
in controls. [RT #29694]
 2012-06-13 16:25:42 +10:00
Tinderbox User
8ce1923429 update copyright notice 2012-06-08 23:45:57 +00:00
Mark Andrews
80fa3ef851 3336. [func] Maintain statistics for RRsets tagged as "stale". 
[RT #29514]
 2012-06-08 16:32:44 +10:00
Mark Andrews
109ebcc980 3334. [bug] Hold a zone table reference while performing a 
asyncronous load of a zone. [RT #28326]
 2012-06-08 13:52:13 +10:00
Mark Andrews
7310c0b1ee 3333. [bug] Setting resolver-query-timeout too low can cause 
named to not recover if it looses connectivity.
                        [RT #29623]
 2012-06-08 12:34:33 +10:00
Mark Andrews
a0c1fa2a8f 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:51:11 +10:00
Mark Andrews
735ca24fa6 3321. [security] dns_rdataslab_fromrdataset could produce bad 
rdataslabs. [RT #29644]
 2012-06-01 23:33:16 +10:00
Tinderbox User
7a440c4300 update copyright notice 2012-05-31 23:46:01 +00:00
Vernon Schryver
afaa290bb6 Squashed commit of the following: 
commit aea73609ac5d41ed091360e94370798965f28f05
commit eef7f44c57a060b24a426eb8888e16176a0a69b1
commit a88a26d864ad399fa2d40e3b9659b4d26f454ca1
commit 1b90d59568e7e3b65690c6bd075cf4d60b03e454
Merge: 74d8f73 cd02924
commit 74d8f73ed553bb64a305e284905762f7ff0029aa
commit 9a59ef6bbd4befe91e5691e8b85afe1cb7ab0706
commit c63606a53b4f1bb7066b37d3cfe588e9dc21a119
commit 2c392a840c8838455d144ce163bd873bee400c97
commit 0241f53563e6e7bed462a883d98a8931f01e0980
commit 79fe22b5d6f04bdaa3073cf54d41952194e879e1
commit 351b3049625f2edd39729dd85413e961b97d4b3b
commit 7207674fc77c9a10d84c0cb94e36d1c09bb31459
commit 543ad34cf08f901c20b438c9d2f45482cff13d5e
commit fc45b99ce4438627fdcbeb4365695ba0065fa46f
commit c425207f57e0a5157372aa7edbb79b13170563e5
commit ef8c5e23ca284e0ea02f69ce1f356d537c19d93b
commit ba0d4e3aa51efe412cfa1d031651f949442d1802
commit 41c7969c7cb6884b93011f7ace3fd9522efc021e
  and more from CVS

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
 2012-05-31 02:03:34 +00:00
Mark Andrews
e8e0a46925 silence warnings from clang 2012-05-30 11:52:02 +10:00
Mark Andrews
cf751b1c9b don't insist that rbtdb->cachestats exists. 2012-05-18 15:19:49 +10:00
Tinderbox User
a847a4bcd6 update copyright notice 2012-05-17 23:46:03 +00:00
Evan Hunt
26833735d3 Handle RRSIG signer case consistently 
3329.	[bug]		Handle RRSIG signer-name case consistently: We
			generate RRSIG records with the signer-name in
			lower case.  We accept them with any case, but if
			they fail to validate, we try again in lower case.
			[RT #27451]
 2012-05-17 10:44:16 -07:00
Evan Hunt
01695063c6 fix check_data() usage 
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
 2012-05-16 23:12:57 -07:00
Tinderbox User
633c5dc507 update copyright notice 2012-05-14 23:45:48 +00:00
Evan Hunt
d81b6b94c4 cache stats were detached when flushing cache 2012-05-14 12:20:34 -07:00
Evan Hunt
d878b8d87c merged filter-aaaa-on-v6 (ATT SoW) 
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]
 2012-05-14 11:50:00 -07:00
Evan Hunt
dd2a0a6d2d Merge statistics code (ATT SoW, rt24117) 
This includes the following changes:

3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]
 2012-05-14 10:06:05 -07:00
Mark Andrews
c438f1beb9 3318. [tuning] Reduce the amount of work performed while holding a 
bucket lock when finshed with a fetch context.
                        [RT #29239]
 2012-05-10 08:28:32 +10:00
Mark Andrews
26ed6de665 add opensslecdsa_link 2012-05-09 13:51:29 +10:00
Evan Hunt
d560cb0fc3 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2012-05-03 14:01:41 -07:00
Evan Hunt
970aa7d783 missing braces; style glitch 2012-05-03 14:01:32 -07:00
Tinderbox User
99d8f5a704 update copyright notice 2012-05-02 23:45:44 +00:00
Mark Andrews
89bbdd1f69 Use '==' not '=' in conditional test when not using openssl. 2012-05-03 09:29:32 +10:00
Mark Andrews
aaaf8d4f48 3317. [func] Add ECDSA support (RFC 6605). [RT #21918] 2012-05-02 23:20:17 +10:00
Tinderbox User
ee980d3fc4 update copyright notice 2012-04-28 23:45:42 +00:00
Evan Hunt
54489ba167 Improve locking performance in dispatch.c 
3316.	[tuning]	Improved locking performance when recursing.
			[RT #28836]

   - Use one lock per memory pool instead of associating
     them all with a single 'pool_lock' in the dispatch manager.
   - Reduce the critical sections for qid->lock in get_dispsocket(),
     deref_portentry() and dns_dispatch_addresponse2().
   - Added a memory pool for socket events in dns_dispatch_t.
   - Add an isc_socketevent_t member in the resquery_t object, and use
     it with isc_socket_sendto2() instead of using isc_socket_sendto()
   - Tuned the memory pools in dispatch.c for better performance
     under load
 2012-04-28 14:52:28 -07:00
Evan Hunt
4e8fe357a6 create and use multiple fetch dispatches 
Added API to create a set of UDP dispatches which can be shared
round-robin style when making upstream queries for authoritative
data; this should reduce lock contention in the query source
dispatch.
 2012-04-27 16:11:30 -07:00
Mark Andrews
8e2c2ca0a0 TRUE -> ISC_TRUE 2012-04-26 18:19:48 +10:00
Mark Andrews
1a04af5311 3314. [bug] The masters list could be updated while refesh_callback 
and stub_callback were using it. [RT #26732]
 2012-04-26 12:58:39 +10:00
Mark Andrews
393fd55d91 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:22:49 +10:00
Mark Andrews
7e9d6c7075 3312. [bug] named-checkconf didn't detect a bad dns64 clients acl. 
[RT #27631]
 2012-04-26 11:42:39 +10:00
Mark Andrews
4c9c2a6a72 3311. [bug] Abort the zone dump if zone->db is NULL in 
zone.c:zone_gotwritehandle. [RT #29028]
 2012-04-26 11:23:43 +10:00
Tinderbox User
18cbe0a216 update copyright notice 2012-04-25 23:45:46 +00:00
Evan Hunt
bdf5cdc32c increase table size for mutex profiling 2012-04-24 16:52:12 -07:00
Evan Hunt
20d441892d fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 14:56:38 -07:00
Tinderbox User
776833c82e update copyright notice 2012-04-12 23:45:51 +00:00
Mark Andrews
4f3a3fc43c 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS. 
[RT #28956]
 2012-04-13 08:32:37 +10:00
Mark Andrews
a280469e72 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:11:50 +10:00
Tinderbox User
3fb95bfcb2 update copyright notice 2012-04-11 23:45:52 +00:00
Mark Andrews
75582adac7 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563] 
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
 2012-04-11 12:17:57 +10:00
Mark Andrews
72bdc940a7 use hmctx, not mctx when freeing rbtdb->heaps 2012-04-11 10:26:42 +10:00
Mark Andrews
bf6651e27d 3303. [bug] named could die when reloading. [RT #28606] 2012-04-05 15:48:43 +10:00
Mark Andrews
840659f1d7 3302. [bug] dns_dnssec_findmatchingkeys could fail to find 
keys if the zone name contained character that
                        required special mappings. [RT #28600]
 2012-03-30 12:05:13 +11:00
Mark Andrews
56fdf1d401 3300. [bug] Named could die if gssapi was enabled in named.conf 
but was not compiled in. [RT #28338]
 2012-03-29 09:49:58 +11:00
Mark Andrews
85fcd0b9b2 3299. [bug] Make SDB handle errors from database drivers better. 
[RT #28534]
 2012-03-28 10:21:13 +11:00
Mark Andrews
2c642143d4 3298. [bug] Named could dereference a NULL pointer in 
zmgr_start_xfrin_ifquota if the zone was being removed.
                        [RT #28419]
 2012-03-22 12:19:46 +11:00
Mark Andrews
c51f2c9a52 3297. [bug] Named could die on a malformed master file. [RT #28467] 2012-03-15 12:07:49 +11:00
Tinderbox User
5fa46bc916 update copyright notice 2012-03-10 23:45:53 +00:00
Mark Andrews
269c07173e 3295. [bug] Adjust isc_time_secondsastimet range check to be more 
portable. [RT # 26542]
 2012-03-08 15:30:51 +11:00
Mark Andrews
962bf88eec 3294. [bug] isccc/cc.c:table_fromwire failed to free alist on 
error. [RT #28265]
 2012-03-08 14:28:26 +11:00
Evan Hunt
b48c55093b Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2012-03-07 08:18:26 -08:00
Evan Hunt
207845805e set $Id$ 2012-03-07 08:18:20 -08:00
Mark Andrews
28a8f5b0de set $Id$ 2012-03-08 00:21:15 +11:00
Mark Andrews
4c1847ef47 set $Id$ 2012-03-07 22:17:19 +11:00
Mark Andrews
2669638693 set $Id$ 2012-03-07 22:13:11 +11:00
Tinderbox User
ea94d37012 regen master 2012-03-07 01:41:11 +00:00
Evan Hunt
2d7f41d66c Revert "Re-created rt27597a for ongoing DLZ work" 
This reverts commit d731ee9121.
 2012-03-05 15:42:52 -08:00
Evan Hunt
d731ee9121 Re-created rt27597a for ongoing DLZ work 2012-03-05 14:45:30 -08:00
Evan Hunt
632c0f1e91 Revert accidental merge of unfinished DLZ work 2012-03-05 14:44:21 -08:00
Mark Andrews
e214e8728a Merge branches 'rt28261' and 'rt27597' of repo.isc.org:/proj/git/prod/bind9 2012-03-06 00:16:04 +11:00
Mark Andrews
2eae3ad06e Merge remote-tracking branch 'origin/rt28040' 2012-03-05 12:49:28 +11:00
Evan Hunt
e41d5a00bc added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Evan Hunt
954501715d checkpoint: multiple-DLZ functionality 
- multiple DLZ's can be specified, including multiple DLZ's using
   the same driver; e.g., two different back-ends both loaded by the
   dlopen driver
 - new "search" option can be specified in a DLZ indicating whether
   this DLZ database should be searched for unknown zones.  The
   default is "yes".  If "no", then the zone can only be found by
   named if it's registered in the zone table, which happens if the
   zone is configured for dynamic updates, or if "dlz <dlzname>" is
   specified in the zone statement. (The latter functionality is
   incomplete in this commit).
 2012-03-03 22:43:38 -08:00
Automatic Updater
dc3d394636 update copyright notice 2012-02-29 23:47:21 +00:00
Evan Hunt
e5bf06eedc 3291. [port] Fixed a build error on systems without ENOTSUP. 
[RT #28200]
 2012-02-29 21:28:17 +00:00
Automatic Updater
2e00aaef3d update copyright notice 2012-02-28 23:46:59 +00:00
Mark Andrews
a7ab4ad2d4 3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169] 2012-02-28 21:32:36 +00:00
Mark Andrews
96de2db32a dns_zone_synckeyzone 2012-02-23 07:15:24 +00:00
Automatic Updater
3484552b1b update copyright notice 2012-02-23 07:09:29 +00:00
Mark Andrews
1864400107 3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036] 2012-02-23 06:53:15 +00:00
Mark Andrews
8a4689070a dns_message_logpacket 2012-02-22 05:03:39 +00:00
Evan Hunt
89069e6b3a 3286. [bug] Managed key maintenance timer could fail to start 
after 'rndc reconfig'. [RT #26786]
 2012-02-22 00:37:54 +00:00
Mark Andrews
ea79a9bd0e 2x POST(locktype); 2012-02-17 00:18:18 +00:00
Automatic Updater
5fec28507a update copyright notice 2012-02-15 21:19:59 +00:00
Mark Andrews
6d386978b3 3285. [bug] val-frdataset was incorrectly disassociated in 
proveunsecure after calling startfinddlvsep.
                        [RT #27928]
 2012-02-15 20:59:40 +00:00
Mark Andrews
5b57f580ce 3284. [bug] Address race conditions with the handling of 
rbtnode.deadlink. [RT #27738]
 2012-02-15 02:00:47 +00:00
Automatic Updater
d03bc586b9 update copyright notice 2012-02-14 23:47:15 +00:00
Mark Andrews
c478bb4c46 extend: 
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
 2012-02-14 00:22:54 +00:00
Mark Andrews
4c34112a69 3283. [bug] Raw zones with with more than 512 records in a RRset 
failed to load. [RT #27863]
 2012-02-13 23:46:24 +00:00
Automatic Updater
09b46c3945 update copyright notice 2012-02-09 23:47:18 +00:00
Mark Andrews
fb604d1cee 3282. [bug] Restrict the TTL of NS RRset to no more than that 
of the old NS RRset when replacing it. [RT #27792]
 2012-02-09 20:54:46 +00:00
Automatic Updater
da5a7b29e9 update copyright notice 2012-02-07 23:47:24 +00:00
Mark Andrews
936036e823 3281. [bug] SOA refresh queries could be treated as cancelled 
despite succeeding over the loopback interface.
                        [RT #27782]
 2012-02-07 19:50:20 +00:00
Mark Andrews
fc3b3e1f7e 3278. [bug] Hold a internal reference to the zone while performing 
a asynchronous load.  Address potential memory leak
                        if the asynchronous is cancelled. [RT #27750]
 2012-02-07 00:47:21 +00:00
Automatic Updater
2f4561bc9c update copyright notice 2012-02-06 23:46:49 +00:00
Mark Andrews
77cb7130e7 3276. [bug] win32: isc_socket_dup is not implemented. [RT #27696] 
3276.   [bug]           win32: ns_os_openfile failed to return NULL on
                        safe_open failure. [RT #27696]
 2012-02-06 04:19:33 +00:00
Mark Andrews
fb63e9c020 missing return 2012-02-03 12:59:03 +00:00
Mark Andrews
1769b07530 fix memory overun in dns_zone_getincludes, allocated array too small (zero). 
fix possible memory overrun in dns_zone_getincludes
fix inconsistent mxtc use in ns_server_zonestatus
fix missing out of memory errors checks in zone_registerinclude
fix possible use after free issues zone_registerinclude/ns_server_zonestatus
 2012-02-01 21:28:39 +00:00
Mark Andrews
d98850b876 3275. [bug] "use out of scope" bug in unit test master_test. 
[RT# 27674]
 2012-02-01 00:20:09 +00:00
Automatic Updater
41f1164438 update copyright notice 2012-01-31 23:47:33 +00:00
Evan Hunt
2855e27723 3271. [func] New "rndc zonestatus" command prints information 
about the specified zone. [RT #21671]
 2012-01-31 03:35:41 +00:00
Evan Hunt
c54dadd853 3270. [bug] "rndc reload" didn't reuse existing zones correctly 
when inline-signing was in use. [RT #27650]
 2012-01-31 01:13:10 +00:00
Mark Andrews
a86310b25a Add comment describing LIBINTERFACE values per branch 2012-01-30 00:23:27 +00:00
Mark Andrews
63acb91046 make 'when' isc_stdtime_t in set_key_expiry_warning 2012-01-30 00:06:13 +00:00
Evan Hunt
f8ae0a35d0 fixed api typo 2012-01-29 06:05:10 +00:00
Evan Hunt
12c3204c46 prepare for 9.9.0 final 2012-01-29 05:14:07 +00:00
Automatic Updater
80c7083796 update copyright notice 2012-01-27 23:46:59 +00:00
Mark Andrews
bc298cd0f7 3268. [bug] Convert RRSIG expiry times to 64 timestamps to work 
out the earliest expiry time. [RT #23311]
 2012-01-27 01:43:53 +00:00
Mark Andrews
1bb3831e13 3267. [bug] Memory allocation failures could be mis-reported as 
unexpected error.  New ISC_R_UNSET result code.                        [RT #27336]
 2012-01-27 01:21:41 +00:00
Mark Andrews
ef9f4d0977 3266. [bug] The maximum number of NSEC3 iterations for a 
DNSKEY RRset was not being properly computed.
                        [RT #26543]
 2012-01-27 00:49:42 +00:00
Automatic Updater
ee2129ee66 update copyright notice 2012-01-25 23:46:49 +00:00
Mark Andrews
18d208a4a2 3265. [bug] Address lock order reversal with inline-signing 
support. [27557]
 2012-01-25 02:46:53 +00:00
Mark Andrews
639c1d5617 silence 'Assigned value is always the same as the existing value' warning 2012-01-22 04:56:41 +00:00
Evan Hunt
d47f51b6ac add .cvsignore 2012-01-16 23:17:32 +00:00
Automatic Updater
edb4393ef5 update copyright notice 2012-01-10 23:46:58 +00:00
Evan Hunt
9a02019889 3264. [bug] Automatic regeneration of signatures in an 
inline-signing zone could stall when the server
			was restarted. [RT #27344]

3263.	[bug]		"rndc sync" did not affect the unsigned side of an
			inline-signing zone. [RT #27337]
 2012-01-10 18:13:37 +00:00
Automatic Updater
f76bddd50b update copyright notice 2012-01-04 23:46:49 +00:00
Evan Hunt
56c9fcf075 3260. [bug] "rrset-order cyclic" could appear not to rotate 
for some query patterns.  [RT #27170/27185]
 2012-01-04 03:06:51 +00:00
Automatic Updater
a3c7d21f5c update copyright notice 2011-12-22 23:46:20 +00:00
Mark Andrews
41ca314cc2 3260. [bug] "rrset-order cyclic" could appears to not rotate 
for some query patterns.  [RT #27170]
 2011-12-22 23:43:52 +00:00
Evan Hunt
53e58ba9fa oops missed one. 2011-12-22 19:14:15 +00:00
Evan Hunt
891c6eb907 add missing symbols 2011-12-22 18:58:50 +00:00
Evan Hunt
949eefdda4 prep for 9.9.0rc1 release 2011-12-22 17:49:49 +00:00
Mark Andrews
9ddf371552 3257. [bug] Do not generate a error message when calling fsync() 
in a pipe or socket. [RT #27109]
 2011-12-22 08:49:01 +00:00
Mark Andrews
a5a30ae7c0 3253. [bug] Return DNS_R_SYNTAX when the input to a text field is 
too long. [RT #26956]
 2011-12-22 07:41:29 +00:00
Evan Hunt
f30785f506 3252. [bug] When master zones using inline-signing were 
updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]
 2011-12-22 07:32:41 +00:00
Mark Andrews
dd0d54ff01 3251. [bug] Enforce a upper bound (65535 bytes) on the amount of 
memory dns_sdlz_putrr() can allocate per record to
                        prevent run away memory consumption on ISC_R_NOSPACE.
                        [RT #26956]
 2011-12-22 07:15:05 +00:00
Automatic Updater
f63cb76be6 update copyright notice 2011-12-20 23:46:29 +00:00
Mark Andrews
e101ec1503 @srdir@ -> @srcdir@ 2011-12-20 05:04:44 +00:00
Mark Andrews
4a4066453f update slabbed data layout description 2011-12-20 00:55:01 +00:00
Mark Andrews
c31601ae9b add missing s 2011-12-20 00:26:52 +00:00
Mark Andrews
67dc2f0536 3249. [bug] Update log message when saving slave zones files for 
analysis after load failures. [RT #27087]

3248.   [bug]           Configure options --enable-fixed-rrset and
                        --enable-exportlib were incompatible with each
                        other. [RT #27087]

3247.   [bug]           'raw' format zones failed to preserve load order
                        breaking 'fixed' sort order. [RT #27087]

3246.   [bug]           Named failed to start with a empty also-notify list.
                        [RT #27087]
 2011-12-20 00:06:54 +00:00
Mark Andrews
b290d10fc4 3245. [bug] Don't report a error unchanged serials unless there 
were other changes when thawing a zone with
                        ixfr-fromdifferences. [RT #26845]
 2011-12-19 23:46:13 +00:00
Mark Andrews
97494b99f0 remove accidental commit to head 2011-12-10 22:09:41 +00:00
Automatic Updater
339d2a4d4b update copyright notice 2011-12-09 23:47:05 +00:00
Mark Andrews
e238ebd9b3 Backout accident commit to head 2011-12-09 22:09:26 +00:00
Mark Andrews
0b096436e9 flush both raw zone instance if it exists 2011-12-09 20:47:18 +00:00
Mark Andrews
5ccf5eac0f ixfr-from-differences backup file 2011-12-09 13:32:42 +00:00
Automatic Updater
b54ac42f19 update copyright notice 2011-12-08 23:46:49 +00:00
Evan Hunt
b4d8192d21 3241. [func] Extended the header of raw-format master files to 
include the serial number of the zone from which
			they were generated, if different (as in the case
			of inline-signing zones).  This is to be used in
			inline-signing zones, to track changes between the
			unsigned and signed versions of the zone, which may
			have different serial numbers.

			(Note: raw zonefiles generated by this version of
			BIND are no longer compatble with prior versions.
			To generate a backward-compatible raw zonefile
			using dnssec-signzone or named-compilezone, specify
			output format "raw=0" instead of simply "raw".)
			[RT #26587]
 2011-12-08 16:07:22 +00:00
Mark Andrews
e4aac0596c 3241. [bug] Address race conditions in the resolver code. 
[RT #26889]
 2011-12-07 23:08:42 +00:00
Mark Andrews
71e4c3ee74 3240. [bug] DNSKEY state change events could be missed. [RT #26874] 2011-12-07 22:48:22 +00:00
Mark Andrews
04281728d4 3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent 
timestamp. [RT #26883]
 2011-12-07 22:36:25 +00:00
Mark Andrews
9c832595d4 3238. [bug] keyrdata was not being reinitialize in 
lib/dns/rbtdb.c:iszonesecure. [RT#26913]
 2011-12-07 22:21:05 +00:00
Automatic Updater
c757fd2e17 update copyright notice 2011-12-06 23:46:32 +00:00
Automatic Updater
806956b43b update copyright notice 2011-12-05 23:46:35 +00:00
Mark Andrews
05556e6c82 #include <dns/db.h> 2011-12-05 20:51:41 +00:00
Evan Hunt
56d7492b2c missed a line 2011-12-05 17:27:16 +00:00
Evan Hunt
4122abdc3c Back out changes #3182 and #3202 2011-12-05 17:10:51 +00:00
Mark Andrews
2591f13dd3 3235. [func] dns_db_diffx, a extended dns_db_diff which returns 
the generated diff and optionally writes it to a
                        journal. [RT #26386]
 2011-12-05 06:10:07 +00:00
Mark Andrews
de52784e45 3235. [func] dns_db_diffx, a extended dns_db_diff which returns 
the generated diff and optionally writes it to a
                        journal. [RT #26386]
 2011-12-04 23:48:12 +00:00
Automatic Updater
a09e70c947 update copyright notice 2011-12-02 23:46:56 +00:00
Mark Andrews
2c25ca45a4 errno2result now reports caller when unable to convert errno 2011-12-02 07:15:17 +00:00
Mark Andrews
56dc4c6730 3233. [bug] 'rndc freeze/thaw' didn't work for inline zones. 
[RT #26632]
 2011-12-02 02:44:01 +00:00
Mark Andrews
db604cea5c fix all_events loop terminating condition to stop false positives 2011-12-01 22:30:37 +00:00
Scott Mann
d881a5ad06 Accept patch from RedHat (RT #26732). 2011-12-01 15:58:46 +00:00
Mark Andrews
38f6085062 silence Division by zero warning 2011-12-01 01:33:27 +00:00
Scott Mann
5927944728 Fix problem identified by CLANG: local variable not passed back to struct. 2011-12-01 00:14:11 +00:00
Automatic Updater
b9e911c71c update copyright notice 2011-11-30 23:46:25 +00:00
Evan Hunt
1a01def943 add print.h 2011-11-30 06:10:44 +00:00
Mark Andrews
ed74be8035 #include <isc/print.h> 2011-11-30 06:09:41 +00:00
Mark Andrews
5e3daa58f4 move declaration to start of block 2011-11-30 06:06:33 +00:00
Evan Hunt
0da3b4a9a7 3228. [tuning] Dynamically grow symbol table to improve zone 
loading performance. [RT #26523]
 2011-11-30 04:27:17 +00:00
Mark Andrews
cae06bceda 3227. [bug] Interim fix to make WKS's use of getprotobyname() 
and getservbyname() self thread safe. [RT #26232]
 2011-11-30 01:18:11 +00:00
Mark Andrews
23daf8948b 3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed" 
messages. [RT #26507]
 2011-11-29 01:03:47 +00:00
Mark Andrews
03e2b1d18d 3223. [bug] 'task_test privilege_drop' generated false positives. 
[RT #26766]
 2011-11-29 00:41:28 +00:00
Mark Andrews
91ed1cc821 3222. [cleanup] Replace dns_journal_{get,set}_bitws with 
dns_journal_{get,set}_sourceserial. [RT #26634]
 2011-11-28 03:14:59 +00:00
Evan Hunt
69feafa0af 3221. [bug] Fixed a potential coredump on shutdown due to 
referencing fetch context after it's been freed.
			[RT #26720]
 2011-11-23 22:53:53 +00:00
Evan Hunt
08b512b6a0 3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips() 
could fail to set the database version correctly,
                        causing an assertion failure. [RT #26180]
 2011-11-18 18:40:31 +00:00
Mark Andrews
2256c13194 --- 9.9.0b2 released --- 
3219.   [bug]           Disable NOEDNS caching following a timeout.
 2011-11-16 22:18:53 +00:00
Evan Hunt
7c6a1a11fa 3218. [security] Cache lookup could return RRSIG data associated with 
nonexistent records, leading to an assertion
			failure. [RT #26590]
 2011-11-16 09:44:32 +00:00
Evan Hunt
3ab9d6435a 3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478] 2011-11-15 21:44:53 +00:00
Evan Hunt
c79bcf09bf Add clientinfo.h to HEADERS. [RT #26558] 
No CHANGES note.
 2011-11-14 18:32:34 +00:00
Mark Andrews
2a05d28eb1 3211. [bug] rbtdb.c: failed to remove a node from the deadnodes list 
prior to adding a reference to it leading a possible
                        assertion failure. [RT #23219]
 2011-11-08 20:49:11 +00:00
Evan Hunt
d9eebc0849 3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full" 
option prints in single-line-per-record format.
			[RT #20287]
 2011-11-07 23:16:31 +00:00
Mark Andrews
ac43690858 3209. [func] Add "dnssec-lookaside 'off'". [RT #24858] 2011-11-07 00:14:11 +00:00
Automatic Updater
af42579df6 update copyright notice 2011-11-04 23:46:15 +00:00
Evan Hunt
90a354ab36 3204. [bug] When a master server that has been marked as 
unreachable but sends a NOTIFY, mark it reachable
			again. [RT #25960]
 2011-11-04 05:51:02 +00:00
Evan Hunt
25845da41a 3203. [bug] Increase log level to 'info' for validation failures 
from expired or not-yet-valid RRSIGs. [RT #21796]
 2011-11-04 05:36:28 +00:00
Mark Andrews
a5166d5fce 3202. [bug] NOEDNS caching on timeout was too agressive. 
[RT #26416]
 2011-11-04 03:38:44 +00:00
Evan Hunt
1c1879b7ef 3197. [bug] Don't try to log the filename and line number when 
the config parser can't open a file. [RT #22263]
 2011-11-03 05:15:09 +00:00
Evan Hunt
77b8f02d19 3195. [cleanup] Silence "file not found" warnings when loading 
managed-keys zone. [RT #26340]
 2011-11-03 03:26:19 +00:00
Evan Hunt
8281fd83da 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to 
dnssec.h. [RT #26415]
 2011-11-03 02:54:47 +00:00
Automatic Updater
1ab9944f6b update copyright notice 2011-11-02 23:46:24 +00:00
Mark Andrews
146057d7e7 3192. [bug] A query structure could be used after being freed. 
[RT #22208]
 2011-11-02 23:42:33 +00:00
Evan Hunt
7a30c8f783 edited a comment for clarity. 2011-11-02 19:41:02 +00:00
Mark Andrews
fe3472c80b 3191. [bug] Print NULL records using unknown format. [RT #26392] 2011-11-02 01:01:52 +00:00
Automatic Updater
89d1324270 update copyright notice 2011-11-01 23:47:00 +00:00
Mark Andrews
3975f627fe 3190. [bug] Underflow in error handling in isc_mutexblock_init. 
[RT #26397]
 2011-11-01 21:59:56 +00:00
Evan Hunt
5caf26b168 3188. [bug] zone.c:zone_refreshkeys() could fail to detach 
references correctly when errors occurred, causing
			a hang on shutdown. [RT #26372]
 2011-11-01 04:00:45 +00:00
Automatic Updater
53eae9bf3e update copyright notice 2011-10-31 23:46:56 +00:00
Mark Andrews
36e97eb661 3187. [port] win32: support for Visual Studio 2008. [RT #26356] 2011-10-30 23:39:39 +00:00
Evan Hunt
c5023889ac remove debugging printf that was left in by mistake 2011-10-29 00:15:56 +00:00
Mark Andrews
74d7615fc5 9.9.0b1 2011-10-28 13:25:44 +00:00
Mark Andrews
fbf6fa0e62 initialise result 2011-10-28 12:27:06 +00:00
Automatic Updater
98a7e53914 update copyright notice 2011-10-28 12:20:31 +00:00
Mark Andrews
7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Evan Hunt
9c03f13e18 3185. [func] New 'rndc signing' option for auto-dnssec zones: 
- 'rndc signing -list' displays the current
			   state of signing operations
			 - 'rndc signing -clear' clears the signing state
		  	   records for keys that have fully signed the zone
			 - 'rndc signing -nsec3param' sets the NSEC3
			   parameters for the zone
			The 'rndc keydone' syntax is removed. [RT #23729]
 2011-10-28 06:20:07 +00:00
Mark Andrews
f7dfd53301 style, remove redudant assignment 2011-10-28 04:57:34 +00:00
Mark Andrews
cd22c3e4e4 3184. [bug] named had cpu usage when a redirect zone was 
configured. [RT #26013]
 2011-10-28 00:36:54 +00:00
Automatic Updater
96f5a19c12 update copyright notice 2011-10-27 23:46:31 +00:00
Mark Andrews
2969f16b07 move declarations to start of block 2011-10-27 22:23:58 +00:00
Scott Mann
b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Automatic Updater
8826a72394 update copyright notice 2011-10-26 23:46:15 +00:00
Mark Andrews
24ef32426d 3181. [func] Inline-signing is now supported for master zones. 
[RT #26224]
 2011-10-26 20:56:45 +00:00
Automatic Updater
329eb05c12 update copyright notice 2011-10-25 23:46:58 +00:00
Mark Andrews
0f21945e27 remove unused variable 2011-10-25 04:38:14 +00:00
Mark Andrews
b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that 
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
 2011-10-25 01:54:22 +00:00
Automatic Updater
64691d525b update copyright notice 2011-10-24 23:46:14 +00:00
Michael Graff
522222cf93 Correctly invalidate the sha2/hmac2 contexts. This was already done in practice, but this makes it zero out the whole structure rather than just the first 4 bytes + the key. sha2.c did not always zero out the full sha2 state in invalidate, but will now. 2011-10-24 22:51:29 +00:00
Automatic Updater
dfc015bc7e update copyright notice 2011-10-20 23:46:51 +00:00
Mark Andrews
ada40193c8 3175. [bug] Fix how DNSSEC positive wildcard responses from a 
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
 2011-10-20 21:42:11 +00:00
Mark Andrews
1946c596b4 3174. [bug] Always compute to revoked key tag from scratch. 
[RT #24711]
 2011-10-20 21:20:02 +00:00
Mark Andrews
37e6ff3f49 initalize set_lock 2011-10-18 02:00:56 +00:00
Mark Andrews
020c4484fe 3173. [port] Correctly validate root DS responses. [RT #25726] 2011-10-15 05:00:15 +00:00
Mark Andrews
3feb38c1f1 9.9.0a3 2011-10-14 01:12:28 +00:00
Automatic Updater
304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Mark Andrews
63b6eac79c handle unchecked assignment 2011-10-13 13:13:52 +00:00
Mark Andrews
e236b52ce0 #include <stdlib.h> 2011-10-13 07:56:32 +00:00
Vernon Schryver
9fee08f655 Commit rt25172 changes to HEAD including 
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
 2011-10-13 01:32:34 +00:00
Automatic Updater
ea68e8eba9 update copyright notice 2011-10-12 23:46:34 +00:00
Mark Andrews
af850c4120 3168. [bug] Nxdomain redirection could trigger a assert with 
a ANY query. [RT #26017]
 2011-10-12 23:09:35 +00:00
Mark Andrews
5258355c8d silence ccc-analyzer (clang) warnings 2011-10-12 02:17:53 +00:00
Mark Andrews
dc2e627239 3167. [bug] Negative answers from forwarders were not being 
correctly tagged making them appear to not be cached.
                        [RT #25380]
 2011-10-12 00:18:11 +00:00
Mark Andrews
02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Automatic Updater
0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Mark Andrews
bdcd748874 add null methods 2011-10-11 13:33:45 +00:00
Mark Andrews
4f803dd91d add #include "config.h" 2011-10-11 00:25:12 +00:00
Evan Hunt
793814f807 3164. [func] Enable DLZ modules to retrieve client information, 
so that responses can be changed depending on the
			source address of the query. [RT #25768]
 2011-10-11 00:09:03 +00:00
Evan Hunt
b2086d798b 3163. [bug] Use finer-grained locking in client.c to address 
concurrency problems with large numbers of threads.
			[RT #26044]
 2011-10-10 22:57:14 +00:00
Mark Andrews
079e4a3d87 isc_app_start needs to be called earlier to ensure that signal handlers are setup before any threads are created 2011-10-10 02:46:16 +00:00
Mark Andrews
2cc56f582c 3161. [bug] zone.c:del_sigs failed to always reset rdata leading 
assertion failures. [RT #25880]
 2011-10-07 02:55:04 +00:00
Mark Andrews
fce049a50f CHANGES 2011-10-05 03:47:59 +00:00
Mark Andrews
56e465314e 9.9.0a2 2011-09-13 22:07:58 +00:00
Evan Hunt
84f0bd3bc7 3154. [bug] Attempting to print an empty rdataset could trigger 
an assert. [RT #25452]
 2011-09-07 19:11:14 +00:00
Mark Andrews
2dbe31b3fd data and function pointers are not interchangable 2011-09-07 00:50:06 +00:00
Scott Mann
fad5116b3d Remove the ixfr-from-differences side-effect which causes an AXFR and extend 
request-ixfr to the zone level.
 2011-09-06 22:29:33 +00:00
Evan Hunt
76a7d4e152 3152. [cleanup] Some versions of gcc and clang failed due to 
incorrect use of __builtin_expect. [RT #25183]
 2011-09-05 18:00:22 +00:00
Evan Hunt
32016d7a9e made doneloading() static, removed unnecessary startloading() prototype 2011-09-05 06:27:05 +00:00
Evan Hunt
cee9d6dc42 fixed a compiler warning due to prototype mismatch between doneloading() 
and dns_zt_zoneloaded_t
 2011-09-05 03:45:22 +00:00
Evan Hunt
a4668bac4e silence compiler warning 2011-09-03 19:53:15 +00:00
Evan Hunt
6e4fa2e24d include time.h to silence a compiler warning 2011-09-03 19:22:43 +00:00
Evan Hunt
fd6a83869a silence compiler warning 2011-09-03 16:27:51 +00:00
Evan Hunt
fa8427aa63 silence compiler warnings 2011-09-03 16:15:08 +00:00
Mark Andrews
15c8cf556d make push_readyq prototype and declaration consistant 2011-09-03 13:54:06 +00:00
Evan Hunt
98c79a7059 silence compiler warning 2011-09-03 06:13:30 +00:00
Evan Hunt
ac7109d68e oops, build was failing with threads disabled 2011-09-03 00:24:27 +00:00
Automatic Updater
ca894e53b5 update copyright notice 2011-09-02 23:46:33 +00:00
Evan Hunt
8a2ab2b920 3150. [func] Improved startup and reconfiguration time by 
enabling zones to load in multiple threads. [RT #25333]
 2011-09-02 21:15:39 +00:00
Mark Andrews
2c35c68236 3148. [bug] Processing of normal queries could be stalled when 
forwarding a UPDATE message. [RT #24711]
 2011-08-31 06:49:10 +00:00
Automatic Updater
4e68c7c87c update copyright notice 2011-08-30 23:46:53 +00:00
Mark Andrews
81bbd645c7 dns_view_issecuredomain: check that view->secroots_priv is non NULL before calling dns_keytable_issecuredomaiani otherwise return ISC_R_NOTFOUND 2011-08-30 21:14:50 +00:00
Mark Andrews
be239f6147 silence clang warnings 2011-08-30 14:01:53 +00:00
Mark Andrews
0075be5f32 remove unused variables 2011-08-30 13:45:16 +00:00
Mark Andrews
49f385a7ad include dns/diff.h 2011-08-30 13:02:39 +00:00
Mark Andrews
9198ab377b 3147. [func] Initial inline signing support. [RT #23657] 2011-08-30 05:16:15 +00:00
Mark Andrews
2ec0852e91 POST(port); POST(addr); 2011-08-30 00:18:43 +00:00
Automatic Updater
d0dce4d839 update copyright notice 2011-08-29 23:46:44 +00:00
Mark Andrews
d64e3b29bd check that the result of dns_dbiterator_current is ISC_R_SUCCESS or DNS_R_NEWORIGIN 2011-08-29 23:44:07 +00:00
Mark Andrews
6ba6ff39c0 check the results of dns_name_toprincipal calls, only use gnamebuf.value when valid 2011-08-29 06:33:25 +00:00
Mark Andrews
04ec1e31bf *++tp = 0; -> tp++; *tp = 0; 2011-08-29 05:58:31 +00:00
Mark Andrews
07a4f0eace POST(p); POST(len); 2011-08-29 04:15:50 +00:00
Mark Andrews
106561b398 INSIST(response); 2011-08-29 04:02:54 +00:00
Mark Andrews
069182809a remove unnecessary assignment to found_ttl 2011-08-26 05:29:48 +00:00
Mark Andrews
e1cf6fd20a DNS_R_NEWORIGIN could be accidently returned, clearnode's result was being ignored 2011-08-26 05:12:56 +00:00
Mark Andrews
e1d7ec063f mctx is nolonger required 2011-08-26 04:49:14 +00:00
Mark Andrews
4c11a79320 silence 'is never read' warnings 2011-08-26 04:42:24 +00:00
Mark Andrews
84e7c0efbf remove isc_os_minprivs call accidently committed 2011-08-25 11:37:13 +00:00
Mark Andrews
32f5f15b58 cltfd is only needed when select is being used 2011-08-25 08:17:54 +00:00
Mark Andrews
f4a4f6945e silence 'Dereference of undefined pointer value' by assigning to 'sorted' sequentially from zero 2011-08-25 06:28:11 +00:00
Mark Andrews
f67bcc9dc6 save the result of is_response(msg) so it can be treated as a invariant by clang 2011-08-25 06:20:07 +00:00
Mark Andrews
8f1c29d73f silence null pointer dereference warning by adding INSIST(sibling != NULL); 2011-08-25 05:56:50 +00:00
Mark Andrews
b62c2acf81 add method for isc_socket_getfd 2011-08-24 23:17:52 +00:00
Automatic Updater
5e965459a6 update copyright notice 2011-08-23 23:54:00 +00:00
Evan Hunt
6c18c134c8 add isc_socket_getfd() on win32 side 2011-08-23 18:24:33 +00:00
Evan Hunt
6986290f4e address win32 compile/link problems 2011-08-23 17:02:53 +00:00
Mark Andrews
e7008e7007 #include <stdlib.h> 2011-08-23 03:43:03 +00:00
Evan Hunt
e4c4cf5177 Prepare for release of 9.9.0a1 2011-08-23 02:06:46 +00:00
Evan Hunt
99cbc3d3a4 3145. [test] Capture output of ATF unit tests in "./atf.out" if 
there were any errors while running them. [RT #25527]
 2011-08-23 01:29:39 +00:00
Evan Hunt
5a75f61dd4 3144. [bug] dns_dbiterator_seek() could trigger an assert when 
used with a nonexistent database node. [RT #25358]
 2011-08-23 00:59:23 +00:00
Automatic Updater
d5c0739351 update copyright notice 2011-08-18 23:46:35 +00:00
Mark Andrews
0226bd69cd cast to unsigned 2011-08-18 17:41:54 +00:00
Mark Andrews
ecf809f959 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 06:00:07 +00:00
Mark Andrews
3a63259484 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 04:52:35 +00:00
Automatic Updater
4b21b35cff update copyright notice 2011-08-16 23:46:36 +00:00
Mark Andrews
0f97264419 3142. [bug] NAPTR is class agnostic. [RT #25429] 2011-08-16 00:02:38 +00:00
Automatic Updater
826f2233c9 update copyright notice 2011-08-09 23:46:39 +00:00
Francis Dupont
f558c8988e spelling 2011-08-09 10:29:23 +00:00
Mark Andrews
772dfb90be 3141. [bug] Silence spurious "zone serial (0) unchanged" messages 
associated with empty zones. [RT #25079]
 2011-08-09 02:24:28 +00:00
Automatic Updater
adbc177194 update copyright notice 2011-08-02 23:47:52 +00:00
Evan Hunt
0127993480 3140. [func] New command "rndc flushtree <name>" clears the 
specified name from the server cache along with
			all names under it. [RT #19970]
 2011-08-02 20:36:13 +00:00
Automatic Updater
f71ddcf65f update copyright notice 2011-07-29 23:47:52 +00:00
Automatic Updater
2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Curtis Blackburn
b068144e89 Actually adding the hash_test.c file... oops 2011-07-28 23:40:09 +00:00
Curtis Blackburn
8787b357e6 3139.[test]added tests from RFC6234, RFC2202, and RFC1321 for the 2011-07-28 21:05:09 +00:00
Mark Andrews
ea30861fe5 turn isc_socket_dup into a method 2011-07-28 11:42:41 +00:00
Mark Andrews
31f46f1869 3138. [bug] Address memory leaks and out-of-order operations when 
shutting named down. [RT #25210]
 2011-07-28 04:27:27 +00:00
Evan Hunt
f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple 
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
 2011-07-28 04:04:37 +00:00
Automatic Updater
c33e22f65a update copyright notice 2011-07-21 23:47:53 +00:00
Mark Andrews
7a4d2ccb62 s/fallbackas/fallback as/ 2011-07-21 06:26:09 +00:00
Mark Andrews
6fab2f80c9 3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing. 
See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
                        [RT #24950]
 2011-07-21 01:40:50 +00:00
Curtis Blackburn
7439c4f402 removed #include <stdlib.h> from lib/dns/zone.c 2011-07-20 16:28:28 +00:00
Curtis Blackburn
6fc85cd749 added #include <stdlib.h> to lib/dns/zone.c 2011-07-20 14:28:24 +00:00
Automatic Updater
de6d0a4a36 update copyright notice 2011-07-08 23:47:54 +00:00
Evan Hunt
b47c020d5c 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:43:26 +00:00
Automatic Updater
2a36d8ca40 update copyright notice 2011-07-07 23:47:50 +00:00
Evan Hunt
67be612120 *** empty log message *** 2011-07-06 18:13:22 +00:00
Evan Hunt
29f6e3e4f9 update cvsignore 2011-07-06 18:12:25 +00:00
Evan Hunt
2a749b3535 oops, missed updating the signature of dns_test_begin() when I merged 
update_test.c
 2011-07-06 18:11:35 +00:00
Evan Hunt
c46ce2d79b 3131. [func] Improve scalability by allocating one zone task 
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
 2011-07-06 05:05:52 +00:00
Evan Hunt
42cf2ff7ba 3131. [func] Improve scalability by allocating one zone task 
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
 2011-07-06 01:36:32 +00:00
Automatic Updater
122230159d update copyright notice 2011-07-01 23:47:44 +00:00
Evan Hunt
d3b9eefd1c 3130. [func] Support alternate methods for managing a dynamic 
zone's serial number. Two methods are currently
			defined using serial-update-method, "increment"
			(default) and "unixtime". [RT #23849]
 2011-07-01 07:15:19 +00:00
Mark Andrews
a69070d8fa 3130. [func] Support alternate methods for managing a dynamic 
zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]
 2011-07-01 02:25:48 +00:00
Automatic Updater
313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Mark Andrews
b4eaa17e82 update for api changes 2011-06-17 07:28:33 +00:00
Evan Hunt
e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when 
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
 2011-06-17 07:05:02 +00:00
Automatic Updater
0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt
79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an 
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
 2011-06-10 01:51:09 +00:00
Evan Hunt
5e3affc6a0 3127. [bug] 'rndc thaw' will now remove a zone's journal file 
if the zone serial number has been changed and
			ixfr-from-differences is not in use.  [RT #24687]
 2011-06-10 01:32:38 +00:00
Evan Hunt
6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate 
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
 2011-06-08 22:13:51 +00:00
Automatic Updater
6406d6507a update copyright notice 2011-05-26 23:47:28 +00:00
Evan Hunt
fbe2cff19f 3121. [security] An authoritative name server sending a negative 
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
 2011-05-26 23:11:15 +00:00
Mark Andrews
4100ae5109 move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build 2011-05-26 07:56:39 +00:00
Mark Andrews
ea82782532 3120. [bug] Named could fail to validate zones list in a DLV 
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
 2011-05-26 04:35:02 +00:00
Evan Hunt
0245f7725c 3118. [bug] When rolling to a new DNSSEC key, a private-type 
record could be created and never marked complete.
			[RT #23253]
 2011-05-26 04:25:47 +00:00
Evan Hunt
bfe32d08c5 3116. [func] New 'dnssec-update-mode' option controls updates 
of DNSSEC records in signed dynamic zones.  Set to
			'no-resign' to disable automatic RRSIG regeneration
			while retaining the ability to sign new or changed
			data. [RT #24533]
 2011-05-23 20:10:03 +00:00
Automatic Updater
b1b37b61da update copyright notice 2011-05-19 23:47:17 +00:00
Evan Hunt
ff330a6273 another post-commit fix for change 3114: call dns_db_resigned()/ 
dns_db_setsigningtime() only when incrementally resigning, not other
times.
 2011-05-19 21:29:07 +00:00
Evan Hunt
276f9fac3e another post-commit bugfix for change 3114: need to take rndc freeze into 
account in determining whether zone is dynamic
 2011-05-19 04:44:58 +00:00
Evan Hunt
d9343d917a minor code simplification 2011-05-19 04:33:17 +00:00
Evan Hunt
2a4f494565 Change 3114 wasn't complete--needed to remove another call to 
dns_db_resigned().
 2011-05-19 04:28:33 +00:00
Scott Mann
a50ce0f80b Fix for RT #23136 task 1. 2011-05-19 00:31:57 +00:00
Evan Hunt
ab77e813ea add dns_dnssec_signs 2011-05-17 01:48:24 +00:00
Automatic Updater
687d47f6c9 update copyright notice 2011-05-16 23:47:41 +00:00
Evan Hunt
5c8ec4d5ea "make install" was failing when building with both exportlibs and libtool. 
(trivial makefile fix, no CHANGES note.) [RT #24425]
 2011-05-16 22:58:05 +00:00
Evan Hunt
de7df3e56f 3111. [bug] Improved consistency checks for dnssec-enable and 
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
 2011-05-07 05:55:17 +00:00
Automatic Updater
40717638fa update copyright notice 2011-05-06 23:47:29 +00:00
Evan Hunt
ac21f918f2 3109. [func] The also-notify option now uses the same syntax 
as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]
 2011-05-06 21:23:51 +00:00
Evan Hunt
485522d7e1 3108. [cleanup] dnssec-signzone: Clarified some error and 
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
			code (use -P instead). [RT #20852]

3107.	[bug]		dnssec-signzone: Report the correct number of ZSKs
			when using -x. [RT #20852]
 2011-05-06 21:08:33 +00:00
Evan Hunt
989fb50178 fixed an error in prior commit 2011-05-05 18:04:01 +00:00
Evan Hunt
d454a60f56 3103. [bug] Configuring 'dnssec-validation auto' in a view 
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
 2011-05-05 16:13:35 +00:00
Automatic Updater
54968ae88e update copyright notice 2011-04-29 23:47:18 +00:00
Evan Hunt
39f2d1a96a 3102. [func] New 'dnssec-loadkeys-interval' option configures 
how often, in minutes, to check the key repository
			for updates when using automatic key maintenance.
			Default is every 60 minutes (formerly hard-coded
			to 12 hours). [RT #23744]

3101.	[bug]		Zones using automatic key maintenance could fail
			to check the key repository for updates. [RT #23744]
 2011-04-29 21:37:15 +00:00
Mark Andrews
1b9a5fa77f isc_file_isplainfile 2011-04-08 05:36:15 +00:00
Mark Andrews
53c1e5f991 dns_cache_create3 2011-04-08 04:45:03 +00:00
Mark Andrews
2b3bcbce23 3096. [bug] Set KRB5_KTNAME before calling log_cred() in 
dst_gssapi_acceptctx(). [RT #24004]
 2011-04-07 23:03:22 +00:00
Mark Andrews
9cf04a12ec 3095. [bug] Handle isolated reserved ports in the port range. 
[RT #23957]
 2011-04-06 10:27:16 +00:00
Mark Andrews
6b89a2c905 format portability: cast socklen_t -> long and use %ld 2011-04-05 06:33:50 +00:00
Mark Andrews
60821a4c33 1 -> 1U 2011-04-04 11:09:11 +00:00
Mark Andrews
64abedd85a unsigned constants 2011-03-28 05:32:16 +00:00
Mark Andrews
fade3b5f91 unsigned constants 2011-03-28 05:20:08 +00:00
Mark Andrews
d97637ce11 unsigned constants 2011-03-28 03:41:55 +00:00
Evan Hunt
319b8a1488 3092. [bug] Signatures for records at the zone apex could go 
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
 2011-03-25 23:53:02 +00:00
Automatic Updater
6333ba02a5 update copyright notice 2011-03-21 23:47:21 +00:00
Evan Hunt
0994d3a21b 3087. [bug] DDNS updates using SIG(0) with update-policy match 
type "external" could cause a crash. [RT #23735]
 2011-03-21 19:54:03 +00:00
Evan Hunt
1063914c30 Fixed some problems from change #3084 that turned up after committing it; 
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
 2011-03-21 18:38:40 +00:00
Evan Hunt
7cb226ec34 3084. [func] A new command "rndc sync" dumps pending changes in 
a dynamic zone to disk; "rndc sync -clean" also
			removes the journal file after syncing.  Also,
			"rndc freeze" no longer removes journal files.
			[RT #22473]
 2011-03-21 07:22:14 +00:00
Mark Andrews
5095e72ac3 3083. [bug] NOTIFY messages were not being sent when generating 
a NSEC3 chain incrementally. [RT #23702]
 2011-03-21 01:02:39 +00:00
Mark Andrews
b76715a02f Use UINT_MAX to initialise split_width (unsigned int) instead of -1. 2011-03-20 02:31:54 +00:00
Automatic Updater
7885190562 update copyright notice 2011-03-18 23:47:36 +00:00
Francis Dupont
d99d0c19b2 introduce STDTIME_ON_32BITS 2011-03-18 09:00:45 +00:00
Automatic Updater
207cee019e update copyright notice 2011-03-17 23:47:30 +00:00
Francis Dupont
50f64cf0e5 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:25:54 +00:00
Mark Andrews
ed53ec0b06 3077. [bug] zone.c:zone_refreshkeys() incorrectly called 
dns_zone_attach(), use zone->irefs instead. [RT #23303]
 2011-03-17 05:21:50 +00:00
Evan Hunt
61bcc23203 3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and 
dnssec-keyfromlabel sets the default TTL of the
			key.  When possible, automatic signing will use that
			TTL when the key is published.  [RT #23304]
 2011-03-17 01:40:40 +00:00
Mark Andrews
0e095727ff 3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant 
timestamp when determining which keys are active.
                        [RT #23642]
 2011-03-17 01:17:21 +00:00
Francis Dupont
0a25550b46 remove extra space 2011-03-14 13:40:52 +00:00
Francis Dupont
52c3f66536 isc_mutex_destroy() returns a value 2011-03-14 13:39:17 +00:00
Mark Andrews
26b49e8459 3074. [bug] Make the adb cache read through for zone data and 
glue learn for zone named is authoritative for.
                        [RT #22842]
 2011-03-13 02:49:28 +00:00
Automatic Updater
c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Evan Hunt
f563fcf124 Forgot to initialize a fixedname, which made it a brokenname. 2011-03-11 17:19:05 +00:00
Mark Andrews
2415f36f79 3073. [bug] managed-keys changes were not properly being recorded. 
[RT #20256]
 2011-03-11 13:20:43 +00:00
Mark Andrews
cf4ceeee5f 3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference. 
[RT #20256]
 2011-03-11 13:02:33 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Mark Andrews
8473cd921e pkey is only used if USE_ENGINE is defined or USE_EVP is 1 2011-03-11 02:59:37 +00:00
Evan Hunt
a7acfb05df Reversing prior change, turns out not to be legal on all compilers. 2011-03-11 01:28:10 +00:00
Evan Hunt
f2f2d20990 Silence a compiler warning by using #if comparison instead of if. No 
CHANGES note because it's trivial. [RT #23587]
 2011-03-11 01:20:39 +00:00
Mark Andrews
19f4b069dc 3068. [bug] Named failed to build with a OpenSSL without engine 
support. [RT #23473]
 2011-03-11 01:11:54 +00:00
Evan Hunt
422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default, 
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
 2011-03-10 04:36:16 +00:00
Automatic Updater
50d79c1309 update copyright notice 2011-03-09 23:47:17 +00:00
Mark Andrews
215ef83bbe 3065. [bug] RRSIG could have time stamps too far in the future. 
[RT #23356]
 2011-03-09 07:22:32 +00:00
Mark Andrews
345d37dbb6 add 'sync' to ISC_PLATFORM_USEMACASM build as well 2011-03-08 00:52:42 +00:00
Automatic Updater
5eee264bfa update copyright notice 2011-03-07 23:47:37 +00:00
Mark Andrews
4b583f0193 only reset first in multi-line mode 2011-03-07 13:42:11 +00:00
Mark Andrews
fea04b0ffe 3064. [bug] powerpc: add sync instructions to the end of atomic 
operations. [RT #23469]
 2011-03-07 00:17:08 +00:00
Automatic Updater
0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7 3062. [func] Made several changes to enhance human readability 
of DNSSEC data in dig output and in generated
			zone files:
			 - DNSKEY record comments are more verbose, no
			   longer used in multiline mode only
			 - multiline RRSIG records reformatted
			 - multiline output mode for NSEC3PARAM records
			 - "dig +norrcomments" suppresses DNSKEY comments
			 - "dig +split=X" breaks hex/base64 records into
			   fields of width X; "dig +nosplit" disables this.
			[RT #22820]
 2011-03-05 19:39:07 +00:00
Automatic Updater
26a7306397 update copyright notice 2011-03-04 23:47:47 +00:00
Francis Dupont
13d1b15b18 export dns_ncache_current and dns_resolver_settimeout 2011-03-04 21:36:51 +00:00
Scott Mann
32babe43eb Ensure that log files are plain files. (RT #22771) 2011-03-04 14:07:03 +00:00
Automatic Updater
7d9d170dbb update copyright notice 2011-03-03 23:47:32 +00:00
Francis Dupont
9fe8cca065 add URI support 2011-03-03 14:10:27 +00:00
Evan Hunt
70c7f4fb4f 3053. [bug] Under a sustained high query load with a finite 
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
 2011-03-03 04:42:25 +00:00
Mark Andrews
c1ced49662 3051. [bug] NS records obsure DS records at the bottom of the 
zone if both are present. [RT #23035]
 2011-03-02 04:20:34 +00:00
Automatic Updater
c8175ece69 update copyright notice 2011-03-01 23:48:07 +00:00
Mark Andrews
4c05f9a6a3 3048. [bug] Fully seperate view key mangement. [RT #23419] 2011-03-01 22:44:04 +00:00
Scott Mann
d31740ce28 Fixed DNSKEY NODATA responses not cached (RT #22908). 2011-03-01 14:40:39 +00:00
Francis Dupont
664917beda Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:21:35 +00:00
Mark Andrews
d3e3d7846d 3044. [bug] Hold the socket manager lock while freeing the socket. 
[RT #23333]
 2011-02-28 12:48:30 +00:00
Evan Hunt
ef421f66f4 3043. [test] Merged in the NetBSD ATF test framework (currently 
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
 2011-02-26 02:26:33 +00:00
Automatic Updater
45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00
Mark Andrews
0e507dbb81 2039. [func] Redirect on NXDOMAIN support. [RT #23146] 2011-02-23 03:08:11 +00:00
Mark Andrews
fd5d7b4b1c 2038. [bug] Install <dns/rpz.h>. [RT #23342] 2011-02-22 11:48:02 +00:00
Mark Andrews
b795de862b 2036. [bug] Check built-in zone arguments to see if the zone 
is re-usable or not. [RT #21914]
 2011-02-22 04:14:30 +00:00
Automatic Updater
b01d422daf update copyright notice 2011-02-21 23:47:45 +00:00
Mark Andrews
4b45a8fc5a handle cname response 2011-02-21 23:37:31 +00:00
Mark Andrews
17c98e7add 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET). 
[RT #22521]
 2011-02-21 07:08:33 +00:00
Mark Andrews
699e00089f 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:01:09 +00:00
Mark Andrews
6883a918f7 3031. [bug] dns_rdataclass_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:50:42 +00:00
Mark Andrews
e01f55daa4 3030. [bug] dns_rdatatype_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:41:07 +00:00
Mark Andrews
4c577cbd1e 3029. [bug] isc_netaddr_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:30:06 +00:00
Mark Andrews
0b8c40c8d8 CHANGES 2011-02-21 06:18:03 +00:00
Mark Andrews
30aaec2122 3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to 
catch NULL pointer dereferences before they happen.
                        [RT #22521]
 2011-02-21 06:07:49 +00:00
Mark Andrews
17a0bbda33 3026. [bug] lib/isc/httpd.c: check that we have enough space 
after calling grow_headerspace() and if not
                        re-call grow_headerspace() until we do. [RT #22521]
 2011-02-21 05:55:09 +00:00
Automatic Updater
d5a3595af8 update copyright notice 2011-02-19 23:47:38 +00:00
Evan Hunt
b0c8948e37 Fixed incorrect library link order in libisccc and libisccfg 2011-02-19 01:30:52 +00:00
Evan Hunt
63b1c80af8 Fixed an error in change 3023, ensuring that journal file isn't 
removed after IXFR.  No CHANGES note.
 2011-02-19 01:24:46 +00:00
Automatic Updater
10aafc5aa3 update copyright notice 2011-02-18 23:47:25 +00:00
Michael Graff
b7f0ab323d catch two unused function params, followup to RT#23310 2011-02-18 23:39:55 +00:00
Evan Hunt
b32e391602 3025. [bug] Fixed a possible deadlock due to zone resigning. 
[RT #22964]
 2011-02-18 23:26:44 +00:00
Michael Graff
52d44117c8 Remove RTT banding [RT 23310] 2011-02-18 22:55:31 +00:00
Evan Hunt
1d5981dd3f 3023. [bug] Named could be left in an inconsistent state when 
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
 2011-02-18 21:22:12 +00:00
Mark Andrews
9e4359b42e silence: warning: 'manager_log' defined but not used 2011-02-18 04:19:05 +00:00
Automatic Updater
6885ca3220 update copyright notice 2011-02-17 23:47:24 +00:00
Mark Andrews
293e500697 simplify zone_signwithkey call 2011-02-17 04:57:28 +00:00
Mark Andrews
19afa17960 ensure that the DNSKEY rrset get re-signed even if it hasn't been 
updated in sign_apex.
 2011-02-17 02:57:22 +00:00
Automatic Updater
c41b2924a5 update copyright notice 2011-02-15 23:47:36 +00:00
Mark Andrews
b1b42b03b7 3020. [bug] auto-dnssec failed to correctly update the zone when changing the DNSKEY RRset. [RT #23232] 2011-02-15 22:02:36 +00:00
Francis Dupont
931814de4a typo in comment 2011-02-15 18:23:34 +00:00
Mark Andrews
462a97981f CHANGES 2011-02-07 00:10:36 +00:00
Automatic Updater
784a904bd0 update copyright notice 2011-02-03 12:18:12 +00:00
Mark Andrews
a8e5a59183 3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and 
IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
 2011-02-03 08:13:51 +00:00
Mark Andrews
c1ee8bb4ba 3013. [bug] The DNS64 ttl was not always being set as expected. 
[RT #23034]
 2011-02-03 07:35:56 +00:00
Mark Andrews
000a8970f8 3011. [func] Change the default query timeout from 30 seconds 
to 10.  Allow setting this in named.conf using the new
                        'resolver-query-timeout' option, which specifies a max
                        time in seconds.  0 means 'default' and anything longer
                        than 30 will be silently set to 30. [RT #22852]
 2011-02-03 05:41:55 +00:00
Evan Hunt
903b3c84e2 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer 
for refreshing managed-keys. [RT #22296]
 2011-02-03 00:21:55 +00:00
Automatic Updater
b720af4cd4 update copyright notice 2011-01-27 23:47:21 +00:00
Mark Andrews
1fba20bd0b 3009. [bug] clients-per-query code didn't work as expected with 
particular query patterns. [RT #22972]
 2011-01-27 02:24:49 +00:00
Automatic Updater
c674aacfd6 update copyright notice 2011-01-19 23:47:12 +00:00
Mark Andrews
f862994cbd explicitly initialise dump and restore 2011-01-19 03:09:14 +00:00
Mark Andrews
ee931bc7a3 silence warning: integer overflow detected: op "<<" 2011-01-17 04:27:23 +00:00
Automatic Updater
a09fff7051 update copyright notice 2011-01-14 00:51:43 +00:00
Mark Andrews
2c18cb2e9a explicit initialisation 2011-01-14 00:33:32 +00:00
Mark Andrews
481ebd6977 rpz require -DBIND9 2011-01-13 09:53:04 +00:00
Mark Andrews
17acd2a230 remove -I "../..../lib/dns/sec/openssl/include" 2011-01-13 08:56:45 +00:00
Automatic Updater
2352050890 update copyright notice 2011-01-13 08:50:29 +00:00
Mark Andrews
50fd8587a7 extra external symbols 2011-01-13 08:29:08 +00:00
Mark Andrews
6767b5b544 openssl include path 2011-01-13 08:15:30 +00:00
Mark Andrews
0a24e3a8ae openssl include path 2011-01-13 07:51:06 +00:00
Mark Andrews
000439ae98 isc_netaddr_getzone 2011-01-13 07:20:14 +00:00
Mark Andrews
9e78a55d81 opensslgost_link.c 2011-01-13 07:12:14 +00:00
Mark Andrews
23784a729d dst_key_restory -> dst_key_restore 2011-01-13 07:06:50 +00:00
Mark Andrews
559b51e980 only look for sys/socket.h if we also have sys/un.h 2011-01-13 07:05:57 +00:00
Mark Andrews
93b81c6d0a explicit conversion from unsigned long to dns_rpz_cidr_bits_t 2011-01-13 06:48:14 +00:00
Mark Andrews
68f6e45d28 uint8_t -> unsigned char 2011-01-13 06:41:05 +00:00
Mark Andrews
c3e9221f3b prototype mismatch 2011-01-13 06:36:04 +00:00
Mark Andrews
119f627c82 uint32_t -> isc_uint32_t 2011-01-13 06:29:16 +00:00
Mark Andrews
98455e2090 missing semi-colon 2011-01-13 06:21:15 +00:00
Automatic Updater
9cee5bb028 update copyright notice 2011-01-13 04:59:26 +00:00
Mark Andrews
e02c1d738b 9.8.0b1 2011-01-13 04:45:17 +00:00
Mark Andrews
a3eb8b33ec unsigned constants 2011-01-13 04:20:03 +00:00
Mark Andrews
6eba31815a #include <isc/print.h> 2011-01-13 03:03:31 +00:00
Mark Andrews
87708bde16 3008. [func] Response policy zones (RPZ) support. [RT #21726] 2011-01-13 01:59:28 +00:00
Mark Andrews
38b84a1fcf 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 00:55:49 +00:00
Automatic Updater
135bcc2e42 update copyright notice 2011-01-11 23:47:14 +00:00
Mark Andrews
adccda3b4c &dstkey -> dstkey 2011-01-10 07:38:22 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved 
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
 2011-01-10 05:32:04 +00:00
Mark Andrews
1403f9aa2f don't free memory passed to putenv(), use malloc and check for malloc failures 2011-01-10 03:49:49 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd 3005. [port] Solaris: Work around the lack of 
gsskrb5_register_acceptor_identity() by setting
			the KRB5_KTNAME environment variable to the
			contents of tkey-gssapi-keytab.  Also fixed
			test errors on MacOSX.  [RT #22853]
 2011-01-08 00:33:12 +00:00
Automatic Updater
93235c1cba update copyright notice 2011-01-07 23:47:07 +00:00
Evan Hunt
a727690e8b HPUX: silence compiler warnings about signed/unsigned comparisons 2011-01-07 21:42:03 +00:00
Evan Hunt
3df7f5a9d6 add ssu_external.c to win32 definitions 2011-01-07 05:32:49 +00:00
Evan Hunt
4ac6a44512 Forgot to add ssu_external.c when committing change #3003. 2011-01-07 05:29:08 +00:00
Mark Andrews
dc4fa197dd 3004. [func] DNS64 reverse support. [RT #22769] 2011-01-07 04:31:39 +00:00
Automatic Updater
db69d5d53c update copyright notice 2011-01-06 23:47:00 +00:00
Evan Hunt
3916872f37 3003. [experimental] Added update-policy match type "external", 
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
 2011-01-06 23:24:39 +00:00
Automatic Updater
1da9dbcf48 update copyright notice 2011-01-04 23:47:14 +00:00
Mark Andrews
161429fc05 3002. [bug] isc_mutex_init_errcheck() failed to destroy attr. 
[RT #22766]
 2011-01-04 04:32:13 +00:00
Evan Hunt
79bf7c874b 3001. [func] Added a default trust anchor for the root zone, which 
can be switched on by setting "dnssec-validation auto;"
			in the named.conf options. [RT #21727]
 2011-01-03 23:45:08 +00:00
Evan Hunt
d9ad0a55bb 3000. [bug] More TKEY/GSS fixes: 
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
 2010-12-24 02:20:47 +00:00
Automatic Updater
a094c46640 update copyright notice 2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94 2999. [func] Add GOST support (RFC 5933). [RT #20639] 2010-12-23 04:08:00 +00:00
Automatic Updater
557919588b update copyright notice 2010-12-22 23:46:59 +00:00
Mark Andrews
777b848142 2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive 
to the task api. [RT #22776]
 2010-12-22 13:05:20 +00:00
Mark Andrews
7a54dadeb5 2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive 
to the task api. [RT #22776]
 2010-12-22 05:19:02 +00:00
Mark Andrews
79344b9710 2996. [security] Temporarily disable SO_ACCEPTFILTER support. 
[RT #22589]
 2010-12-22 03:08:36 +00:00
Mark Andrews
179e028b35 2995. [bug] The Kerberos realm was not being correctly extracted 
from the signer's identity. [RT #22770]
 2010-12-22 02:33:12 +00:00
Automatic Updater
8868ef9c64 update copyright notice 2010-12-21 23:47:08 +00:00
Mark Andrews
c2170a4bd0 2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and 
do not use threads on earlier versions.  Also kill
                        the unproven-pthreads, mit-pthreads, and ptl2 support.
 2010-12-21 04:20:23 +00:00
Mark Andrews
82f77687ab 2993. [func] Dynamically grow adb hash tables. [RT #21186] 2010-12-21 03:11:42 +00:00
Automatic Updater
ca103999e6 update copyright notice 2010-12-20 23:47:21 +00:00
Evan Hunt
db4c1bc48a Looks like "ifdef" should have been "ifndef". (Committing without review to 
silence robie.)
 2010-12-19 21:32:35 +00:00
Evan Hunt
c445b2f648 Add #ifdef BIND9 to some of the new DLZ code to fix link errors 
when building with --enable-exportlibs
 2010-12-19 02:51:41 +00:00
Evan Hunt
9f453d9342 removed unnecessary "done" log message from dns_sdlzcreate(); it used 
__FUNCTION__ which caused problems on some compilers.
 2010-12-19 02:37:08 +00:00
Automatic Updater
941c0792f2 update copyright notice 2010-12-18 23:47:11 +00:00
Mark Andrews
c880d51849 gsskrb5_register_acceptor_identity is not available on all platforms 2010-12-18 14:46:21 +00:00
Mark Andrews
6dcb804dc6 UNUSED(use_static_stub); 2010-12-18 11:47:13 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed 
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
 2010-12-18 01:56:23 +00:00
Automatic Updater
0ccd663a83 update copyright notice 2010-12-16 23:47:08 +00:00
Tatuya JINMEI 神明達哉
743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub 
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
 2010-12-16 09:51:30 +00:00
Mark Andrews
8d8f0b4659 2984. [bug] Don't run MX checks when the target of the MX record is ".". [RT #22645] 2010-12-14 00:39:59 +00:00
Mark Andrews
a16d8521e4 re-base the api version for 9.8 2010-12-10 01:13:02 +00:00
Mark Andrews
391b2f42eb dns64 2010-12-09 06:12:43 +00:00
Mark Andrews
187d99dc53 s/dev/sdev/ 2010-12-09 06:08:05 +00:00
Mark Andrews
44c0cfd2be remove extraneos semicolon 2010-12-09 04:59:09 +00:00
Mark Andrews
987f2097a6 dns64 is BIND9 only 2010-12-09 04:53:48 +00:00
Mark Andrews
73dbd4e933 9.8.0a1 2010-12-09 04:39:10 +00:00
Automatic Updater
fd6a9d688c update copyright notice 2010-12-09 04:31:57 +00:00
Mark Andrews
b44bb86068 add comment 2010-12-09 04:17:15 +00:00
Mark Andrews
1e442d1994 zero bind 64 to 71 if prefix len is 64 2010-12-09 04:01:43 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Mark Andrews
8aee18709f 2980. [bug] named didn't properly handle UPDATES that changed the 
TTL of the NSEC3PARAM RRset. [RT #22363]
 2010-12-07 02:53:34 +00:00
Mark Andrews
ab39760512 silence warning. temporary 2010-12-04 22:27:29 +00:00
Mark Andrews
b286683ae8 temporally make isc__task_exiting become isc_task_exiting so that the 
export version of libisc has all the symbols to link.
 2010-12-04 13:25:59 +00:00
Automatic Updater
59b283de0a update copyright notice 2010-12-03 23:46:46 +00:00
Evan Hunt
e78c2b856b 2979. [bug] named could deadlock during shutdown if two 
"rndc stop" commands were issued at the same
			time. [RT #22108]
 2010-12-03 22:05:19 +00:00
Mark Andrews
310e10d536 pass the address of dstkey 2010-12-03 21:47:19 +00:00
Mark Andrews
cc83084441 s/dns_key_free/dst_key_free/ 2010-12-03 12:03:22 +00:00
Mark Andrews
c0a76b3c0b 2978. [port] hpux: look for <devpoll.h> [RT #21919] 2010-12-03 00:57:57 +00:00
Automatic Updater
326a702a35 update copyright notice 2010-12-02 23:46:56 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Mark Andrews
97664670d0 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 04:58:13 +00:00
Automatic Updater
e085624e0f update copyright notice 2010-11-30 23:46:55 +00:00
Evan Hunt
b5b934a0bb 2974. [bug] Some vaild UPDATE requests could fail due to a 
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
 2010-11-30 02:27:08 +00:00
Automatic Updater
bc7051ee3f update copyright notice 2010-11-18 00:59:43 +00:00
Mark Andrews
5a636f9951 2972. [bug] win32: address windows socket errors. [RT #21906] 2010-11-18 00:24:00 +00:00
Automatic Updater
33cc94f04c update copyright notice 2010-11-17 23:47:09 +00:00
Evan Hunt
8eb30f8dd3 2971. [bug] Fixed a bug that caused journal files not to be 
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
 2010-11-17 00:27:54 +00:00
Mark Andrews
d48730a446 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 06:46:44 +00:00
Mark Andrews
cd9d825a71 remove accidental commit 2010-11-16 05:38:31 +00:00
Mark Andrews
a27b3757fd 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 01:14:51 +00:00
Mark Andrews
7965c00ca8 check for size equal zero in _format(), replace snprintf of a fixed string with strlcpy 2010-11-16 00:53:36 +00:00
Mark Andrews
432e1ce402 check that grow_headerspace added enough space or re-call it 2010-11-16 00:51:41 +00:00
Mark Andrews
c5a3400f23 REQUIRE that rataset/rdatalist be non NULL 2010-11-16 00:50:28 +00:00
Mark Andrews
a158495f84 INSIST that bucket in no longer ISC_ADB_INVALIDBUCKET after find_*_and_lock calls 2010-11-16 00:49:18 +00:00
Mark Andrews
c2f5ddeeec isc_netaddr_format() check for sies equal 0 2010-11-16 00:43:02 +00:00
Mark Andrews
baab444222 isc_sockaddr_format() check for sies equal 0 2010-11-16 00:42:35 +00:00
Mark Andrews
d775887f01 cfg_obj_asnetprefix() check that the destinations are non NULL before writing to them 2010-11-16 00:41:32 +00:00
Automatic Updater
b3ff8e5ae7 update copyright notice 2010-10-18 23:47:08 +00:00
Mark Andrews
7bce336186 2966. [bug] isc_print_vsnprintf() failed to check if there was 
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
 2010-10-18 03:59:05 +00:00
Mark Andrews
ed83fa75f5 2963. [security] The allow-query acl was being applied instead of the 
allow-query-cache acl to cache lookups. [RT #22114]
 2010-09-24 05:09:03 +00:00
Automatic Updater
3255640981 update copyright notice 2010-09-15 12:38:36 +00:00
Mark Andrews
506a2177bf 2961. [bug] Be still more selective about the non-authoritative 
answers we apply change 2748 to. [RT #22074]
 2010-09-15 12:21:27 +00:00
Mark Andrews
70ba55161b 2957. [bug] entropy_get() and entropy_getpseudo() failed to match 
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
 2010-09-15 03:06:15 +00:00
Mark Andrews
240a7dc59d 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 00:58:36 +00:00
Mark Andrews
e588bfe689 2950. [bug] named failed to perform a SOA up to date check when 
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
 2010-09-06 04:41:13 +00:00
Mark Andrews
02a211f4c4 2949. [bug] dns_view_setnewzones() contained a memory leak if 
it was called multiple times. [RT #21942]
 2010-09-06 04:31:11 +00:00
Francis Dupont
ec288f1a26 reindent 2010-09-05 12:14:26 +00:00
Automatic Updater
f428e385a4 update copyright notice 2010-08-16 23:46:52 +00:00
Mark Andrews
10f9e687f5 silence redefinition warnings MacOS 2010-08-16 22:41:16 +00:00
Mark Andrews
c6f4972c74 2943. [func] Add support to load new keys into managed zones 
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
 2010-08-16 22:21:07 +00:00
Mark Andrews
8bc194b266 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 04:49:14 +00:00
Automatic Updater
2b43d1d8c5 update copyright notice 2010-08-13 23:47:04 +00:00
Francis Dupont
7641867b4c fix win32 build 2010-08-13 14:33:31 +00:00
Francis Dupont
bcb444aed0 remove connection aborted error message 2010-08-13 10:45:32 +00:00
Mark Andrews
c73d8c1b72 2938. [bug] When skipping NSEC3 records that don't match the 
current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]
 2010-08-13 06:46:25 +00:00
Tatuya JINMEI 神明達哉
d0b75b9ff6 define the wrapper function for mem_isovermem(). 
(a regression in rt21818)
 2010-08-12 21:30:26 +00:00
Evan Hunt
9b7efe7aca Removed a leftover UNUSED statement referencing a parameter that doesn't 
exist anymore.
 2010-08-12 04:04:14 +00:00
Automatic Updater
cc4dd0d08d update copyright notice 2010-08-11 23:46:42 +00:00
Tatuya JINMEI 神明達哉
253ae50e09 required ctx is valid in mem_isovermem(). 2010-08-11 23:11:45 +00:00
Tatuya JINMEI 神明達哉
27fe1966c9 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 22:54:58 +00:00
Evan Hunt
cfd262045c 2936. [func] Improved configuration syntax and multiple-view 
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
 2010-08-11 18:14:20 +00:00
Automatic Updater
548317f929 update copyright notice 2010-08-10 23:48:19 +00:00
Mark Andrews
712b976a06 2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c. [RT #21871] 2010-08-10 09:32:06 +00:00
Automatic Updater
a90aca78aa update copyright notice 2010-07-11 23:46:54 +00:00
Evan Hunt
a207cfc5d1 Removed a duplicate entry in namedconf.c. 2010-07-11 05:44:15 +00:00
Evan Hunt
86dcc40058 2930. [experimental] New "rndc addzone" and "rndc delzone" commads 
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
 2010-07-11 00:12:57 +00:00
Automatic Updater
1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00
Evan Hunt
bf9b852c3e 2929. [bug] Improved handling of GSS security contexts: 
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
 2010-07-09 05:13:15 +00:00
Mark Andrews
ff5864ef42 2928. [bug] Be more selective about the non-authoritative 
answer we apply change 2748 to. [RT #21594]
 2010-07-04 00:48:57 +00:00
Mark Andrews
2cf74a72fd isc_boolean_t -> dns_v4_aaaa_t 2010-06-26 05:30:30 +00:00
Mark Andrews
810656a187 2925. [bug] Named failed to accept uncachable negative responses 
from insecure zones. [RT# 21555]
 2010-06-25 23:50:13 +00:00
Automatic Updater
cf309ffeee update copyright notice 2010-06-25 23:46:51 +00:00
Mark Andrews
bf13e709db 2924. [func] 'rndc secroots' dump a combined summary of the 
current managed keys combined with trusted keys.
                        [RT #20904]
 2010-06-25 03:24:05 +00:00
Automatic Updater
b8d4e96e95 update copyright notice 2010-06-23 23:46:58 +00:00
Mark Andrews
4a8dc5f8ef 2921. [bug] The resolver could attempt to destroy a fetch context 
to soon.  [RT #19878]
 2010-06-23 01:31:43 +00:00
Automatic Updater
b61690dbad update copyright notice 2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively 
to IPv4 clients.  New acl 'filter-aaaa' (default any).
 2010-06-22 04:03:38 +00:00
Mark Andrews
ae538374fe AAAA not A 2010-06-18 05:36:24 +00:00
Mark Andrews
081b36ff95 2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET. 2010-06-18 02:11:44 +00:00
Automatic Updater
e40d5d6b71 update copyright notice 2010-06-09 23:50:58 +00:00
Automatic Updater
36961e2937 missing @ 2010-06-09 13:23:47 +00:00
Mark Andrews
cf56ac2b41 missing @ 2010-06-09 09:04:39 +00:00
Mark Andrews
76117ff568 CHANGES 2010-06-09 01:43:09 +00:00
Automatic Updater
ad0471f93b update copyright notice 2010-06-08 23:50:24 +00:00
Mark Andrews
63af1a646a 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:42:37 +00:00
Automatic Updater
3f2280d2fc update copyright notice 2010-06-04 23:51:14 +00:00
Mark Andrews
ec58c4ca54 remove trailing comma 2010-06-04 00:12:54 +00:00
Automatic Updater
6e13ffa218 update copyright notice 2010-06-03 23:51:05 +00:00
Mark Andrews
b7bc86a4d3 2912. [func] Windows clients don't like UPDATE responses that clear 
the zone section. [RT #20986]
 2010-06-03 05:23:27 +00:00
Mark Andrews
a20996ab6f 2910. [func] Sanity check Kerberos credentials. [RT #20986] 2010-06-03 02:29:58 +00:00
Mark Andrews
29f0da7fb8 2908. [bug] It was possible for re-signing to stop after removing 
a DNSKEY. [RT #21384]
 2010-06-02 00:58:54 +00:00
Mark Andrews
b00de53de2 2907. [bug] The export version of libdns had undefined references. 
[RT #21444]
 2010-06-02 00:38:29 +00:00
Mark Andrews
57b47bca26 checkpoint 2010-05-29 10:36:22 +00:00
Mark Andrews
ead77b9ad4 2906. [bug] Add RFC 5011 implementation issues. [RT #20903] 2010-05-28 03:15:48 +00:00
Mark Andrews
e27d55e3ee 2904. [bug] When using DLV, sub-zones of the zones in the DLV, 
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
 2010-05-26 06:28:00 +00:00
Mark Andrews
7d9be933d7 2903. [bug] managed-keys-directory missing from namedconf.c. 
[RT #21370]
 2010-05-21 14:10:32 +00:00
Mark Andrews
abb239e7fc silence compiler, explict coversion 2010-05-19 09:52:42 +00:00
Mark Andrews
5b02fc32d6 2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316] 2010-05-19 07:13:15 +00:00
Mark Andrews
b667946fa5 2900. [bug] The placeholder negative caching element was not 
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
 2010-05-19 06:39:50 +00:00
Mark Andrews
32f985bcf4 silence compile warnings, explict conversio 2010-05-18 06:28:29 +00:00
Mark Andrews
ed30e0358b 9.7.1b1 2010-05-18 06:14:32 +00:00
Automatic Updater
4dd3ec797d update copyright notice 2010-05-18 02:38:10 +00:00
Mark Andrews
8d31dd9ab6 2897. [bug] NSEC3 chains could be left behind when transitioning 
to insecure. [RT #21040]
 2010-05-18 01:39:41 +00:00
Mark Andrews
6d58400178 2896. [bug] "rndc sign" failed to properly update the zone 
when adding a DNSKEY for publication only. [RT #21045]
 2010-05-18 01:03:26 +00:00
Automatic Updater
515c7f3c43 update copyright notice 2010-05-14 23:50:40 +00:00
Mark Andrews
778a01b1aa 2893. [bug] Improve managed keys support. New named.conf option 
managed-keys-directory. [RT #20924]
 2010-05-14 04:48:28 +00:00
Mark Andrews
44f175a90a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:38:52 +00:00
Mark Andrews
b335299322 2890. [bug] Handle the introduction of new trusted-keys and 
DS, DLV RRsets better. [RT #21097]
 2010-05-14 00:13:43 +00:00
Automatic Updater
b7bcdb3eaa update copyright notice 2010-05-13 23:50:27 +00:00
Mark Andrews
e12030c433 2889. [bug] Element of the grammar where not properly reported. 
[RT #21046]
 2010-05-13 03:16:55 +00:00
Mark Andrews
49560ac770 typo in threaded build, silence compiler warning 2010-05-13 03:08:30 +00:00
Mark Andrews
e18c62b1da 2888. [bug] Only the first EDNS option was displayed. [RT #21273] 2010-05-13 00:40:46 +00:00
Automatic Updater
21d9ee0d73 update copyright notice 2010-05-12 23:51:13 +00:00
Mark Andrews
5c40acf215 2887. [bug] Report the keytag times in UTC in the .key file, 
local time is presented as a comment within the
                        comment.  [RT #21223]

2886.   [bug]           ctime() is not thread safe. [RT #21223]
 2010-05-12 23:49:40 +00:00
Mark Andrews
f083a44415 2884. [bug] Insufficient valadation in dns_name_getlabelsequence(). 
[RT #21283]
 2010-05-12 05:40:32 +00:00
Mark Andrews
2fca4a3321 2882. [bug] Remove memory context from list of active contexts 
before clearing 'magic'. [RT #21274]
 2010-05-12 00:46:55 +00:00
Automatic Updater
a955420bed update copyright notice 2010-05-10 23:50:55 +00:00
Mark Andrews
121f783b66 2881. [bug] Reduce the amount of time the rbtdb write lock 
is held when closing a version. [RT #21198]
 2010-05-10 01:39:03 +00:00
Automatic Updater
b98844704e update copyright notice 2010-04-28 23:50:51 +00:00
Mark Andrews
6ab18ae52c 2878. [func] Incrementally write the master file after performing 
a AXFR.  [RT #21010]
(part 2)
 2010-04-28 11:03:07 +00:00
Mark Andrews
1df2b7edfe 2878. [func] Incrementally write the master file after performing 
a AXFR.  [RT #21010]
 2010-04-27 03:24:52 +00:00
Automatic Updater
ed2fa6ce1b update copyright notice 2010-04-21 23:51:22 +00:00
Mark Andrews
fd95cc0da9 2877. [bug] The validator failed to skip obviously mismatching 
RRSIGs. [RT #21138]
 2010-04-21 05:45:47 +00:00
Mark Andrews
bb6d33103e 2876. [bug] Named could return SERVFAIL for negative responses 
from unsigned zones. [RT #21131]
 2010-04-21 04:16:49 +00:00
Mark Andrews
cc6d67469c 2875. [bug] dns_time64_fromtext() could accept non digits. 
[RT #21033]
 2010-04-21 02:21:31 +00:00
Automatic Updater
0a199807e7 update copyright notice 2010-04-20 23:51:12 +00:00
Mark Andrews
1e9848fb2b 2874. [bug] Cache lack of EDNS support only after the server 
successfully responds to the query using plain DNS.
                        [RT #20930]
 2010-04-20 07:28:52 +00:00
Tatuya JINMEI 神明達哉
c45d848e2a 2873. [bug] Canceling a dynamic update via the dns/client module 
could trigger an assertion failure. [RT #21133]
 2010-04-14 22:08:47 +00:00
Automatic Updater
0abd3cca60 update copyright notice 2010-04-13 23:50:58 +00:00
Shawn Routhier
7dc38ccd52 Modify dns/client.c:dns_client_createx() to only require one of IPv6 or 
IPv6 rather than both.  [RT #21122]
 2010-04-13 19:06:48 +00:00
Automatic Updater
127e1bde3a update copyright notice 2010-04-09 23:51:01 +00:00
Tatuya JINMEI 神明達哉
ce164dbd9c 2871. [bug] Type mismatch in mem_api.c between the definition and 
the header file, causing build failure with
			--enable-exportlib. [RT #21138]

9.8.0 and 9.7.1.
 2010-04-09 06:09:35 +00:00
Automatic Updater
f15cde2b63 update copyright notice 2010-04-07 23:51:06 +00:00
Mark Andrews
86077a2e87 2870. [maint] Add AAAA addresses for L.ROOT-SERVERS.NET. 2010-04-07 07:05:38 +00:00
Mark Andrews
b8d036c434 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call. 
[RT #20877]
 2010-03-26 17:12:48 +00:00
Automatic Updater
230987e819 update copyright notice 2010-03-12 23:51:11 +00:00
Mark Andrews
a80d26914a 2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers 
don't like it.  [RT #20986]
 2010-03-12 03:47:08 +00:00
Mark Andrews
c19f322914 2866. [bug] Windows does not like the TSIG name being compressed. 
[RT #20986]
 2010-03-12 03:34:56 +00:00
Mark Andrews
ff9301990d 2865. [bug] memset to zero event.data. [RT #20986] 2010-03-12 03:22:57 +00:00
Mark Andrews
08fb52ec8c 2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU. 
[RT #21056]
 2010-03-11 04:43:57 +00:00
Automatic Updater
4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Mark Andrews
22c4126ba5 2958. [bug] When canceling validation it was possible to leak 
memory. [RT #20800]
 2010-03-04 22:25:31 +00:00
Mark Andrews
b1003ace6f 2957. [bug] RTT estimates were not being adjusted on ICMP errors. 
[RT #20772]
 2010-03-04 06:43:21 +00:00
Mark Andrews
92348098eb 2956. [bug] named-checkconf did not fail on a bad trusted key. 
[RT #20705]
 2010-03-04 06:17:01 +00:00
Mark Andrews
5388178e8a 2955. [bug] The size of a memory allocation was not always properly 
recorded. [RT #20927]
 2010-03-04 05:45:51 +00:00
Mark Andrews
d1a5fdc34a 2955. [bug] The size of a memory allocation was not always properly 
recorded. [RT #20927]
 2010-03-04 05:29:15 +00:00
Mark Andrews
2e20dea9fc 2854. [func] nsupdate will now preserve the entered case of domain 
names in update requests it sends. [RT #20928]
 2010-03-04 05:24:56 +00:00
Mark Andrews
13396661f4 2854. [func] dig: allow the final soa record in a axfr response to 
be suppressed, dig +onesoa. [RT #20929]
 2010-03-04 05:18:04 +00:00
Mark Andrews
6f8edd57ae dns_resolver_*badcache 2010-03-03 05:13:53 +00:00
Mark Andrews
c76ae1723f dns_rdataset_expire/dns_rdataset_settrust 2010-03-03 05:11:45 +00:00
Mark Andrews
64f8608ed6 2853. [bug] add_sigs() could run out of scratch space. [RT #21015] 2010-02-26 01:39:49 +00:00
Mark Andrews
8b026a66fd grab a write lock before updating header->trust 2010-02-26 00:18:06 +00:00
Automatic Updater
bd2b08d5a3 update copyright notice 2010-02-25 05:08:01 +00:00
Mark Andrews
0cae66577c 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 04:39:13 +00:00
Automatic Updater
8077efca7d update copyright notice 2010-02-22 23:49:11 +00:00
Mark Andrews
f56be26f60 .NOTPARALLEL/.NO_PARALLEL 2010-02-22 02:00:07 +00:00
Automatic Updater
6f1b350c3a update copyright notice 2010-02-04 23:49:13 +00:00
Tatuya JINMEI 神明達哉
139cedabf9 2850. [bug] If isc_heap_insert() failed due to memory shortage 
the heap would have corrupted entries.

9.8.0, 9.7.1(?), 9.6.2, 9.5.3
(what about 9.4-ESV?)
 2010-02-04 23:22:05 +00:00
Mark Andrews
8ac908b38a 2849. [bug] Don't treat errors from the xml2 library as fatal. 
[RT #20945]
 2010-02-04 00:57:25 +00:00
Automatic Updater
aad3d15976 update copyright notice 2010-01-31 23:49:09 +00:00
Mark Andrews
ebaf977ecf 2846. [bug] EOF on unix domain sockets was not being handled 
correctly. [RT #20731]
 2010-01-31 23:18:03 +00:00
Francis Dupont
19a62c240d RFC 5011 client can crash. [RT #20903] 2010-01-26 23:33:10 +00:00
Evan Hunt
c46b6864af fix typo 2010-01-22 01:46:20 +00:00
Evan Hunt
da4a8c89a8 remove reference to isc_time member "seconds", which doesn't exist in win32 2010-01-22 01:34:47 +00:00
Evan Hunt
b47d410f84 2840. [bug] Change 2836 was not complete. [RT #20883] 2010-01-14 23:27:38 +00:00
Automatic Updater
5bdf8cd3c2 update copyright notice 2010-01-13 23:48:59 +00:00
Francis Dupont
f77148e029 a KSK revoked by named could not be deleted. [RT #20881] 2010-01-13 08:35:24 +00:00
Francis Dupont
51512910da comment trivial update 2010-01-12 23:56:12 +00:00
Automatic Updater
8576a40424 update copyright notice 2010-01-12 23:48:57 +00:00
Francis Dupont
d481cfdab5 fix spelling in comment 2010-01-12 23:23:21 +00:00
Automatic Updater
65d1486535 update copyright notice 2010-01-11 23:48:37 +00:00
Francis Dupont
a91029a00e Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 10:49:14 +00:00
Francis Dupont
125da90ced trivial spelling error in comment 2010-01-11 01:14:08 +00:00
Automatic Updater
b871a3e0cd update copyright notice 2010-01-09 23:48:45 +00:00
Evan Hunt
05b1ab91a6 2836. [bug] Keys that were scheduled to become active could 
be delayed. [RT #20874]
 2010-01-09 17:09:00 +00:00
Francis Dupont
a26d73a734 fix trivial typo in comment 2010-01-09 15:21:10 +00:00
Automatic Updater
49644c0c8f update copyright notice 2010-01-08 23:51:44 +00:00
Evan Hunt
03e5afa4c0 2835. [bug] Key inactivity dates were inadvertently stored in 
the private key file with the outdated tag
			"Unpublish" rather than "Inactive".  This has been
			fixed; however, any existing keys that had Inactive
			dates set will now need to have them reset, using
			'dnssec-settime -I'. [RT #20868]
 2010-01-08 17:15:36 +00:00
Automatic Updater
a30c7003af update copyright notice 2010-01-07 23:48:54 +00:00
Evan Hunt
0f66aced26 2834. [bug] HMAC-SHA* keys that were longer than the algorithm 
digest length were used incorrectly, leading to
			interoperability problems with other DNS
			implementations.  This has been corrected.
			(Note: If an oversize key is in use, and
			compatibility is needed with an older release of
			BIND, the new tool "isc-hmac-fixup" can convert
			the key secret to a form that will work with all
			versions.) [RT #20751]
 2010-01-07 21:52:12 +00:00
Shawn Routhier
7c25b5f311 Modify "struct stat" in lib/export/samples/nsprobe.c to avoid redefinition in 
some OSes - rt20831
 2010-01-07 18:31:34 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache 
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
 2010-01-07 16:48:23 +00:00
Automatic Updater
842920c7db update copyright notice 2010-01-04 23:48:51 +00:00
Evan Hunt
d3a6cd7c7e 2830. [bug] Changing the OPTOUT setting could take multiple 
passes. [RT #20813]
 2010-01-04 22:47:58 +00:00
Evan Hunt
845bb3195a 2829. [bug] Fixed potential node inconsistency in rbtdb.c. 
[RT #20808]
 2010-01-04 22:30:14 +00:00
Automatic Updater
400615c294 update copyright notice 2009-12-30 23:49:14 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:02:23 +00:00
Evan Hunt
9ead684875 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:46:58 +00:00
Evan Hunt
687b6322fb 2826. [bug] NSEC3->NSEC transitions could fail due to a lock not 
being released.  [RT #20740]
 2009-12-30 03:38:57 +00:00
Mark Andrews
7ddd859470 more for: 
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
 2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58 more for: 
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
 2009-12-30 02:26:30 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task. 
[RT #20759]
 2009-12-29 22:20:33 +00:00
Mark Andrews
288486df9d 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:04:16 +00:00
Mark Andrews
5773d3c007 2822. [bug] rbtdb.c:loadnode() could return the wrong result. 
[RT #20802]
 2009-12-29 08:53:33 +00:00
Evan Hunt
bd31f734ee 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define 
[RT #20771]
 2009-12-24 00:35:46 +00:00
Evan Hunt
b09559fd36 2816. [bug] previous_closest_nsec() could fail to return 
data for NSEC3 nodes [RT #29730]
 2009-12-23 23:43:01 +00:00
Mark Andrews
c9630524c7 2814. [func] Provide a definitive error message when a master 
zone is not loaded. [RT #20757]
 2009-12-21 04:29:10 +00:00
Automatic Updater
928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Evan Hunt
4e55893d30 2813. [bug] Better handling of unreadable DNSSEC key files. 
[RT #20710]

2812.	[bug]		Make sure updates can't result in a zone with
			NSEC-only keys and NSEC3 records. [RT 20748]
 2009-12-18 22:16:49 +00:00
Mark Andrews
28f4cd0a45 2808. [bug] Remove the attempt to install atomic.h from lib/isc. 
atomic.h is correctly intalled by the architecture
                        specific subdirectories.  [RT #20722]
 2009-12-18 04:07:08 +00:00
Mark Andrews
485a435efe 2808. [bug] atomic.h was not being properly installed under all 
circumstances. [RT #20722]
 2009-12-18 03:05:37 +00:00
Evan Hunt
bc04d6ec15 2807. [bug] Fixed a possible ASSERT when reconfiguring zone 
keys. [RT #20720]
 2009-12-11 01:06:03 +00:00
Evan Hunt
b8b602f89b 2806. [bug] "rdnc sign" could delay re-signing the DNSKEY 
when it had changed. [RT #20703]
 2009-12-07 20:51:12 +00:00
Evan Hunt
daa4933c4d prep for 9.7.0rc1 2009-12-06 02:54:26 +00:00
Evan Hunt
c7611c7dd2 prep for 9.7.0rc1 release 2009-12-06 02:31:42 +00:00
Evan Hunt
12178c8652 2805. [bug] Fixed namespace problems encountered when building 
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
 2009-12-05 23:31:41 +00:00
Evan Hunt
d4d836350f add .cvsignore files 2009-12-05 05:36:03 +00:00
Evan Hunt
c2f095969c oops: missed a declaration, and forgot to lock the zone before clearing 
the flag.  (and accidentally ran make tests in the wrong tree, misleading
myself into thinking it was fine.)
 2009-12-05 01:25:43 +00:00
Evan Hunt
d601ef9e89 2804. [bug] Send notifies when a zone is signed with "rndc sign" 
or as a result of a scheduled key change. [RT #20700]
 2009-12-04 22:45:11 +00:00
Automatic Updater
4b6dc226f7 update copyright notice 2009-12-04 22:06:37 +00:00
Mark Andrews
3d17a3ba61 2801. [func] Detect and report records that are different according 
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
 2009-12-04 21:09:34 +00:00
Mark Andrews
5d850024cb 2800. [func] Reject zones which have NS records which refer to 
CNAMEs, DNAMEs or don't have address record (class IN
                        only).  Reject UPDATEs which would cause the zone
                        to fail the above checks if committed. [RT #20678]
 2009-12-04 03:33:15 +00:00
Evan Hunt
8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to 
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
 2009-12-03 23:18:17 +00:00
Evan Hunt
22304041d1 typo caused a missing semicolon 2009-12-03 16:49:09 +00:00
Evan Hunt
e6dda86e8b 2798. [bug] Addressed bugs in managed-keys initialization 
and rollover. [RT #20683]
 2009-12-03 15:40:03 +00:00
Mark Andrews
2a0d4c4d6b 2797. [bug] Don't decrement the dispatch manager's maxbuffers. 
[RT #20613]
 2009-12-02 23:15:14 +00:00
Mark Andrews
d524a81532 2796. [bug] Missing dns_rdataset_disassociate() call in 
dns_nsec3_delnsec3sx(). [RT #20681]
 2009-12-01 05:28:40 +00:00
Evan Hunt
feeca57f18 2795. [cleanup] Add text to differentiate "update with no effect" 
log messages. [RT #18889]
 2009-12-01 00:47:09 +00:00
Mark Andrews
8b37c0dd6e 2794. [bug] Install <isc/namespace.h>. [RT #20677] 2009-11-30 21:34:57 +00:00
Vernon Schryver
5d9922e86f Allow the optional filter-aaaa-on-v4 option in view statements to close #20635 2009-11-28 15:57:37 +00:00
Automatic Updater
3e920dd0c6 update copyright notice 2009-11-26 23:48:14 +00:00
Mark Andrews
66ecb6789b 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:28:19 +00:00
Automatic Updater
2b2fc9b4df update copyright notice 2009-11-25 23:49:22 +00:00
Mark Andrews
536e36ac8d declarations before statements 2009-11-25 13:17:59 +00:00
Evan Hunt
cfc22e53a8 2789. [bug] Fixed an INSIST in dispatch.c [RT #20576] 2009-11-25 05:55:32 +00:00
Evan Hunt
fc1fb1a469 2786. [bug] Spurious log message when zone keys were 
dynamically reconfigured. [RT #20659]
 2009-11-25 02:30:54 +00:00
Mark Andrews
d0ca4e90e2 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:22:05 +00:00
Automatic Updater
b314ea10b4 update copyright notice 2009-11-24 23:48:12 +00:00
Evan Hunt
d312bc5d81 2785. [bug] Revoked keys could fail to self-sign [RT #20652] 2009-11-24 03:42:32 +00:00
Mark Andrews
9dd2ee95f1 2784. [bug] TC was not always being set when required glue was 
dropped. [RT #234186]
 2009-11-24 03:20:02 +00:00
Automatic Updater
94e3a63110 update copyright notice 2009-11-23 23:48:16 +00:00
Evan Hunt
5985af3f5c 2781. [bug] Inactive keys could be used for signing. [RT #20649] 2009-11-23 15:18:07 +00:00
Evan Hunt
cef109efa7 2780. [bug] dnssec-keygen -A none didn't properly unset the 
activation date in all cases. [RT #20648]

2779.	[bug]		Dynamic key revokation could fail. [RT #20644]

2778.	[bug]		dnssec-signzone could fail when a key was revoked
			without deleting the unrevoked version. [RT #20638]
 2009-11-23 02:55:41 +00:00
Mark Andrews
c16d37d06e 2776. [bug] Change #2762 was not correct. [RT #20647] 2009-11-23 02:10:16 +00:00
Automatic Updater
fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3 2773. [bug] In autosigned zones, the SOA could be signed 
with the KSK. [RT #20628]
 2009-11-18 21:22:31 +00:00
Evan Hunt
2ad776a5c4 changed age to 0 2009-11-18 16:46:10 +00:00
Evan Hunt
af52d6ddd7 prep for release of 9.7.0b3 2009-11-18 00:30:37 +00:00
Mark Andrews
a39a5f4d81 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-17 23:55:18 +00:00
Automatic Updater
e34e9a8d68 update copyright notice 2009-11-17 23:48:13 +00:00
Evan Hunt
7ee4b13ded 2771. [bug] dnssec-signzone: DNSKEY records could be 
corrupted when importing from key files [RT #20624]
 2009-11-17 05:46:53 +00:00
Evan Hunt
44a3999cf4 2770. [cleanup] Add log messages to resolver.c to indicate events 
causing FORMERR responses. [RT #20526]
 2009-11-17 02:23:15 +00:00
Evan Hunt
7048af0a55 2769. [cleanup] Change #2742 was incomplete. [RT #19589] 2009-11-16 07:56:06 +00:00
Evan Hunt
e856482b1f 2767. [bug] named could crash on startup if a zone was 
configured with auto-dnssec and there was no
			key-directory. [RT #20615]
 2009-11-16 01:44:33 +00:00
Evan Hunt
37a34ab54f 2766. [bug] isc_socket_fdwatchpoke() should only update the 
socketmgr state if the socket is not pending on a
			read or write.  [RT #20603]
 2009-11-13 00:41:58 +00:00
Automatic Updater
53d502202a update copyright notice 2009-11-12 23:47:59 +00:00
Evan Hunt
86132f0ef5 eliminate warning when building without -DBIND9 2009-11-12 23:43:02 +00:00
Mark Andrews
1d0ebb4cf2 2765. [bug] Skip masters for which the TSIG key cannot be found. 
[RT #20595]
 2009-11-12 23:30:36 +00:00
Evan Hunt
e9dff04d3b 2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591] 2009-11-12 03:03:36 +00:00
Evan Hunt
0c3948e606 2761. [bug] DLV validation failed with a local slave DLV zone. 
[RT #20577]
 2009-11-12 02:59:20 +00:00
Evan Hunt
5857247dbb 2758. [bug] win32: Added a workaround for a windows 2008 bug 
that could cause the UDP client handler to shut
			down. [RT #19176]
 2009-11-10 18:31:47 +00:00
Evan Hunt
5c6c5669ec #include <time.h> for the ctime() prototype. 2009-11-07 03:36:58 +00:00
Mark Andrews
df1599d0e1 address initialization type mismatch warning 2009-11-06 04:19:28 +00:00
Mark Andrews
7963a67df0 address statement not reached warning 2009-11-06 04:12:15 +00:00
Evan Hunt
c1bfa5b0ad 2753. [bug] Removed an unnecessary warning that could appear when 
building an NSEC chain. [RT #20588]
 2009-11-06 03:26:59 +00:00
Evan Hunt
aa2f010f13 Switch from OpenSSL 0.9.8k to 0.9.8l 2009-11-06 03:14:10 +00:00
Mark Andrews
302ed789bd 2752. [bug] Locking violation. [RT #20587] 2009-11-06 01:30:06 +00:00
Evan Hunt
ca97301c37 remove extra \n from a log message 2009-11-05 21:45:05 +00:00
Automatic Updater
2d84cba8f4 update copyright notice 2009-11-04 23:48:18 +00:00
Mark Andrews
7efc6d9cb8 cleanup [RT #20509] 2009-11-04 05:58:46 +00:00
Mark Andrews
2484c7db7a spelling 2009-11-04 04:22:16 +00:00
Mark Andrews
e94fe42a20 2749. [bug] ixfr-from-differences generated a non-minimal ixfr 
for NSEC3 signed zones. [RT #20452]
 2009-11-04 03:46:44 +00:00
Mark Andrews
0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them 
as referrals. [RT #18884]
 2009-11-04 02:15:30 +00:00
Mark Andrews
0181a0a92f 2747. [bug] Journal roll forwards failed to set the re-signing 
time of RRSIGs correctly. [RT #20541]
 2009-11-04 01:25:55 +00:00
Mark Andrews
a3285e811d 2746. [port] hpux: address signed/unsigned expansion mismatch of 
dns_rbtnode_t.nsec. [RT #20542]
 2009-11-04 01:18:19 +00:00
Automatic Updater
126dce8ebf update copyright notice 2009-11-03 23:48:23 +00:00
Mark Andrews
5ccd971c72 UNUSED(engine) if !defined(OPENSSL) 2009-11-03 19:43:54 +00:00
Mark Andrews
554d22d2de 2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record 
for a insecure delegation.
 2009-11-03 01:07:48 +00:00
Mark Andrews
8a0943e125 silence compiler warnings. [RT #20472] 2009-10-30 05:08:23 +00:00
Mark Andrews
4c53f98dbd RFC5702 2009-10-28 21:08:18 +00:00
Evan Hunt
3684692720 update def file 2009-10-28 18:39:47 +00:00
Evan Hunt
5b72cda36b update API and def files for 9.7.0b2 release 2009-10-28 18:13:24 +00:00
Evan Hunt
5cb44a38d9 back out change 2740 2009-10-28 18:04:29 +00:00
Evan Hunt
be69d48443 2742. [cleanup] Clarify some DNSSEC-related log messages in 
validator.c. [RT #19589]
 2009-10-28 05:34:21 +00:00
Automatic Updater
990dca4605 update copyright notice 2009-10-27 23:47:45 +00:00
Mark Andrews
e9d45c0a04 2740. [func] Identify bad answers from GTLD servers and treat them 
as referrals. [RT #18884]
 2009-10-27 23:05:53 +00:00
Evan Hunt
95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust 
anchors for a view. [RT #20211]
 2009-10-27 22:46:13 +00:00
Mark Andrews
e09cdbac08 2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system 
test. [RT #20453]
 2009-10-27 22:25:37 +00:00
Mark Andrews
63d5a6f680 2736. [func] Improve the performance of NSEC signed zones with 
more than a normal amount of glue below a delegation.
                        [RT #20191]
 2009-10-27 04:46:58 +00:00
Evan Hunt
e8831e51c1 2735. [bug] dnssec-signzone could fail to read keys 
that were specified on the command line with
			full paths, but weren't in the current
			directory. [RT #20421]
 2009-10-27 03:59:45 +00:00
Automatic Updater
5f744ebbdc update copyright notice 2009-10-26 23:47:35 +00:00
Evan Hunt
c8aa7ce70d 2732. [func] Add optional filter-aaaa-on-v4 option, available 
if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]
 2009-10-26 23:14:54 +00:00
Evan Hunt
c021499604 2731. [func] Additional work on change 2709. The key parser 
will now ignore unrecognized fields when the
			minor version number of the private key format
			has been increased.  It will reject any key with
			the major version number increased. [RT #20310]
 2009-10-26 21:18:24 +00:00
Automatic Updater
0da9fafc18 update copyright notice 2009-10-24 23:47:36 +00:00
Francis Dupont
775a8d86d9 keygen progress indication [RT #20284] 2009-10-24 09:46:19 +00:00
Automatic Updater
510032fdf4 update copyright notice 2009-10-22 23:48:07 +00:00
Evan Hunt
cc6cddfd94 2726. [func] Added support for SHA-2 DNSSEC algorithms, 
RSASHA256 and RSASHA512. [RT #20023]
 2009-10-22 02:21:31 +00:00
Automatic Updater
3cae549ddb update copyright notice 2009-10-21 23:48:05 +00:00
Evan Hunt
8ec993c774 2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and 
isc_base64_totext(), didn't always mark regions of
			memory as fully consumed after conversion.  [RT #20445]
 2009-10-21 01:22:29 +00:00
Automatic Updater
b15df8f9bc update copyright notice 2009-10-20 23:47:32 +00:00
Mark Andrews
7704a47aec 2722. [bug] Ensure that the memory associated with the name of 
a node in a rbt tree is not altered during the life
                        of the node. [RT #20431]
 2009-10-20 04:57:57 +00:00
Mark Andrews
a01095a487 2721. [port] Have dst__entropy_status() prime the random number 
generator. [RT #20369]
 2009-10-20 04:39:48 +00:00
Evan Hunt
bfbd69c43f 2720. [bug] RFC 5011 trust anchor updates could trigger an 
assert if the DNSKEY record was unsigned. [RT #20406]
 2009-10-20 04:13:38 +00:00
Mark Andrews
3c5e54941f 2718. [bug] The space calculations in opensslrsa_todns() were 
incorrect. [RT #20394]
 2009-10-20 02:59:19 +00:00
Mark Andrews
29dd4bdd14 2717. [bug] named failed to update the NSEC/NSEC3 record when 
the last private type record was removed as a result
                        of completing the signing the zone with a key.
                        [RT #20399]
 2009-10-20 02:45:06 +00:00
Mark Andrews
9ac35b4e4d grammar, line length 2009-10-19 02:37:08 +00:00
Automatic Updater
8ab6a775bb update copyright notice 2009-10-16 23:47:54 +00:00
Evan Hunt
8f7de3db7e Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.) 2009-10-16 02:59:41 +00:00
Automatic Updater
f6cd5ef97a update copyright notice 2009-10-14 23:47:51 +00:00
Mark Andrews
cbee6197d1 2713. [bug] powerpc: atomic operations missing asm("ics") / 
__isync() calls.
 2009-10-14 03:54:23 +00:00
Evan Hunt
19ac4707ee changes needed for win32 build 2009-10-13 00:55:51 +00:00
Automatic Updater
97639003b0 update copyright notice 2009-10-12 23:48:02 +00:00
Evan Hunt
77b8f88f14 2712. [func] New 'auto-dnssec' zone option allows zone signing 
to be fully automated in zones configured for
			dynamic DNS.  'auto-dnssec allow;' permits a zone
			to be signed by creating keys for it in the
			key-directory and using 'rndc sign <zone>'.
			'auto-dnssec maintain;' allows that too, plus it
			also keeps the zone's DNSSEC keys up to date
			according to their timing metadata. [RT #19943]
 2009-10-12 20:48:12 +00:00
Mark Andrews
30bb4870da remove, not zero, extended flags 2009-10-12 09:03:06 +00:00
Mark Andrews
11804ca08f zero extended flags 2009-10-12 08:57:38 +00:00
Mark Andrews
515053881b remove extended flags before comparing if set 2009-10-12 06:05:29 +00:00
Mark Andrews
af20baa960 silence compiler warning/enforce const [RT #20390] 2009-10-12 05:50:52 +00:00
Automatic Updater
8667770ad2 update copyright notice 2009-10-10 23:47:58 +00:00
Evan Hunt
3727725bb7 2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only' 
zone option cause a zone to be signed with only KSKs
			signing the DNSKEY RRset, not ZSKs.  This reduces
			the size of a DNSKEY answer.  [RT #20340]
 2009-10-10 01:48:00 +00:00
Mark Andrews
0d9fb986c5 silence comiler warning 2009-10-10 01:13:39 +00:00
Automatic Updater
8a07de2f03 update copyright notice 2009-10-09 23:48:09 +00:00
Evan Hunt
315a1514a5 2709. [func] Added some data fields, currently unused, to the 
private key file format, to allow implementation
			of explicit key rollover in a future release
			without impairing backward or forward compatibility.
			[RT #20310]
 2009-10-09 06:09:21 +00:00
Mark Andrews
d1bcaec0d6 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-09 00:33:39 +00:00
Mark Andrews
bb4e0bd8e8 silence ininitialised 2009-10-08 23:58:14 +00:00
Mark Andrews
0838b3c02f Recompute check_ksk as it may have changed 2009-10-08 23:55:57 +00:00
Automatic Updater
15bbb8a129 update copyright notice 2009-10-08 23:48:10 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-08 23:13:07 +00:00
Evan Hunt
246c504f90 2706. [bug] Loading a zone with a very large NSEC3 salt could 
trigger an assert. [RT #20368]
 2009-10-06 21:20:45 +00:00
Automatic Updater
e74245134d update copyright notice 2009-10-06 04:40:14 +00:00
Automatic Updater
464f9144fe update copyright notice 2009-10-05 23:48:27 +00:00
Evan Hunt
ea845a6b72 Rebase all of the API files to interface=60, as this is the first 
beta of a new major release.
 2009-10-05 22:01:26 +00:00
Evan Hunt
3ff75c89eb 2704. [bug] Serial of dynamic and stub zones could be inconsistent 
with their SOA serial.  [RT #19387]
 2009-10-05 19:39:20 +00:00
Francis Dupont
3c52c4e44c 20230 update 2009-10-05 17:39:36 +00:00
Francis Dupont
8b78c993cb explicit engine rt20230a 2009-10-05 17:30:49 +00:00
Automatic Updater
4fa2649d57 update copyright notice 2009-10-03 23:48:10 +00:00
Evan Hunt
c36ba263d6 2699. [bug] Missing lock in rbtdb.c. [RT #20037] 2009-10-03 22:39:27 +00:00
Evan Hunt
1210799345 Add /* NOTREACHED */ comments 2009-10-03 18:03:54 +00:00
Automatic Updater
edb08fdf7b update copyright notice 2009-10-01 23:48:08 +00:00
Mark Andrews
cf7432f747 2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and 
S_IFREG are defined after including <isc/stat.h>.
                        [RT #20309]
 2009-10-01 04:43:30 +00:00
Mark Andrews
eb95d2e917 2696. [bug] named failed to successfully process some valid 
acl constructs. [RT #20308]
 2009-10-01 04:06:37 +00:00
Shawn Routhier
bafa76b324 Updates to fdwatch code to support DHCP/DDNS code, ticket rt20253. 2009-10-01 01:30:01 +00:00
Automatic Updater
61dd99bfae update copyright notice 2009-09-29 23:48:04 +00:00
Francis Dupont
debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Mark Andrews
1e733ffc11 2792. [port] win32: 32/64 bit cleanups. [RT #128244] 2009-09-29 04:38:23 +00:00
Automatic Updater
627f3e0805 update copyright notice 2009-09-25 23:48:13 +00:00
Mark Andrews
ff850b81c8 2690. [bug] win32: fix isc_thread_key_getspecific() prototype. 
[RT #20315]
 2009-09-25 05:48:17 +00:00
Mark Andrews
ef830a7750 use (char *) for {get,set}sockopt argument 2009-09-25 02:44:06 +00:00
Mark Andrews
11144f86dc silence signed/unsigned comparision warning 2009-09-25 01:42:09 +00:00
Automatic Updater
b4336342d1 update copyright notice 2009-09-24 23:48:13 +00:00
Mark Andrews
0f869e8d52 2689. [bug] Correctly handle snprintf result. [RT #20306] 2009-09-24 22:19:08 +00:00
Francis Dupont
c59a7b0629 missing updates in recent changes 2009-09-24 14:39:17 +00:00
Mark Andrews
69338455d9 2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT, 
to decide to fetch the destination address. [RT #20305]
 2009-09-24 06:37:50 +00:00
Evan Hunt
53c22b8e0d 2685. [bug] Fixed dnssec-signzone -S handling of revoked keys. 
Also, added warnings when revoking a ZSK, as this is
			not defined by protocol (but is legal).  [RT #19943]
 2009-09-23 16:01:57 +00:00
Francis Dupont
6839f8b6df cleanup USE_EVP_RSA (RT #20044) 2009-09-23 11:16:50 +00:00
Francis Dupont
adb6972f01 minor fix, cf 20295 2009-09-22 08:38:14 +00:00
Tatuya JINMEI 神明達哉
790e471f6e 2681. [bug] IPSECKEY RR of gateway type 3 was not correctly 
decoded [RT #20269].

BIND 9.7.0, 9.6.2, 9.5.2, 9.4.4
 2009-09-18 21:55:21 +00:00
Tatuya JINMEI 神明達哉
148e9f3feb removed a non-existent .h. gmake (which is assumed to be used to build 
the exportlib) ignores it so it doesn't cause a trouble in practice, but
should still better be fixed.

(found by Shawn, I confirmed it.)
 2009-09-18 07:18:04 +00:00
Evan Hunt
b843f577bb 2677. [func] Changes to key metadata behavior: 
- Keys without "publish" or "active" dates set will
			  no longer be used for smart signing.  However,
			  those dates will be set to "now" by default when
			  a key is created; to generate a key but not use
			  it yet, use dnssec-keygen -G.
			- New "inactive" date (dnssec-keygen/settime -I)
			  sets the time when a key is no longer used for
			  signing but is still published.
			- The "unpublished" date (-U) is deprecated in
			  favor of "deleted" (-D).
			[rt20247]
 2009-09-14 18:45:45 +00:00
Automatic Updater
6d7e30b030 update copyright notice 2009-09-10 23:48:00 +00:00
Evan Hunt
f267b27f0e 2675. [bug] dnssec-signzone could crash if the key directory 
did not exist. [RT #20232]
 2009-09-10 05:09:31 +00:00
Evan Hunt
0e7cb68ea0 fix implicit memset() declaration 2009-09-10 02:18:40 +00:00
Evan Hunt
dbabab1f37 rt20045: 
- sync_keyzone() could leak ISC_R_NOMORE, causing zone_postload() to think
  it had failed
- journal roll-forward on key zones complained about having the wrong
  number of SOA records
- dns_soa_buildrdata() could return a pointer to memory allocated on the
  stack
 2009-09-10 01:47:09 +00:00
Automatic Updater
d8b801bd19 update copyright notice 2009-09-08 23:41:50 +00:00
Francis Dupont
e7de5dcef6 typo, cf RT20219 2009-09-08 13:04:29 +00:00
Francis Dupont
1f821c1058 merge rt19294 2009-09-07 12:58:33 +00:00
Mark Andrews
0b8385f5c5 2670. [bug] Unexpected connect failures failed to log enough 
information to be useful. [RT #20205]
 2009-09-07 02:08:51 +00:00
Tatuya JINMEI 神明達哉
457144a0c6 explained the portability workaround macro for isc__ vs isc___ 2009-09-04 18:51:37 +00:00
Tatuya JINMEI 神明達哉
2eb6a502bc added a missing .c file to SRC 2009-09-04 18:13:44 +00:00
Evan Hunt
82629edf81 jinmei's updated mem.h, which uses macros to generate function prototypes. 
this change was needed to support the bind9 build and export library build
on both *nix and win32.  cleanup from change 2660/rt19369.
 2009-09-04 17:47:26 +00:00
Automatic Updater
7b1894bec1 update copyright notice 2009-09-03 23:48:13 +00:00
Tatuya JINMEI 神明達哉
af55bddf26 cleanup: fixed incorrect ifdef [RT #20210] 2009-09-03 21:55:13 +00:00
Tatuya JINMEI 神明達哉
0984eeca5b added workaround for a recent change thatview->secroots is not created 
with view. [RT #20209]
 2009-09-03 21:45:46 +00:00
Evan Hunt
2e46523695 update cvsignore files 2009-09-03 20:28:46 +00:00
Mark Andrews
bbc204a237 2669. [func] Update PKCS#11 support to support Keyper HSM. 
Update PKCS#11 patch to be against openssl-0.9.8i.
 2009-09-03 04:09:58 +00:00
Evan Hunt
9f8d002a66 silence win32 compiler warnings 2009-09-03 00:12:23 +00:00
Evan Hunt
c164f233b4 s/isc__mem_reallocate/isc___mem_reallocate/ 2009-09-02 23:51:55 +00:00