upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-27 03:51:16 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
25079 commits 18 branches 854 tags 440 MiB
Commit graph

10345 commits

Author SHA1 Message Date
Tinderbox User
ad67363430 update copyright notice 2013-03-21 23:46:12 +00:00
Mark Andrews
c82da2167d 3531. [bug] win32: A uninitialized value could be returned on out 
of memory. [RT #32960]
 2013-03-22 09:21:30 +11:00
Tinderbox User
171f12f31e update copyright notice 2013-03-19 23:46:08 +00:00
Evan Hunt
625ee5d015 [master] add inttypes.h to rbt_test.c 2013-03-18 17:13:48 -07:00
Tinderbox User
be8fedce2a update copyright notice 2013-03-16 23:46:03 +00:00
Evan Hunt
741ebf1004 [master] make dst test work outside srcdir 
3526.	[cleanup]	Set up dependencies for unit tests correctly during
			build. [RT #32803]
 2013-03-15 07:35:56 -07:00
Tinderbox User
cfa2326b5c update copyright notice 2013-03-14 23:46:11 +00:00
Mark Andrews
73273ce28f add json.h 2013-03-15 09:11:13 +11:00
Mark Andrews
3d0aa29c26 add json.h 2013-03-15 00:04:11 +11:00
Evan Hunt
4eb998928b [master] algorithm flexibility for rndc 
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
 2013-03-13 17:53:11 -07:00
Mark Andrews
cedd50b3b6 make work without json 2013-03-14 11:12:27 +11:00
Tinderbox User
22dd28c5bc update copyright notice 2013-03-13 23:46:08 +00:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Evan Hunt
8a64253066 [master] fixed srcdir in nothreads build 2013-03-12 23:42:12 -07:00
Evan Hunt
62ac31d7fd [master] add inttypes.h to rbt.c 2013-03-12 20:44:41 -07:00
Evan Hunt
72c86c105a [master] DLZ modules: filesystem, ldap, wildcard 
3523.	[contrib]	Ported filesystem and ldap DLZ drivers to
			dynamically-loadable modules, and added the
			"wildcard" module based on a contribution from
			Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
 2013-03-11 17:03:46 -07:00
Evan Hunt
21a7fde6ba [master] handle servfail at DLZ zone apex 
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]
 2013-03-11 15:54:03 -07:00
Tinderbox User
b7e6fc2a4c update copyright notice 2013-03-08 23:47:06 +00:00
Mark Andrews
aababae795 3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249] 2013-03-08 21:12:42 +11:00
Mark Andrews
3a0da183bb 3520. [bug] 'mctx' was not being referenced counted in some places 
where it should have been.  [RT #32794]
 2013-03-08 14:38:03 +11:00
Mark Andrews
af21fc6644 3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit 
so that all dns_rrl_rtype_t enum values fit regardless
                        of whether it is teated as signed or unsigned by
                        the compiler. [RT #32792]
 2013-03-07 18:44:45 +11:00
Evan Hunt
929eed35ac [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-03-06 18:10:17 -08:00
Evan Hunt
61ddb38c2b [master] remove leftover debugging printf 2013-03-06 18:09:05 -08:00
Mark Andrews
e7b9603ead 3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777] 2013-03-07 07:13:38 +11:00
Mark Andrews
f3350b6718 silence compiler warnings 2013-03-05 23:41:22 +11:00
Mark Andrews
f9de007a57 #ifdef HAVE_GEOIP 2013-03-01 21:33:49 +11:00
Mark Andrews
e69e6105b2 #ifdef HAVE_GEOIP 2013-03-01 16:11:16 +11:00
Mark Andrews
8e5fce1f9c update copyrights 2013-03-01 10:39:29 +11:00
Evan Hunt
f61b05a6a5 [master] address warnings building exportlibs 2013-02-28 15:22:44 -08:00
Mark Andrews
8a896bc645 fix configure.in to remove warnings when running autoconf 
only compile geoip.o when requested.
    silence compiler warnings
 2013-03-01 09:58:32 +11:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size 
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
 2013-02-28 09:29:12 -08:00
Mark Andrews
33c14ca653 silence clang warning 2013-02-28 16:48:42 +11:00
Mark Andrews
fa23a7b8e9 silence locking false positive by puttling lock/unlock in same routine 2013-02-28 14:00:39 +11:00
Mark Andrews
b34b328287 explicitly ignore error returns 2013-02-28 13:44:14 +11:00
Evan Hunt
3fccc26025 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-27 18:29:53 -08:00
Evan Hunt
9cc2e4b4ab [master] ifdef around geoip syntax in parser 2013-02-27 18:29:30 -08:00
Mark Andrews
3426bd337d check the returns from isc_task_beginexclusive 2013-02-28 13:14:52 +11:00
Evan Hunt
501941f0b6 [master] add geoip support 
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
 2013-02-27 17:19:39 -08:00
Tinderbox User
bea3baa50c update copyright notice 2013-02-27 23:46:03 +00:00
Evan Hunt
f79c13fed8 [master] silence warning due to incorrect assert 2013-02-27 13:52:30 -08:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax 
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
 2013-02-27 11:53:58 -08:00
Evan Hunt
dbe761ac41 [master] better rrl shutdown bug fix 2013-02-26 23:39:38 -08:00
Evan Hunt
87ffe1bea7 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 22:41:48 -08:00
Evan Hunt
ae0fb42535 [master] back out previous rrl.c change 
Not the right fix; use ISC_LIST_INITANDAPPEND instead.
 2013-02-26 22:41:14 -08:00
Mark Andrews
36b3ac4dce add <isc/util.h> 2013-02-27 16:14:44 +11:00
Mark Andrews
fdc5f1702e silence compiler warnings 2013-02-27 15:57:46 +11:00
Evan Hunt
68357e5241 [master] avoid double-free in rrl 
- RRL could assert when freeing qname
 - also, changed test addresses from 192.168/16 to 192.0/16
 2013-02-26 19:15:11 -08:00
Evan Hunt
55f5787b35 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-02-26 17:29:51 -08:00
Evan Hunt
a4ee78d003 [master] silence warning 2013-02-26 17:28:41 -08:00
Mark Andrews
609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00
Mark Andrews
30b7c81c13 3500. [port] Support NAPTR regular expression validation on 
all platforms.  [RT #32688]
 2013-02-27 08:59:04 +11:00
Evan Hunt
e0c4f1f5cc [master] silence RRL warnings 2013-02-26 00:03:49 -08:00
Tinderbox User
f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt
37418116d5 [master] handle failures from dns_rpz_add() 
- I noticed a problem after merge, vjs supplied a fix, I have
    reviewed it, no ticket number.
 2013-02-25 14:38:08 -08:00
Evan Hunt
dcf426e9b5 [master] corrected typos & unintialized variable 2013-02-25 13:23:42 -08:00
Evan Hunt
94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's) 
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
 2013-02-25 12:46:51 -08:00
Evan Hunt
55e5c51e66 [master] DNS RRL 
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
 2013-02-25 12:45:56 -08:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
df925e6c66 [master] add zone memory context pools 
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]
 2013-02-20 21:39:05 -08:00
Evan Hunt
a81ae06ed3 [master] forbid inline-signing slave with no file 
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
 2013-02-20 14:01:31 -08:00
Tinderbox User
9d8985bea9 update copyright notice 2013-02-18 23:45:58 +00:00
Mark Andrews
740e7340c5 3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT. 
dns_dlzcreate() failed to properly initialize
                        dlzdb.link.  When cloning a rdataset do not copy
                        the link contents.  [RT #32651]

Squashed commit of the following:

commit c36c49cbdaeec8b2506dffadbffa543283702fa2
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:24:57 2013 +1100

    don't copy the link when cloning a rdataset

commit 9fef5827edcc925075832dcce900eeca9057456d
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:23:25 2013 +1100

    initialise the dlzdb link; don't return a stale pointer on error

commit a13c584732eae2dde48920a73886b54f1fe6b030
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:21:59 2013 +1100

    turn on ISC_LIST_CHECKINIT
 2013-02-19 07:28:24 +11:00
Mark Andrews
3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User
32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00
Mark Andrews
c9297d3759 3487. [bug] Change 3444 was not complete. There was a additional 
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
 2013-02-16 07:45:43 +11:00
Evan Hunt
0b8bd3a4ae [master] address TKEY bugs 
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:59:46 2013 -0800

    [rt32506] don't dump key if dump is unimplemented

commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:42:25 2013 -0800

    [rt32506] make sure LRU needs adjusting before adjusting it

commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 12:28:28 2013 -0800

    [rt32506] demonstrate bugs in tkey test
 2013-02-15 10:19:50 -08:00
Mark Andrews
52946dc6c0 silence compiler warning 2013-02-15 17:41:53 +11:00
Mark Andrews
7e9ccec638 3485. [cleanup] Only compile openssl_gostlink.c if we support GOST. 2013-02-12 13:03:34 +11:00
Tinderbox User
4486374631 update copyright notice 2013-02-08 23:45:50 +00:00
Evan Hunt
b748b5e2c2 [master] fix cache/ADB stats in new stats schema 
new stats that were added for 9.10 (changes 3319-3326) were not
    all updated when the new statistics schema was merged (change 3418).

3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]
 2013-02-08 14:53:14 -08:00
Tinderbox User
e38affadb3 update copyright notice 2013-02-05 23:45:50 +00:00
Mark Andrews
7d517b64d5 explict cast to (char *) from (void *) to silence compiler warning in %s checking 2013-02-05 14:24:32 +11:00
Evan Hunt
9dac1de625 [master] silence logging noise 
3480.	[bug]		Silence logging noise when setting up zone
			statistics. [RT #32525]
 2013-02-02 13:59:49 -08:00
Tinderbox User
17131a9459 update copyright notice 2013-01-25 23:45:56 +00:00
Mark Andrews
9c9b75c435 3479. [bug] Address potential memory leaks in gssapi support 
code. [RT #32405]
 2013-01-25 12:23:38 +11:00
Evan Hunt
c9611b4573 [master] change "fast" to "map" 
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
 2013-01-24 14:20:48 -08:00
Evan Hunt
8f7d23a25c Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-23 15:48:47 -08:00
Tinderbox User
3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00
Evan Hunt
ffff5d6792 [master] fix dns_request_createvia assert 
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
 2013-01-23 15:39:05 -08:00
Evan Hunt
641e87a1a0 [master] avoid active-counter underflow 
3472.	[bug]		The active-connections counter in the socket
			statistics could underflow. [RT #31747]
(cherry picked from commit 4dfe072abe4e76f5078a38ea0b97800333290877)
 2013-01-23 14:28:23 -08:00
Evan Hunt
a0a1003895 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-22 16:13:09 -08:00
Evan Hunt
214836c184 [master] dump masterfile after successful xfrin 
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
 2013-01-22 15:49:50 -08:00
Tinderbox User
b95504f9a7 update copyright notice 2013-01-22 23:45:48 +00:00
Evan Hunt
cbd1fa092e [master] DLZ fixes 
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
 2013-01-22 15:13:08 -08:00
Tinderbox User
5ac5300fdf update copyright notice 2013-01-17 23:46:25 +00:00
Mark Andrews
444f2a8efd add POST's 2013-01-17 23:24:54 +11:00
Mark Andrews
2afbf0891c s/head/tail/ 2013-01-17 21:47:39 +11:00
Mark Andrews
d8e8abdff9 Silence "Access to field 'refs' results in a dereference of a null pointer" by adding appropriate assertions. 2013-01-17 14:38:28 +11:00
Mark Andrews
d710475e18 Silence "Use of memory after it is freed" by asserting the head and tail of list are not the element after it is unlinked from the list. 2013-01-17 14:22:30 +11:00
Tinderbox User
54c820164a update copyright notice 2013-01-15 23:45:50 +00:00
Mark Andrews
70b0f9e179 silence compiler warning: Value stored to '?' is never used 2013-01-16 07:13:08 +11:00
Tinderbox User
dc3d68d6fe update copyright notice 2013-01-11 23:46:02 +00:00
Mark Andrews
c8bfcec3c9 silence compiler warning 2013-01-11 17:38:58 +11:00
Mark Andrews
3760ce53f2 add dns_zone_clearqueryaoncl, dns_zone_getqueryaoncl 2013-01-11 16:56:26 +11:00
Mark Andrews
5cd7ca9dbd windows snprint support 2013-01-11 16:26:30 +11:00
Mark Andrews
99394e9807 3465. [bug] Handle isolated reserved ports. [RT #31778] 2013-01-11 14:10:07 +11:00
Mark Andrews
0762ca086e record 9.8.x range info 2013-01-11 11:51:37 +11:00
Tinderbox User
5c6b95ba1b update copyright notice 2013-01-10 23:46:00 +00:00
Mark Andrews
4801931443 3461. [bug] Negative responses could incorrectly have AD=1 
set. [RT #32237]
 2013-01-10 23:09:08 +11:00
Mark Andrews
6a528eaa09 remove dead code 2013-01-10 18:13:25 +11:00
Tinderbox User
b941edbeb5 update copyright notice 2013-01-09 23:45:53 +00:00
Mark Andrews
c07c2a862e 3458. [bug] Return FORMERR when presented with a overly long 
domain named in a request. [RT #29682]
 2013-01-10 10:30:15 +11:00
Mark Andrews
f1c1aab2c9 3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836] 2013-01-10 08:26:31 +11:00
Mark Andrews
6018bd957d remove dead code 2013-01-09 21:50:20 +11:00
Mark Andrews
f622386388 use known length for known algorithns in fromtext_dlv cf fromtext_ds 2013-01-09 21:11:16 +11:00
Mark Andrews
513b5e8e51 3373. [bug] win32: open raw files in binary mode. [RT #30944] 
was not complete openfile_fast and openfile_raw should be using mode "rb"
rather than "r".
 2013-01-09 17:03:03 +11:00
Mark Andrews
aa24128022 3454. [port] sparc64: improve atomic support. [RT #25182] 2013-01-09 12:55:32 +11:00
Tinderbox User
afe7d4b934 update copyright notice 2013-01-08 23:45:50 +00:00
Mark Andrews
fc0bfa07c7 3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;' 
failed. [RT #31960]
 2013-01-09 07:40:27 +11:00
Mark Andrews
c9cecf7bb5 3452. [bug] Accept duplicate singlton records. [RT #32329] 2013-01-08 10:58:42 +11:00
Tinderbox User
e436a3d965 update copyright notice 2013-01-06 23:45:45 +00:00
Mark Andrews
c359f7b10f 3451. [port] Increase per thread stack size from 64K to 1M. 
[RT #32230]
 2013-01-07 09:52:16 +11:00
Mark Andrews
016eea4c62 remove dead code 2013-01-06 07:48:01 +11:00
Tinderbox User
6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Mark Andrews
f7d6bc93d1 make static 2013-01-05 00:32:38 +11:00
Mark Andrews
cbb2a0ebea silence compiler warning 2013-01-04 15:57:38 +11:00
Evan Hunt
f0a3b10baa [master] add print.h 2013-01-03 18:22:52 -08:00
Mark Andrews
8bd5bcd2a7 3445. [bug] Warn about zone files with blank owner names 
immediately after $ORIGIN directives. [RT #31848]

Conflicts:
	lib/dns/tests/master_test.c
 2013-01-04 12:16:55 +11:00
Mark Andrews
e285c6ea84 3449. [bug] gen.c: use the pre-processor to construct format 
strings so that compiler can perform sanity checks;
                        check the snprintf results. [RT #17576]
 2013-01-04 11:07:58 +11:00
Tinderbox User
d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User
024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Tinderbox User
9191b6c9e8 update copyright notice 2012-12-20 23:45:48 +00:00
Evan Hunt
086cb64a78 [master] remove unnecessary memcpy 2012-12-20 10:33:47 -08:00
Mark Andrews
45d4341eed silence signed/unsigned warning; rename log -> fctx_log 2012-12-19 12:39:54 +11:00
Evan Hunt
3ad3e9c948 [master] reject $ORIGIN before inherited name 
3445.	[bug]		Reject zone files with blank owner names immediately
			after $ORIGIN directives. [RT #31848]
 2012-12-18 16:17:55 -08:00
Tinderbox User
b16174507d update copyright notice 2012-12-18 23:45:50 +00:00
Mark Andrews
8462dfb880 3443. [bug] The NOQNAME proof was not being returned from cached 
insecure responses. [RT #21409]
 2012-12-19 09:55:02 +11:00
Mark Andrews
9f6b57798d 3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13. 2012-12-14 12:48:29 +11:00
Mark Andrews
fcc04c160f 3440. [bug] Reorder get_key_struct to not trigger a assertion when 
cleaning up due to out of memory error. [RT #32131]
 2012-12-13 11:18:01 +11:00
Mark Andrews
463f4ad70b silence clang --analyzer warnin by checking rdata.length 2012-12-10 08:24:17 +11:00
Tinderbox User
b8e2e5dd86 update copyright notice 2012-12-08 23:45:51 +00:00
Mark Andrews
50aaa90130 RETTOK -> RETERR 2012-12-09 07:45:51 +11:00
Mark Andrews
e85702ce5b 3438. [bug] Don't accept unknown data escape in quotes. [RT #32031] 
Squashed commit of the following:

commit 7ad3daade513c94a1c92ee7c91c112f161d13ef4
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 15:03:44 2012 +1100

    look at the second token to determine if a TXT record in of unknown format or not

commit 7df32138462646f6aee84ffa56d02ac24ec8d672
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 12:42:18 2012 +1100

    '"\#"' was incorrectly being treated as a unknown data escape sequence.
 2012-12-08 14:05:32 +11:00
Mark Andrews
6f7abb89ec 3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialise 
buffers with constant data. [RT #32064]

Squashed commit of the following:

commit 3433b96bf11f8c90ccbe412f01d02a6d8bbc2d33
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:41:16 2012 +1100

    isc_buffer_init -> isc_buffer_constinit

commit c22dbcc1122a0a44f7b46068e0ccbc25353a57d5
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:38:39 2012 +1100

    isc_buffer_init -> isc_buffer_constinit

commit 900820416c45c1887d0d22d7a010df60a903bd56
Author: Mark Andrews <marka@isc.org>
Date:   Sat Dec 8 12:24:19 2012 +1100

    remove isc_buffer_reconstinit

commit f815711c17b05f9961786a90b9bae902d3c01494
Author: Mark Andrews <marka@isc.org>
Date:   Wed Dec 5 15:42:57 2012 +1100

    add isc_buffer_constinit
 2012-12-08 12:48:57 +11:00
Tinderbox User
aae306e914 update copyright notice 2012-12-07 23:45:48 +00:00
Evan Hunt
45f3693294 [master] check malloc/calloc return values 
3436.	[bug]		Check malloc/calloc return values. [RT #32088]
 2012-12-07 12:23:58 -08:00
Evan Hunt
abff0f462a [master] pass client info to DLZ findzone method 
3434.   [bug]           Pass client info to the DLZ findzone() entry
                        point in addition to lookup().  This makes it
                        possible for a database to answer differently
                        whether it's authoritative for a name depending
                        on the address of the client.  [RT #31775]
 2012-12-06 12:59:36 -08:00
Evan Hunt
177be355d4 [master] handle ISC_R_NOMORE correctly 
3433.	[bug]		dlz_findzone() did not correctly handle
			ISC_R_NOMORE. [RT #31172]
 2012-12-06 12:41:58 -08:00
Evan Hunt
2b8bed6681 [master] multiple-dlz/dlz-nxdomain 
3432.	[func]		Multiple DLZ databases can now be configured.
			DLZ databases are searched in the order configured,
			unless set to "search no", in which case a
			zone can be configured to be retrieved from a
			particular DLZ database by using a "dlz <name>"
			option in the zone statement.  DLZ databases can
			support type "master" and "redirect" zones.
			[RT #27597]
 2012-12-06 12:39:52 -08:00
Mark Andrews
8a6f41d86a 3430. [bug] win32: isc_time_formatISO8601 was missing the 
'T' between the date and time. [RT #32044]
 2012-12-04 14:59:56 +11:00
Mark Andrews
c6f03e7903 treat clang 3.x and 4.x as independent release streams 2012-12-03 09:10:43 +11:00
Mark Andrews
6ebf3dbb33 workaround only needed for clang 3.1 2012-12-03 07:58:01 +11:00
Mark Andrews
c6af776a7e silence compiler warnings 2012-12-01 21:32:31 +11:00
Mark Andrews
4151109b94 silence clang --analyze warnings 2012-11-30 18:50:38 +11:00
Mark Andrews
85a873f000 conditionally silence false positives from clang --analyze 2012-11-30 16:19:00 +11:00
Mark Andrews
538f4a22b1 3429. [bug] dns_zone_getserial2 could a return success without 
returning a valid serial. [RT #32007]

Squashed commit of the following:

commit 0057f4b6e843c3998b987dbc7f32ceeee8afc150
Author: Mark Andrews <marka@isc.org>
Date:   Fri Nov 30 08:13:15 2012 +1100

    zone_get_from_db could return success without setting return valuses; serial is only valid if soacount is none zero
 2012-11-30 11:39:37 +11:00
Mark Andrews
22f3afddd2 null pointer derefernce on out of memory 2012-11-30 00:58:56 +11:00
Mark Andrews
d4af2cc0db initialize the octet string to empty so that we don't free garbage on error 2012-11-29 18:11:05 +11:00
Mark Andrews
965605e238 link against @DNS_CRYPTO_LIBS@ 2012-11-29 07:27:11 +11:00
Mark Andrews
2e22f903da 3425. [bug] "acacheentry" reference counting was broken resulting 
in use after free. [RT #31908]
 2012-11-27 16:03:36 +11:00
Mark Andrews
c46aa71433 dupped/created reversed in log message 2012-11-23 17:28:16 +11:00
Tinderbox User
7e75b6266d update copyright notice 2012-11-21 23:45:45 +00:00
ckb
2786b6c53f 3422. [bug] Added a clear error message for when the SOA does not 
match the referral. [RT #31281]
 2012-11-21 16:44:34 -06:00
Mark Andrews
20b95f5ff6 3421. [bug] Named loops when re-signing if all keys are offline. 
[RT #31916]

Squashed commit of the following:

commit f47af0ca6793687b9c8d08fd44b0c091ba5a4f9a
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 21 17:45:21 2012 +1100

    dns_dns_zonediff_t -> dns_zonediff_t, clarify comment

commit 344edefc3ee90856a7ff990abe7971925ba843b2
Author: Mark Andrews <marka@isc.org>
Date:   Tue Nov 20 13:12:26 2012 +1100

    commit the zone changes if a keep was marked as being offline

commit cad2c2446ebfc20b6d8c4f6dd0d6596d7106cc0f
Author: Mark Andrews <marka@isc.org>
Date:   Tue Nov 20 13:08:29 2012 +1100

    check for looping when re-signing expiring.example
 2012-11-21 17:48:57 +11:00
Mar Andrews
c3b9fad5e3 3420. [bug] Address VPATH compilation issues. [RT #31879] 2012-11-17 09:33:46 +00:00
Mark Andrews
39bfdc2ff9 3419. [bug] Memory leak on validation cancel. [RT #31869] 
Squashed commit of the following:

commit 452b07ec7cb31784d90d9c2e45ca708df306302e
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 14 23:36:36 2012 +1100

    destroy fetch when canceling validator
 2012-11-15 11:16:28 +11:00
ckb
aecadaf3b1 3418. [func] New XML schema (version 3.0) for the statistics channel 
adds query type statistics at the zone level, and
			flattens the XML tree and uses compressed format to
			optimize parsing. Includes new XSL that permits
			charting via the Google Charts API on browsers that
			support javascript in XSL.  The old XML schema has been
			deprecated. [RT #30023]

3417.	[placeholder]
 2012-11-14 12:44:15 -06:00
Mark Andrews
d8fc410cf8 Redo 
3415.   [bug]           named could die with a REQUIRE failure if a valdation
                        was canceled. [RT #31804]
 2012-11-14 07:41:32 +11:00
Mark Andrews
1a09fefa59 3415. [bug] named could die with a REQUIRE failure id a valdation 
was canceled. [RT #31804]

Squashed commit of the following:

commit d414d3cb4244daeca4159ac1f8a82322e4a20e5a
Author: Mark Andrews <marka@isc.org>
Date:   Wed Nov 7 14:19:28 2012 +1100

    check that val->fetch != NULL before calling dns_resolver_destroyfetch
 2012-11-09 09:09:52 +11:00
Mark Andrews
07cab7ffa8 improve isc_mempool_put memory model 2012-11-02 16:02:15 +11:00
Mark Andrews
ffd17aca38 move memory accounting to before free of memory to avoid "using" a pointer after it is freed 2012-11-02 15:57:56 +11:00
Mark Andrews
6316438336 spelling 2012-11-02 11:19:02 +11:00
Mark Andrews
d9baadbb0c add coverity[+free : arg-1] directive 2012-11-02 11:16:32 +11:00
Mark Andrews
8f4572372c 3414. [bug] Address locking issues found by Coverity. [RT #31626] 2012-11-02 06:41:45 +11:00
Mark Andrews
18a148d998 sock is potentially unused in use_min_mtu 2012-11-01 15:28:36 +11:00
Mark Andrews
a004a82ee3 uninitalised use 2012-11-01 13:53:20 +11:00
Mark Andrews
4d30dd89f5 3412. [bug] Copy timeval structure from control message data. 
[RT #31548]
 2012-11-01 11:16:59 +11:00
Tinderbox User
fcd7c22fdf update copyright notice 2012-10-31 23:45:49 +00:00
Mark Andrews
bbf31e6b62 More coverity fixes: 
3410.   [bug]           Addressed Coverity warnings. [RT #31626]
Squashed commit of the following:

commit 6fec07bbb69ead784063052f2099674f8b52c6b3
Author: Mark Andrews <marka@isc.org>
Date:   Tue Oct 30 18:14:35 2012 +1100

    use strl{cat,cpy}

commit 19a5d3766f3dbc8a2944b21640a8226a89aae7ba
Author: Mark Andrews <marka@isc.org>
Date:   Tue Oct 30 14:38:55 2012 +1100

    address unchecked xmlTextWriter* calls
 2012-11-01 10:22:11 +11:00
Mark Andrews
c2e80cf47e 3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition to UDP. [RT #31690] 
Squashed commit of the following:

commit bcbe9ae7a99e1f7f4236a22739a793b51ace8684
Author: Mark Andrews <marka@isc.org>
Date:   Wed Oct 31 15:10:53 2012 +1100

    Use IPV6_USE_MIN_MTU for TCP as well as UDP
 2012-11-01 08:42:56 +11:00
Mark Andrews
16a2ddb2ce more: 3410. [bug] Addressed Coverity warnings. [RT #31626] 
move set_refreshkeytimer call within loop so that keydata is valid.
 2012-10-30 13:00:58 +11:00
Mark Andrews
15fdec98df check more dns_rdata_tostruct returns 2012-10-30 08:50:06 +11:00
Mark Andrews
f83542787f 3410. [bug] Addressed Coverity warnings. [RT #31626] 
Squashed commit of the following:

commit bce2efe66d69d60b746b85df49974ca341723169
Author: Mark Andrews <marka@isc.org>
Date:   Mon Oct 29 12:59:25 2012 +1100

    use 'static dns_rdata_xxxx_t xxxx'

commit 704d3c29acbf2dd350a26f2df82a57cb077ba72e
Author: Mark Andrews <marka@isc.org>
Date:   Mon Oct 29 12:35:16 2012 +1100

    return ISC_R_NOTFOUND if private record length does not make sense

commit 7596610c12c5685336fc0909860173d2fae359af
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:41:17 2012 +1100

    check private->length == 5

commit 3836365a3e3e83b057bd940350f032279e080296
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:40:50 2012 +1100

    properly set private->length

commit a295778ac53109d39ef3a8b233751100edae678b
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:13:30 2012 +1100

    check dns_rdata_tostruct result

commit e33c37ca9112159e0b2363615bb018d27fa7d1a5
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 21:10:43 2012 +1100

    check remove/fopen/chmod return values

commit 3a675e0666aae25d1c51f51ec7bd3fbe25545aae
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:59:10 2012 +1100

    check isc_socket_accept result

commit 696923344f4b07ce0dba4cf2675b1cbb6eba7e8e
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:55:40 2012 +1100

    change variable scopes

commit b9e9d9ad58270271003e463f10744e0ceaf9ad97
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:53:19 2012 +1100

    check inet_pton return value

commit 70698e9589da77e3745efb6ea24b8830addd6ae4
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:52:40 2012 +1100

    break -> /* NOTREACHED */

commit 88de9de2e8e201ab2fef16a868f241e8206ea826
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:52:06 2012 +1100

    strcpy -> strlcpy

commit 6ba79c7cec0e48014cdfa76e8a9406b7a921556e
Author: Mark Andrews <marka@isc.org>
Date:   Sat Oct 27 20:51:26 2012 +1100

    check dns_rdata_tostruct return values
 2012-10-29 20:04:59 +11:00
Evan Hunt
f46168b879 [master] allow dnssec options in inline-signing slaves 
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
 2012-10-26 16:14:59 -07:00
Evan Hunt
2f57f353e8 [master] address mem.c compilation problems 
3406.	[bug]		mem.c: Fix compilation errors when building with
			ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
                        Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
 2012-10-25 18:56:47 -07:00
Tinderbox User
814fc913e6 update copyright notice 2012-10-25 23:47:00 +00:00
Mark Andrews
f3e10cca1b 3405. [bug] Handle time going backwards in acache. [RT #31253] 
Squashed commit of the following:

commit fbf4c8fe2644c101bac870360d3f2c159a90f203
Author: Mark Andrews <marka@isc.org>
Date:   Wed Oct 24 14:43:14 2012 +1100

    remove INSIST and handle time going backwards
 2012-10-25 14:29:10 +11:00
Tinderbox User
a3fb84bd1b update copyright notice 2012-10-24 23:46:51 +00:00
Evan Hunt
9dca437081 [master] silence warning 2012-10-24 15:40:00 -07:00
Evan Hunt
98f9571bd9 [master] silence unused variable warning 2012-10-24 15:36:04 -07:00
Evan Hunt
c241017dcd [master] fix fedora 17 ecdsa compilation problem 2012-10-24 13:56:41 -07:00
Evan Hunt
0e37e9e3d7 [master] silence noisy OpenSSL logging 
3402.	[bug]		Correct interface numbers for IPv4 and IPv6 interfaces.
 2012-10-24 12:58:16 -07:00
Evan Hunt
47c5b8af92 [master] silence coverity warnings 
3401.	[bug]		Addressed Coverity warnings. [RT #31484]
 2012-10-23 22:04:06 -07:00
Mark Andrews
965371b8cf 3399. [port] netbsd: rename 'bool' parameter to avoid namespace 
clash.  [RT #31515]
 2012-10-22 11:42:23 +11:00
Tinderbox User
94f86d37b2 update copyright notice 2012-10-19 23:45:58 +00:00
Mark Andrews
3624e53916 remove redundant UNUSED(callbacks) 2012-10-19 16:28:57 +11:00
Tinderbox User
c37fbb91e3 update copyright notice 2012-10-18 23:46:07 +00:00
Mark Andrews
de0fd68097 3398. [bug] SOA parameters were not being updated with inline 
signed zones if the zone was modified while the
                        server was offline. [RT #29272]
 2012-10-19 10:25:06 +11:00
Mark Andrews
0fbd29837a 3396. [bug] OPT records were incorrectly removed from signed, 
truncated responses. [RT #31439]
 2012-10-18 13:25:06 +11:00
Mark Andrews
70bd5ae6fa missing space before other len after change #3389 2012-10-17 12:48:12 +11:00
Mark Andrews
47c6d89485 3394. [bug] Adjust 'sucessfully validated after lower casing 
signer' log level and category. [RT #31414]
 2012-10-16 11:56:05 +11:00
Tinderbox User
603a182e43 update copyright notice 2012-10-15 23:46:02 +00:00
Mark Andrews
4b17401c9c add test support for dropping edns messages (-T dropedns); ignoring edns in queries (-T noedns); variable max UDP (-T maxudp=value) 2012-10-16 10:23:08 +11:00
Mark Andrews
71dfdcbfae 3392. [func] Keep statistics on REFUSED responses. [RT #31412] 2012-10-16 10:21:22 +11:00
Mark Andrews
9432ef6cdb remove redundent call 2012-10-12 21:57:22 +11:00
Mark Andrews
6700284a4f fix typos in variable names 2012-10-10 13:10:07 +11:00
Mark Andrews
1559dfd341 silence compiler warning 2012-10-08 14:30:10 +11:00
Tinderbox User
15c7a1bf20 update copyright notice 2012-10-06 23:46:11 +00:00
Mark Andrews
dbf693fdfd 3391. [bug] DNSKEY that encountered a CNAME failed. [RT #31262] 2012-10-06 14:56:33 +10:00
Mark Andrews
611dc88768 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 14:20:45 +10:00
Mark Andrews
14889e7b17 add <dns/dsdigest.h> to the list of header files to be installed 2012-10-05 15:10:50 +10:00
Mark Andrews
2ec7373254 3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275] 2012-10-05 06:57:05 +10:00
Tinderbox User
7ce7ecf6bc update copyright notice 2012-10-03 23:46:17 +00:00
Mark Andrews
e0ad27d822 Revert "include <isc/print.h> in gen.c" 
This reverts commit 3f6cec1a35.
 2012-10-04 08:11:21 +10:00
Evan Hunt
3f6cec1a35 include <isc/print.h> in gen.c 2012-10-03 07:59:57 -07:00
Evan Hunt
41bbb34bc2 fix coverity issues 
3388.	[bug]		Fixed several Coverity warnings. [RT #30996]
 2012-10-02 23:44:03 -07:00
Mark Andrews
02bbbc26be lib/dns/include/dns/dsdigest.h 2012-10-03 14:47:30 +10:00
Mark Andrews
058e44186b 3387. [func] Support for a DS digest can be disabled at 
runtime with disable-ds-digests. [RT #21581]
 2012-10-03 12:38:43 +10:00
Mark Andrews
f4f15cbf71 white space; move pause to before comment. 2012-10-03 10:11:07 +10:00
Mark Andrews
9e70b51d3b 3386. [bug] Address locking violation when generating new NSEC / 
NSEC3 chains. [RT #31224]
 2012-10-03 09:02:28 +10:00
Mark Andrews
37702cb83c reapply accidentally reversed change 2012-10-02 16:42:50 +10:00
Mark Andrews
aa49af836c 3385. [bug] named-checkconf didn't detect missing master lists 
in also-notify clauses. [RT #30810]
 2012-10-02 13:06:02 +10:00
Evan Hunt
31c6f9cc85 silence warning 2012-09-28 18:47:05 -07:00
Tinderbox User
0fc76b64fb update copyright notice 2012-09-28 23:46:10 +00:00
Evan Hunt
d1ac7adb3e improve logging of ecdsa errors 
3384.	[bug]		Improved logging of crypto errors. [RT #30963]
 2012-09-28 13:46:47 -07:00
Tinderbox User
04a9fcecf5 update copyright notice 2012-09-26 23:46:13 +00:00
Evan Hunt
da35568c71 use correct port range 
3382.	[bug]		SOA query from slave used use-v6-udp-ports range,
			if set, regardless of the address family in use.
			[RT #24173]
 2012-09-26 13:55:18 -07:00
Mark Andrews
27809a2ee5 3379. [bug] isc_interval_zero and isc_time_epoch should be 
"const (type)* const". [RT #31069]
 2012-09-26 14:58:53 +10:00
Evan Hunt
05284949f7 handle nonexistent managed-keys-directory 
3378.	[bug]		Handle missing 'managed-keys-directory' better.
			[RT #30625]
 2012-09-25 18:19:17 -07:00
Evan Hunt
664320a88f remove spurious newline 
3377.	[bug]		Removed spurious newline from NSEC3 multiline
			output. [RT #31044]
 2012-09-18 14:22:33 -07:00
Mark Andrews
96f1aa2458 add missing extern qualiers 2012-09-17 18:37:24 +10:00
Mark Andrews
eed495737b 3376. [bug] Lack of EDNS support was being recorded without a 
successful response. [RT #30811]
 2012-09-14 11:01:06 +10:00
Mark Andrews
5f26ffc2b4 3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808] 2012-09-14 07:53:19 +10:00
Tinderbox User
14725aff16 update copyright notice 2012-09-12 23:46:13 +00:00
ckb
179d8f4cc8 3374. [bug] isc_parse_uint32 failed to return a range error on 
systems with 64 bit longs [RT #30232]
 2012-09-12 15:08:19 -05:00
Mark Andrews
0b9ea3fca6 O_BINARY -> _O_BINARY 2012-09-12 13:51:49 +10:00
Mark Andrews
7e9d637131 3373. [bug] win32: open raw files in binary mode. [RT #30944] 2012-09-12 11:44:24 +10:00
Mark Andrews
4c2168728c 3372. [bug] Silence spurious "deleted from unreachable cache" 
messages.  [RT #30501]
 2012-09-08 17:59:14 +10:00
Mark Andrews
d27343c554 make dns_rbt_zero_header static 2012-08-24 10:44:26 +10:00
Mark Andrews
68eb4dca5a unsigned constants 2012-08-24 08:45:56 +10:00
Mark Andrews
4738df0c5c v9_8_4rc2 2012-08-23 23:39:43 +10:00
Mark Andrews
8e0a15f42f 3370. [bug] Address use after free while shutting down. [RT #30241] 2012-08-22 19:19:30 +10:00
Tinderbox User
72de8965c8 update copyright notice 2012-08-21 23:46:02 +00:00
Mark Andrews
8f7e0e25a5 3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h> 
where not C++ safe.
 2012-08-21 16:42:19 +10:00
Mark Andrews
b29e848220 3367. [bug] dns_dnsseckey_create() result was not being checked. 
[RT #30685]
 2012-08-21 12:04:09 +10:00
Tinderbox User
0c156cfa39 update copyright notice 2012-08-17 23:46:06 +00:00
ckb
339f08ee1e 3366. [bug] Fixed Read-After-Write dependency violation for IA64 
atomic operations. [RT #25181]
 2012-08-17 13:02:50 -05:00
Mark Andrews
076bda8c2e we didn't catch a zero option at the global level when views are active 2012-08-17 13:40:17 +10:00
Evan Hunt
78ba74e63d remove spurious newlines in zone.c logging 
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
 2012-08-16 10:41:09 -07:00
Mark Andrews
1bbd36c4db 3364. [security] Named could die on specially crafted record. 
[RT #30416]
 2012-08-16 09:42:14 +10:00
Evan Hunt
85705b4b5a allow "forward" and "forwarders" in static-stub 
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]
 2012-08-15 13:08:15 -07:00
Tinderbox User
23554e8479 update copyright notice 2012-08-14 23:46:02 +00:00
Evan Hunt
820fdd61dd properly range-check fields that do not allow 0 
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
 2012-08-13 22:39:42 -07:00
Mark Andrews
4e8090f1c1 test against unsigned zero 2012-08-14 14:31:51 +10:00
Mark Andrews
f06dad6860 3360. [bug] 'host -w' could die. [RT #18723] 2012-08-14 11:05:29 +10:00
Evan Hunt
3f755529ee address memory leak with bad tsig secret 
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
 2012-08-10 20:15:59 -07:00
Tinderbox User
953692fa1e update copyright notice 2012-07-25 23:46:04 +00:00
ckb
e7857b5ee0 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are 
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
 2012-07-25 17:06:34 -05:00
Mark Andrews
1495117889 cast mode to unsigned int for fprintf 2012-07-24 12:58:04 +10:00
Mark Andrews
2634750ce5 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2012-07-24 12:18:43 +10:00
Mark Andrews
1d2f282840 cleanup unused variables 2012-07-24 12:18:10 +10:00
Tinderbox User
0b637179cc update copyright notice 2012-07-23 23:46:06 +00:00
Mark Andrews
6eb6af6732 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:08:21 +10:00
Mark Andrews
13518a9636 windows fixes 2012-07-20 18:08:28 +10:00
Tinderbox User
c207dd8394 update copyright notice 2012-07-19 23:45:53 +00:00
Mark Andrews
c965b18690 3353. [bug] Use a single task for task exclusive operations. 
[RT #29872]
 2012-07-19 23:00:21 +10:00
Mark Andrews
ee2f98d5cf 3352. [bug] Ensure that learned server attributes timeout of the 
adb cache. [RT #29856]
 2012-07-18 14:16:37 +10:00
Mark Andrews
c963ca7542 3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report 
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
                        memory debugging flags are set. [RT #30243]
 2012-07-18 10:02:32 +10:00
Mark Andrews
d0d892f449 3350. [bug] Memory read overrun in isc___mem_reallocate if 
ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]
 2012-07-18 09:50:52 +10:00
Mark Andrews
1a594d204a fix race in ISC_QUEUE_PUSH 2012-07-17 15:12:20 +10:00
ckb
ad7fdba1ed 3348. [security] prevent RRSIG data from being cached if a negative 
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well.
 2012-07-09 12:51:11 -05:00
Evan Hunt
bb5c950e7c update .def file 2012-07-05 18:05:44 -07:00
Evan Hunt
4476b98f89 missed out a variable declaration 2012-07-05 17:18:22 -07:00
ckb
c514f38c80 Conflicts: 
lib/dns/dst_parse.c
	lib/isc/win32/file.c
 2012-07-05 16:07:31 -05:00
Evan Hunt
cdd271b14a fix bad-cache assert 
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
 2012-07-02 10:01:48 -07:00
Evan Hunt
d64138e577 addressed possible race in ISC_QUEUE 
3345.	[bug]		Addressed race condition when removing the last item
			or inserting the first item in an ISC_QUEUE.
			[RT #29539]
 2012-07-02 09:37:17 -07:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
da5d53fb14 update copyright notice 2012-06-26 23:45:56 +00:00
Mark Andrews
c41c261fc7 3342. [bug] Change #3314 broke saving of stub zones to disk 
resulting in excessive cpu usage in some cases.
                        [RT #29952]
 2012-06-27 09:21:09 +10:00
Tinderbox User
6d5f928b26 update copyright notice 2012-06-25 23:46:00 +00:00
Mark Andrews
ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
 2012-06-25 13:57:32 +10:00
Mark Andrews
1a3894ca22 silence compiler warning by using offsetof to get structure elelment offsets 2012-06-25 11:57:10 +10:00
Mark Andrews
171d2c23f1 remove 'inline' on dns_rbt_serialize_align 2012-06-25 08:14:34 +10:00
Mark Andrews
abeb649619 check fwrite results 2012-06-23 18:21:52 +10:00
Mark Andrews
d70f7b9e46 change type of where to uintptr_t 2012-06-23 18:06:33 +10:00
Mark Andrews
aeed8b4d3b change offset type to long 2012-06-23 18:02:13 +10:00
Tinderbox User
3b398443f0 update copyright notice 2012-06-21 23:46:36 +00:00
Tinderbox User
620620df3a silence pointer/int conversion warnings using uintptr_t, since we are using stdio file offsets are longs 2012-06-22 07:37:09 +10:00
Evan Hunt
5506903c92 Merge rt28412b 
- check for mmap() in configure
- implement isc_file_mmap() and isc_file_munmap() to do
  malloc()/read() and free() when run on systems that do not
  support mmap().
 2012-06-21 12:58:46 -07:00
Mark Andrews
46e025d82e remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);' 2012-06-21 14:28:32 +10:00
Tinderbox User
8e6b386ab7 update copyright notice 2012-06-20 23:46:40 +00:00
ckb
5f5f8b1dd4 removed .cvsignore files 2012-06-20 14:23:12 -05:00
ckb
7829fad409 merging fast format zone files 
Conflicts:
	.gitignore
	bin/named/zoneconf.c
	bin/tests/.gitignore
	bin/tests/system/autosign/tests.sh
	bin/tests/system/masterformat/clean.sh
	bin/tests/system/masterformat/ns1/compile.sh
	bin/tests/system/masterformat/tests.sh
	configure
	lib/dns/db.c
	lib/dns/include/dns/db.h
	lib/dns/include/dns/types.h
	lib/dns/master.c
	lib/dns/masterdump.c
	lib/dns/rbt.c
	lib/dns/rbtdb.c
	lib/dns/sdb.c
	lib/dns/sdlz.c
	lib/dns/tests/.cvsignore
	lib/dns/tests/Makefile.in
	lib/dns/win32/libdns.def
	lib/dns/xfrin.c
	lib/dns/zone.c
	lib/export/dns/Makefile.in
	lib/isc/include/isc/file.h
	lib/isc/unix/file.c
	lib/isc/win32/file.c
	lib/isccfg/namedconf.c
 2012-06-20 14:13:12 -05:00
Tinderbox User
ef1963d83d update copyright notice 2012-06-15 23:45:49 +00:00
Mark Andrews
ec048f4600 make maxbits signed as BN_num_bits is signed 2012-06-15 11:54:58 +10:00
Mark Andrews
7865ea9545 3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228] 2012-06-14 15:44:20 +10:00
Mark Andrews
57f1d800f8 3338. [bug] Address race condition in units tests: asyncload_zone 
and asyncload_zt. [RT #26100]
 2012-06-14 15:13:44 +10:00
Mark Andrews
c298583db5 3337. [bug] Change #3294 broke support for the multiple keys 
in controls. [RT #29694]
 2012-06-13 16:25:42 +10:00
Tinderbox User
8ce1923429 update copyright notice 2012-06-08 23:45:57 +00:00
Mark Andrews
80fa3ef851 3336. [func] Maintain statistics for RRsets tagged as "stale". 
[RT #29514]
 2012-06-08 16:32:44 +10:00
Mark Andrews
109ebcc980 3334. [bug] Hold a zone table reference while performing a 
asyncronous load of a zone. [RT #28326]
 2012-06-08 13:52:13 +10:00
Mark Andrews
7310c0b1ee 3333. [bug] Setting resolver-query-timeout too low can cause 
named to not recover if it looses connectivity.
                        [RT #29623]
 2012-06-08 12:34:33 +10:00
Mark Andrews
a0c1fa2a8f 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:51:11 +10:00
Mark Andrews
735ca24fa6 3321. [security] dns_rdataslab_fromrdataset could produce bad 
rdataslabs. [RT #29644]
 2012-06-01 23:33:16 +10:00
Tinderbox User
7a440c4300 update copyright notice 2012-05-31 23:46:01 +00:00
Vernon Schryver
afaa290bb6 Squashed commit of the following: 
commit aea73609ac5d41ed091360e94370798965f28f05
commit eef7f44c57a060b24a426eb8888e16176a0a69b1
commit a88a26d864ad399fa2d40e3b9659b4d26f454ca1
commit 1b90d59568e7e3b65690c6bd075cf4d60b03e454
Merge: 74d8f73 cd02924
commit 74d8f73ed553bb64a305e284905762f7ff0029aa
commit 9a59ef6bbd4befe91e5691e8b85afe1cb7ab0706
commit c63606a53b4f1bb7066b37d3cfe588e9dc21a119
commit 2c392a840c8838455d144ce163bd873bee400c97
commit 0241f53563e6e7bed462a883d98a8931f01e0980
commit 79fe22b5d6f04bdaa3073cf54d41952194e879e1
commit 351b3049625f2edd39729dd85413e961b97d4b3b
commit 7207674fc77c9a10d84c0cb94e36d1c09bb31459
commit 543ad34cf08f901c20b438c9d2f45482cff13d5e
commit fc45b99ce4438627fdcbeb4365695ba0065fa46f
commit c425207f57e0a5157372aa7edbb79b13170563e5
commit ef8c5e23ca284e0ea02f69ce1f356d537c19d93b
commit ba0d4e3aa51efe412cfa1d031651f949442d1802
commit 41c7969c7cb6884b93011f7ace3fd9522efc021e
  and more from CVS

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
 2012-05-31 02:03:34 +00:00
Mark Andrews
e8e0a46925 silence warnings from clang 2012-05-30 11:52:02 +10:00
Mark Andrews
cf751b1c9b don't insist that rbtdb->cachestats exists. 2012-05-18 15:19:49 +10:00
Tinderbox User
a847a4bcd6 update copyright notice 2012-05-17 23:46:03 +00:00
Evan Hunt
26833735d3 Handle RRSIG signer case consistently 
3329.	[bug]		Handle RRSIG signer-name case consistently: We
			generate RRSIG records with the signer-name in
			lower case.  We accept them with any case, but if
			they fail to validate, we try again in lower case.
			[RT #27451]
 2012-05-17 10:44:16 -07:00
Evan Hunt
01695063c6 fix check_data() usage 
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
 2012-05-16 23:12:57 -07:00
Tinderbox User
633c5dc507 update copyright notice 2012-05-14 23:45:48 +00:00
Evan Hunt
d81b6b94c4 cache stats were detached when flushing cache 2012-05-14 12:20:34 -07:00
Evan Hunt
d878b8d87c merged filter-aaaa-on-v6 (ATT SoW) 
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]
 2012-05-14 11:50:00 -07:00
Evan Hunt
dd2a0a6d2d Merge statistics code (ATT SoW, rt24117) 
This includes the following changes:

3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]
 2012-05-14 10:06:05 -07:00
Mark Andrews
c438f1beb9 3318. [tuning] Reduce the amount of work performed while holding a 
bucket lock when finshed with a fetch context.
                        [RT #29239]
 2012-05-10 08:28:32 +10:00
Mark Andrews
26ed6de665 add opensslecdsa_link 2012-05-09 13:51:29 +10:00
Evan Hunt
d560cb0fc3 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2012-05-03 14:01:41 -07:00
Evan Hunt
970aa7d783 missing braces; style glitch 2012-05-03 14:01:32 -07:00
Tinderbox User
99d8f5a704 update copyright notice 2012-05-02 23:45:44 +00:00
Mark Andrews
89bbdd1f69 Use '==' not '=' in conditional test when not using openssl. 2012-05-03 09:29:32 +10:00
Mark Andrews
aaaf8d4f48 3317. [func] Add ECDSA support (RFC 6605). [RT #21918] 2012-05-02 23:20:17 +10:00
Tinderbox User
ee980d3fc4 update copyright notice 2012-04-28 23:45:42 +00:00
Evan Hunt
54489ba167 Improve locking performance in dispatch.c 
3316.	[tuning]	Improved locking performance when recursing.
			[RT #28836]

   - Use one lock per memory pool instead of associating
     them all with a single 'pool_lock' in the dispatch manager.
   - Reduce the critical sections for qid->lock in get_dispsocket(),
     deref_portentry() and dns_dispatch_addresponse2().
   - Added a memory pool for socket events in dns_dispatch_t.
   - Add an isc_socketevent_t member in the resquery_t object, and use
     it with isc_socket_sendto2() instead of using isc_socket_sendto()
   - Tuned the memory pools in dispatch.c for better performance
     under load
 2012-04-28 14:52:28 -07:00
Evan Hunt
4e8fe357a6 create and use multiple fetch dispatches 
Added API to create a set of UDP dispatches which can be shared
round-robin style when making upstream queries for authoritative
data; this should reduce lock contention in the query source
dispatch.
 2012-04-27 16:11:30 -07:00
Mark Andrews
8e2c2ca0a0 TRUE -> ISC_TRUE 2012-04-26 18:19:48 +10:00
Mark Andrews
1a04af5311 3314. [bug] The masters list could be updated while refesh_callback 
and stub_callback were using it. [RT #26732]
 2012-04-26 12:58:39 +10:00
Mark Andrews
393fd55d91 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:22:49 +10:00
Mark Andrews
7e9d6c7075 3312. [bug] named-checkconf didn't detect a bad dns64 clients acl. 
[RT #27631]
 2012-04-26 11:42:39 +10:00
Mark Andrews
4c9c2a6a72 3311. [bug] Abort the zone dump if zone->db is NULL in 
zone.c:zone_gotwritehandle. [RT #29028]
 2012-04-26 11:23:43 +10:00
Tinderbox User
18cbe0a216 update copyright notice 2012-04-25 23:45:46 +00:00
Evan Hunt
bdf5cdc32c increase table size for mutex profiling 2012-04-24 16:52:12 -07:00
Evan Hunt
20d441892d fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 14:56:38 -07:00
Tinderbox User
776833c82e update copyright notice 2012-04-12 23:45:51 +00:00
Mark Andrews
4f3a3fc43c 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS. 
[RT #28956]
 2012-04-13 08:32:37 +10:00
Mark Andrews
a280469e72 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:11:50 +10:00
Tinderbox User
3fb95bfcb2 update copyright notice 2012-04-11 23:45:52 +00:00
Mark Andrews
75582adac7 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563] 
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
 2012-04-11 12:17:57 +10:00
Mark Andrews
72bdc940a7 use hmctx, not mctx when freeing rbtdb->heaps 2012-04-11 10:26:42 +10:00
Mark Andrews
bf6651e27d 3303. [bug] named could die when reloading. [RT #28606] 2012-04-05 15:48:43 +10:00
Mark Andrews
840659f1d7 3302. [bug] dns_dnssec_findmatchingkeys could fail to find 
keys if the zone name contained character that
                        required special mappings. [RT #28600]
 2012-03-30 12:05:13 +11:00
Mark Andrews
56fdf1d401 3300. [bug] Named could die if gssapi was enabled in named.conf 
but was not compiled in. [RT #28338]
 2012-03-29 09:49:58 +11:00
Mark Andrews
85fcd0b9b2 3299. [bug] Make SDB handle errors from database drivers better. 
[RT #28534]
 2012-03-28 10:21:13 +11:00
Mark Andrews
2c642143d4 3298. [bug] Named could dereference a NULL pointer in 
zmgr_start_xfrin_ifquota if the zone was being removed.
                        [RT #28419]
 2012-03-22 12:19:46 +11:00
Mark Andrews
c51f2c9a52 3297. [bug] Named could die on a malformed master file. [RT #28467] 2012-03-15 12:07:49 +11:00
Tinderbox User
5fa46bc916 update copyright notice 2012-03-10 23:45:53 +00:00
Mark Andrews
269c07173e 3295. [bug] Adjust isc_time_secondsastimet range check to be more 
portable. [RT # 26542]
 2012-03-08 15:30:51 +11:00
Mark Andrews
962bf88eec 3294. [bug] isccc/cc.c:table_fromwire failed to free alist on 
error. [RT #28265]
 2012-03-08 14:28:26 +11:00
Evan Hunt
b48c55093b Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2012-03-07 08:18:26 -08:00
Evan Hunt
207845805e set $Id$ 2012-03-07 08:18:20 -08:00
Mark Andrews
28a8f5b0de set $Id$ 2012-03-08 00:21:15 +11:00
Mark Andrews
4c1847ef47 set $Id$ 2012-03-07 22:17:19 +11:00
Mark Andrews
2669638693 set $Id$ 2012-03-07 22:13:11 +11:00
Tinderbox User
ea94d37012 regen master 2012-03-07 01:41:11 +00:00
Evan Hunt
2d7f41d66c Revert "Re-created rt27597a for ongoing DLZ work" 
This reverts commit d731ee9121.
 2012-03-05 15:42:52 -08:00
Evan Hunt
d731ee9121 Re-created rt27597a for ongoing DLZ work 2012-03-05 14:45:30 -08:00
Evan Hunt
632c0f1e91 Revert accidental merge of unfinished DLZ work 2012-03-05 14:44:21 -08:00
Mark Andrews
e214e8728a Merge branches 'rt28261' and 'rt27597' of repo.isc.org:/proj/git/prod/bind9 2012-03-06 00:16:04 +11:00
Mark Andrews
2eae3ad06e Merge remote-tracking branch 'origin/rt28040' 2012-03-05 12:49:28 +11:00
Evan Hunt
e41d5a00bc added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Evan Hunt
954501715d checkpoint: multiple-DLZ functionality 
- multiple DLZ's can be specified, including multiple DLZ's using
   the same driver; e.g., two different back-ends both loaded by the
   dlopen driver
 - new "search" option can be specified in a DLZ indicating whether
   this DLZ database should be searched for unknown zones.  The
   default is "yes".  If "no", then the zone can only be found by
   named if it's registered in the zone table, which happens if the
   zone is configured for dynamic updates, or if "dlz <dlzname>" is
   specified in the zone statement. (The latter functionality is
   incomplete in this commit).
 2012-03-03 22:43:38 -08:00
Automatic Updater
dc3d394636 update copyright notice 2012-02-29 23:47:21 +00:00
Evan Hunt
e5bf06eedc 3291. [port] Fixed a build error on systems without ENOTSUP. 
[RT #28200]
 2012-02-29 21:28:17 +00:00
Automatic Updater
2e00aaef3d update copyright notice 2012-02-28 23:46:59 +00:00
Mark Andrews
a7ab4ad2d4 3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169] 2012-02-28 21:32:36 +00:00
Mark Andrews
96de2db32a dns_zone_synckeyzone 2012-02-23 07:15:24 +00:00
Automatic Updater
3484552b1b update copyright notice 2012-02-23 07:09:29 +00:00
Mark Andrews
1864400107 3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036] 2012-02-23 06:53:15 +00:00
Mark Andrews
8a4689070a dns_message_logpacket 2012-02-22 05:03:39 +00:00
Evan Hunt
89069e6b3a 3286. [bug] Managed key maintenance timer could fail to start 
after 'rndc reconfig'. [RT #26786]
 2012-02-22 00:37:54 +00:00
Mark Andrews
ea79a9bd0e 2x POST(locktype); 2012-02-17 00:18:18 +00:00
Automatic Updater
5fec28507a update copyright notice 2012-02-15 21:19:59 +00:00
Mark Andrews
6d386978b3 3285. [bug] val-frdataset was incorrectly disassociated in 
proveunsecure after calling startfinddlvsep.
                        [RT #27928]
 2012-02-15 20:59:40 +00:00
Mark Andrews
5b57f580ce 3284. [bug] Address race conditions with the handling of 
rbtnode.deadlink. [RT #27738]
 2012-02-15 02:00:47 +00:00
Automatic Updater
d03bc586b9 update copyright notice 2012-02-14 23:47:15 +00:00
Mark Andrews
c478bb4c46 extend: 
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
 2012-02-14 00:22:54 +00:00
Mark Andrews
4c34112a69 3283. [bug] Raw zones with with more than 512 records in a RRset 
failed to load. [RT #27863]
 2012-02-13 23:46:24 +00:00
Automatic Updater
09b46c3945 update copyright notice 2012-02-09 23:47:18 +00:00
Mark Andrews
fb604d1cee 3282. [bug] Restrict the TTL of NS RRset to no more than that 
of the old NS RRset when replacing it. [RT #27792]
 2012-02-09 20:54:46 +00:00
Automatic Updater
da5a7b29e9 update copyright notice 2012-02-07 23:47:24 +00:00
Mark Andrews
936036e823 3281. [bug] SOA refresh queries could be treated as cancelled 
despite succeeding over the loopback interface.
                        [RT #27782]
 2012-02-07 19:50:20 +00:00
Mark Andrews
fc3b3e1f7e 3278. [bug] Hold a internal reference to the zone while performing 
a asynchronous load.  Address potential memory leak
                        if the asynchronous is cancelled. [RT #27750]
 2012-02-07 00:47:21 +00:00
Automatic Updater
2f4561bc9c update copyright notice 2012-02-06 23:46:49 +00:00
Mark Andrews
77cb7130e7 3276. [bug] win32: isc_socket_dup is not implemented. [RT #27696] 
3276.   [bug]           win32: ns_os_openfile failed to return NULL on
                        safe_open failure. [RT #27696]
 2012-02-06 04:19:33 +00:00
Mark Andrews
fb63e9c020 missing return 2012-02-03 12:59:03 +00:00
Mark Andrews
1769b07530 fix memory overun in dns_zone_getincludes, allocated array too small (zero). 
fix possible memory overrun in dns_zone_getincludes
fix inconsistent mxtc use in ns_server_zonestatus
fix missing out of memory errors checks in zone_registerinclude
fix possible use after free issues zone_registerinclude/ns_server_zonestatus
 2012-02-01 21:28:39 +00:00
Mark Andrews
d98850b876 3275. [bug] "use out of scope" bug in unit test master_test. 
[RT# 27674]
 2012-02-01 00:20:09 +00:00
Automatic Updater
41f1164438 update copyright notice 2012-01-31 23:47:33 +00:00
Evan Hunt
2855e27723 3271. [func] New "rndc zonestatus" command prints information 
about the specified zone. [RT #21671]
 2012-01-31 03:35:41 +00:00
Evan Hunt
c54dadd853 3270. [bug] "rndc reload" didn't reuse existing zones correctly 
when inline-signing was in use. [RT #27650]
 2012-01-31 01:13:10 +00:00
Mark Andrews
a86310b25a Add comment describing LIBINTERFACE values per branch 2012-01-30 00:23:27 +00:00
Mark Andrews
63acb91046 make 'when' isc_stdtime_t in set_key_expiry_warning 2012-01-30 00:06:13 +00:00
Evan Hunt
f8ae0a35d0 fixed api typo 2012-01-29 06:05:10 +00:00
Evan Hunt
12c3204c46 prepare for 9.9.0 final 2012-01-29 05:14:07 +00:00
Automatic Updater
80c7083796 update copyright notice 2012-01-27 23:46:59 +00:00
Mark Andrews
bc298cd0f7 3268. [bug] Convert RRSIG expiry times to 64 timestamps to work 
out the earliest expiry time. [RT #23311]
 2012-01-27 01:43:53 +00:00
Mark Andrews
1bb3831e13 3267. [bug] Memory allocation failures could be mis-reported as 
unexpected error.  New ISC_R_UNSET result code.                        [RT #27336]
 2012-01-27 01:21:41 +00:00
Mark Andrews
ef9f4d0977 3266. [bug] The maximum number of NSEC3 iterations for a 
DNSKEY RRset was not being properly computed.
                        [RT #26543]
 2012-01-27 00:49:42 +00:00
Automatic Updater
ee2129ee66 update copyright notice 2012-01-25 23:46:49 +00:00
Mark Andrews
18d208a4a2 3265. [bug] Address lock order reversal with inline-signing 
support. [27557]
 2012-01-25 02:46:53 +00:00
Mark Andrews
639c1d5617 silence 'Assigned value is always the same as the existing value' warning 2012-01-22 04:56:41 +00:00
Evan Hunt
d47f51b6ac add .cvsignore 2012-01-16 23:17:32 +00:00
Automatic Updater
edb4393ef5 update copyright notice 2012-01-10 23:46:58 +00:00
Evan Hunt
9a02019889 3264. [bug] Automatic regeneration of signatures in an 
inline-signing zone could stall when the server
			was restarted. [RT #27344]

3263.	[bug]		"rndc sync" did not affect the unsigned side of an
			inline-signing zone. [RT #27337]
 2012-01-10 18:13:37 +00:00
Automatic Updater
f76bddd50b update copyright notice 2012-01-04 23:46:49 +00:00
Evan Hunt
56c9fcf075 3260. [bug] "rrset-order cyclic" could appear not to rotate 
for some query patterns.  [RT #27170/27185]
 2012-01-04 03:06:51 +00:00
Automatic Updater
a3c7d21f5c update copyright notice 2011-12-22 23:46:20 +00:00
Mark Andrews
41ca314cc2 3260. [bug] "rrset-order cyclic" could appears to not rotate 
for some query patterns.  [RT #27170]
 2011-12-22 23:43:52 +00:00
Evan Hunt
53e58ba9fa oops missed one. 2011-12-22 19:14:15 +00:00
Evan Hunt
891c6eb907 add missing symbols 2011-12-22 18:58:50 +00:00
Evan Hunt
949eefdda4 prep for 9.9.0rc1 release 2011-12-22 17:49:49 +00:00
Mark Andrews
9ddf371552 3257. [bug] Do not generate a error message when calling fsync() 
in a pipe or socket. [RT #27109]
 2011-12-22 08:49:01 +00:00
Mark Andrews
a5a30ae7c0 3253. [bug] Return DNS_R_SYNTAX when the input to a text field is 
too long. [RT #26956]
 2011-12-22 07:41:29 +00:00
Evan Hunt
f30785f506 3252. [bug] When master zones using inline-signing were 
updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]
 2011-12-22 07:32:41 +00:00
Mark Andrews
dd0d54ff01 3251. [bug] Enforce a upper bound (65535 bytes) on the amount of 
memory dns_sdlz_putrr() can allocate per record to
                        prevent run away memory consumption on ISC_R_NOSPACE.
                        [RT #26956]
 2011-12-22 07:15:05 +00:00
Automatic Updater
f63cb76be6 update copyright notice 2011-12-20 23:46:29 +00:00
Mark Andrews
e101ec1503 @srdir@ -> @srcdir@ 2011-12-20 05:04:44 +00:00
Mark Andrews
4a4066453f update slabbed data layout description 2011-12-20 00:55:01 +00:00
Mark Andrews
c31601ae9b add missing s 2011-12-20 00:26:52 +00:00
Mark Andrews
67dc2f0536 3249. [bug] Update log message when saving slave zones files for 
analysis after load failures. [RT #27087]

3248.   [bug]           Configure options --enable-fixed-rrset and
                        --enable-exportlib were incompatible with each
                        other. [RT #27087]

3247.   [bug]           'raw' format zones failed to preserve load order
                        breaking 'fixed' sort order. [RT #27087]

3246.   [bug]           Named failed to start with a empty also-notify list.
                        [RT #27087]
 2011-12-20 00:06:54 +00:00
Mark Andrews
b290d10fc4 3245. [bug] Don't report a error unchanged serials unless there 
were other changes when thawing a zone with
                        ixfr-fromdifferences. [RT #26845]
 2011-12-19 23:46:13 +00:00
Mark Andrews
97494b99f0 remove accidental commit to head 2011-12-10 22:09:41 +00:00
Automatic Updater
339d2a4d4b update copyright notice 2011-12-09 23:47:05 +00:00
Mark Andrews
e238ebd9b3 Backout accident commit to head 2011-12-09 22:09:26 +00:00
Mark Andrews
0b096436e9 flush both raw zone instance if it exists 2011-12-09 20:47:18 +00:00
Mark Andrews
5ccf5eac0f ixfr-from-differences backup file 2011-12-09 13:32:42 +00:00
Automatic Updater
b54ac42f19 update copyright notice 2011-12-08 23:46:49 +00:00
Evan Hunt
b4d8192d21 3241. [func] Extended the header of raw-format master files to 
include the serial number of the zone from which
			they were generated, if different (as in the case
			of inline-signing zones).  This is to be used in
			inline-signing zones, to track changes between the
			unsigned and signed versions of the zone, which may
			have different serial numbers.

			(Note: raw zonefiles generated by this version of
			BIND are no longer compatble with prior versions.
			To generate a backward-compatible raw zonefile
			using dnssec-signzone or named-compilezone, specify
			output format "raw=0" instead of simply "raw".)
			[RT #26587]
 2011-12-08 16:07:22 +00:00
Mark Andrews
e4aac0596c 3241. [bug] Address race conditions in the resolver code. 
[RT #26889]
 2011-12-07 23:08:42 +00:00
Mark Andrews
71e4c3ee74 3240. [bug] DNSKEY state change events could be missed. [RT #26874] 2011-12-07 22:48:22 +00:00
Mark Andrews
04281728d4 3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent 
timestamp. [RT #26883]
 2011-12-07 22:36:25 +00:00
Mark Andrews
9c832595d4 3238. [bug] keyrdata was not being reinitialize in 
lib/dns/rbtdb.c:iszonesecure. [RT#26913]
 2011-12-07 22:21:05 +00:00
Automatic Updater
c757fd2e17 update copyright notice 2011-12-06 23:46:32 +00:00
Automatic Updater
806956b43b update copyright notice 2011-12-05 23:46:35 +00:00
Mark Andrews
05556e6c82 #include <dns/db.h> 2011-12-05 20:51:41 +00:00
Evan Hunt
56d7492b2c missed a line 2011-12-05 17:27:16 +00:00
Evan Hunt
4122abdc3c Back out changes #3182 and #3202 2011-12-05 17:10:51 +00:00
Mark Andrews
2591f13dd3 3235. [func] dns_db_diffx, a extended dns_db_diff which returns 
the generated diff and optionally writes it to a
                        journal. [RT #26386]
 2011-12-05 06:10:07 +00:00
Mark Andrews
de52784e45 3235. [func] dns_db_diffx, a extended dns_db_diff which returns 
the generated diff and optionally writes it to a
                        journal. [RT #26386]
 2011-12-04 23:48:12 +00:00
Automatic Updater
a09e70c947 update copyright notice 2011-12-02 23:46:56 +00:00
Mark Andrews
2c25ca45a4 errno2result now reports caller when unable to convert errno 2011-12-02 07:15:17 +00:00
Mark Andrews
56dc4c6730 3233. [bug] 'rndc freeze/thaw' didn't work for inline zones. 
[RT #26632]
 2011-12-02 02:44:01 +00:00
Mark Andrews
db604cea5c fix all_events loop terminating condition to stop false positives 2011-12-01 22:30:37 +00:00
Scott Mann
d881a5ad06 Accept patch from RedHat (RT #26732). 2011-12-01 15:58:46 +00:00
Mark Andrews
38f6085062 silence Division by zero warning 2011-12-01 01:33:27 +00:00
Scott Mann
5927944728 Fix problem identified by CLANG: local variable not passed back to struct. 2011-12-01 00:14:11 +00:00
Automatic Updater
b9e911c71c update copyright notice 2011-11-30 23:46:25 +00:00
Evan Hunt
1a01def943 add print.h 2011-11-30 06:10:44 +00:00
Mark Andrews
ed74be8035 #include <isc/print.h> 2011-11-30 06:09:41 +00:00
Mark Andrews
5e3daa58f4 move declaration to start of block 2011-11-30 06:06:33 +00:00
Evan Hunt
0da3b4a9a7 3228. [tuning] Dynamically grow symbol table to improve zone 
loading performance. [RT #26523]
 2011-11-30 04:27:17 +00:00
Mark Andrews
cae06bceda 3227. [bug] Interim fix to make WKS's use of getprotobyname() 
and getservbyname() self thread safe. [RT #26232]
 2011-11-30 01:18:11 +00:00
Mark Andrews
23daf8948b 3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed" 
messages. [RT #26507]
 2011-11-29 01:03:47 +00:00
Mark Andrews
03e2b1d18d 3223. [bug] 'task_test privilege_drop' generated false positives. 
[RT #26766]
 2011-11-29 00:41:28 +00:00
Mark Andrews
91ed1cc821 3222. [cleanup] Replace dns_journal_{get,set}_bitws with 
dns_journal_{get,set}_sourceserial. [RT #26634]
 2011-11-28 03:14:59 +00:00
Evan Hunt
69feafa0af 3221. [bug] Fixed a potential coredump on shutdown due to 
referencing fetch context after it's been freed.
			[RT #26720]
 2011-11-23 22:53:53 +00:00
Evan Hunt
08b512b6a0 3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips() 
could fail to set the database version correctly,
                        causing an assertion failure. [RT #26180]
 2011-11-18 18:40:31 +00:00
Mark Andrews
2256c13194 --- 9.9.0b2 released --- 
3219.   [bug]           Disable NOEDNS caching following a timeout.
 2011-11-16 22:18:53 +00:00
Evan Hunt
7c6a1a11fa 3218. [security] Cache lookup could return RRSIG data associated with 
nonexistent records, leading to an assertion
			failure. [RT #26590]
 2011-11-16 09:44:32 +00:00
Evan Hunt
3ab9d6435a 3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478] 2011-11-15 21:44:53 +00:00
Evan Hunt
c79bcf09bf Add clientinfo.h to HEADERS. [RT #26558] 
No CHANGES note.
 2011-11-14 18:32:34 +00:00
Mark Andrews
2a05d28eb1 3211. [bug] rbtdb.c: failed to remove a node from the deadnodes list 
prior to adding a reference to it leading a possible
                        assertion failure. [RT #23219]
 2011-11-08 20:49:11 +00:00
Evan Hunt
d9eebc0849 3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full" 
option prints in single-line-per-record format.
			[RT #20287]
 2011-11-07 23:16:31 +00:00
Mark Andrews
ac43690858 3209. [func] Add "dnssec-lookaside 'off'". [RT #24858] 2011-11-07 00:14:11 +00:00
Automatic Updater
af42579df6 update copyright notice 2011-11-04 23:46:15 +00:00
Evan Hunt
90a354ab36 3204. [bug] When a master server that has been marked as 
unreachable but sends a NOTIFY, mark it reachable
			again. [RT #25960]
 2011-11-04 05:51:02 +00:00
Evan Hunt
25845da41a 3203. [bug] Increase log level to 'info' for validation failures 
from expired or not-yet-valid RRSIGs. [RT #21796]
 2011-11-04 05:36:28 +00:00
Mark Andrews
a5166d5fce 3202. [bug] NOEDNS caching on timeout was too agressive. 
[RT #26416]
 2011-11-04 03:38:44 +00:00
Evan Hunt
1c1879b7ef 3197. [bug] Don't try to log the filename and line number when 
the config parser can't open a file. [RT #22263]
 2011-11-03 05:15:09 +00:00
Evan Hunt
77b8f02d19 3195. [cleanup] Silence "file not found" warnings when loading 
managed-keys zone. [RT #26340]
 2011-11-03 03:26:19 +00:00
Evan Hunt
8281fd83da 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to 
dnssec.h. [RT #26415]
 2011-11-03 02:54:47 +00:00
Automatic Updater
1ab9944f6b update copyright notice 2011-11-02 23:46:24 +00:00
Mark Andrews
146057d7e7 3192. [bug] A query structure could be used after being freed. 
[RT #22208]
 2011-11-02 23:42:33 +00:00
Evan Hunt
7a30c8f783 edited a comment for clarity. 2011-11-02 19:41:02 +00:00
Mark Andrews
fe3472c80b 3191. [bug] Print NULL records using unknown format. [RT #26392] 2011-11-02 01:01:52 +00:00
Automatic Updater
89d1324270 update copyright notice 2011-11-01 23:47:00 +00:00
Mark Andrews
3975f627fe 3190. [bug] Underflow in error handling in isc_mutexblock_init. 
[RT #26397]
 2011-11-01 21:59:56 +00:00
Evan Hunt
5caf26b168 3188. [bug] zone.c:zone_refreshkeys() could fail to detach 
references correctly when errors occurred, causing
			a hang on shutdown. [RT #26372]
 2011-11-01 04:00:45 +00:00
Automatic Updater
53eae9bf3e update copyright notice 2011-10-31 23:46:56 +00:00
Mark Andrews
36e97eb661 3187. [port] win32: support for Visual Studio 2008. [RT #26356] 2011-10-30 23:39:39 +00:00
Evan Hunt
c5023889ac remove debugging printf that was left in by mistake 2011-10-29 00:15:56 +00:00
Mark Andrews
74d7615fc5 9.9.0b1 2011-10-28 13:25:44 +00:00
Mark Andrews
fbf6fa0e62 initialise result 2011-10-28 12:27:06 +00:00
Automatic Updater
98a7e53914 update copyright notice 2011-10-28 12:20:31 +00:00
Mark Andrews
7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Evan Hunt
9c03f13e18 3185. [func] New 'rndc signing' option for auto-dnssec zones: 
- 'rndc signing -list' displays the current
			   state of signing operations
			 - 'rndc signing -clear' clears the signing state
		  	   records for keys that have fully signed the zone
			 - 'rndc signing -nsec3param' sets the NSEC3
			   parameters for the zone
			The 'rndc keydone' syntax is removed. [RT #23729]
 2011-10-28 06:20:07 +00:00
Mark Andrews
f7dfd53301 style, remove redudant assignment 2011-10-28 04:57:34 +00:00
Mark Andrews
cd22c3e4e4 3184. [bug] named had cpu usage when a redirect zone was 
configured. [RT #26013]
 2011-10-28 00:36:54 +00:00
Automatic Updater
96f5a19c12 update copyright notice 2011-10-27 23:46:31 +00:00
Mark Andrews
2969f16b07 move declarations to start of block 2011-10-27 22:23:58 +00:00
Scott Mann
b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Automatic Updater
8826a72394 update copyright notice 2011-10-26 23:46:15 +00:00
Mark Andrews
24ef32426d 3181. [func] Inline-signing is now supported for master zones. 
[RT #26224]
 2011-10-26 20:56:45 +00:00
Automatic Updater
329eb05c12 update copyright notice 2011-10-25 23:46:58 +00:00
Mark Andrews
0f21945e27 remove unused variable 2011-10-25 04:38:14 +00:00
Mark Andrews
b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that 
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
 2011-10-25 01:54:22 +00:00
Automatic Updater
64691d525b update copyright notice 2011-10-24 23:46:14 +00:00
Michael Graff
522222cf93 Correctly invalidate the sha2/hmac2 contexts. This was already done in practice, but this makes it zero out the whole structure rather than just the first 4 bytes + the key. sha2.c did not always zero out the full sha2 state in invalidate, but will now. 2011-10-24 22:51:29 +00:00
Automatic Updater
dfc015bc7e update copyright notice 2011-10-20 23:46:51 +00:00
Mark Andrews
ada40193c8 3175. [bug] Fix how DNSSEC positive wildcard responses from a 
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
 2011-10-20 21:42:11 +00:00
Mark Andrews
1946c596b4 3174. [bug] Always compute to revoked key tag from scratch. 
[RT #24711]
 2011-10-20 21:20:02 +00:00
Mark Andrews
37e6ff3f49 initalize set_lock 2011-10-18 02:00:56 +00:00
Mark Andrews
020c4484fe 3173. [port] Correctly validate root DS responses. [RT #25726] 2011-10-15 05:00:15 +00:00
Mark Andrews
3feb38c1f1 9.9.0a3 2011-10-14 01:12:28 +00:00
Automatic Updater
304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Mark Andrews
63b6eac79c handle unchecked assignment 2011-10-13 13:13:52 +00:00
Mark Andrews
e236b52ce0 #include <stdlib.h> 2011-10-13 07:56:32 +00:00
Vernon Schryver
9fee08f655 Commit rt25172 changes to HEAD including 
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
 2011-10-13 01:32:34 +00:00
Automatic Updater
ea68e8eba9 update copyright notice 2011-10-12 23:46:34 +00:00
Mark Andrews
af850c4120 3168. [bug] Nxdomain redirection could trigger a assert with 
a ANY query. [RT #26017]
 2011-10-12 23:09:35 +00:00
Mark Andrews
5258355c8d silence ccc-analyzer (clang) warnings 2011-10-12 02:17:53 +00:00
Mark Andrews
dc2e627239 3167. [bug] Negative answers from forwarders were not being 
correctly tagged making them appear to not be cached.
                        [RT #25380]
 2011-10-12 00:18:11 +00:00
Mark Andrews
02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Automatic Updater
0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Mark Andrews
bdcd748874 add null methods 2011-10-11 13:33:45 +00:00
Mark Andrews
4f803dd91d add #include "config.h" 2011-10-11 00:25:12 +00:00
Evan Hunt
793814f807 3164. [func] Enable DLZ modules to retrieve client information, 
so that responses can be changed depending on the
			source address of the query. [RT #25768]
 2011-10-11 00:09:03 +00:00
Evan Hunt
b2086d798b 3163. [bug] Use finer-grained locking in client.c to address 
concurrency problems with large numbers of threads.
			[RT #26044]
 2011-10-10 22:57:14 +00:00
Mark Andrews
079e4a3d87 isc_app_start needs to be called earlier to ensure that signal handlers are setup before any threads are created 2011-10-10 02:46:16 +00:00
Mark Andrews
2cc56f582c 3161. [bug] zone.c:del_sigs failed to always reset rdata leading 
assertion failures. [RT #25880]
 2011-10-07 02:55:04 +00:00
Mark Andrews
fce049a50f CHANGES 2011-10-05 03:47:59 +00:00
Mark Andrews
56e465314e 9.9.0a2 2011-09-13 22:07:58 +00:00
Evan Hunt
84f0bd3bc7 3154. [bug] Attempting to print an empty rdataset could trigger 
an assert. [RT #25452]
 2011-09-07 19:11:14 +00:00
Mark Andrews
2dbe31b3fd data and function pointers are not interchangable 2011-09-07 00:50:06 +00:00
Scott Mann
fad5116b3d Remove the ixfr-from-differences side-effect which causes an AXFR and extend 
request-ixfr to the zone level.
 2011-09-06 22:29:33 +00:00
Evan Hunt
76a7d4e152 3152. [cleanup] Some versions of gcc and clang failed due to 
incorrect use of __builtin_expect. [RT #25183]
 2011-09-05 18:00:22 +00:00
Evan Hunt
32016d7a9e made doneloading() static, removed unnecessary startloading() prototype 2011-09-05 06:27:05 +00:00
Evan Hunt
cee9d6dc42 fixed a compiler warning due to prototype mismatch between doneloading() 
and dns_zt_zoneloaded_t
 2011-09-05 03:45:22 +00:00
Evan Hunt
a4668bac4e silence compiler warning 2011-09-03 19:53:15 +00:00
Evan Hunt
6e4fa2e24d include time.h to silence a compiler warning 2011-09-03 19:22:43 +00:00
Evan Hunt
fd6a83869a silence compiler warning 2011-09-03 16:27:51 +00:00
Evan Hunt
fa8427aa63 silence compiler warnings 2011-09-03 16:15:08 +00:00
Mark Andrews
15c8cf556d make push_readyq prototype and declaration consistant 2011-09-03 13:54:06 +00:00
Evan Hunt
98c79a7059 silence compiler warning 2011-09-03 06:13:30 +00:00
Evan Hunt
ac7109d68e oops, build was failing with threads disabled 2011-09-03 00:24:27 +00:00
Automatic Updater
ca894e53b5 update copyright notice 2011-09-02 23:46:33 +00:00
Evan Hunt
8a2ab2b920 3150. [func] Improved startup and reconfiguration time by 
enabling zones to load in multiple threads. [RT #25333]
 2011-09-02 21:15:39 +00:00
Mark Andrews
2c35c68236 3148. [bug] Processing of normal queries could be stalled when 
forwarding a UPDATE message. [RT #24711]
 2011-08-31 06:49:10 +00:00
Automatic Updater
4e68c7c87c update copyright notice 2011-08-30 23:46:53 +00:00
Mark Andrews
81bbd645c7 dns_view_issecuredomain: check that view->secroots_priv is non NULL before calling dns_keytable_issecuredomaiani otherwise return ISC_R_NOTFOUND 2011-08-30 21:14:50 +00:00
Mark Andrews
be239f6147 silence clang warnings 2011-08-30 14:01:53 +00:00
Mark Andrews
0075be5f32 remove unused variables 2011-08-30 13:45:16 +00:00
Mark Andrews
49f385a7ad include dns/diff.h 2011-08-30 13:02:39 +00:00
Mark Andrews
9198ab377b 3147. [func] Initial inline signing support. [RT #23657] 2011-08-30 05:16:15 +00:00
Mark Andrews
2ec0852e91 POST(port); POST(addr); 2011-08-30 00:18:43 +00:00
Automatic Updater
d0dce4d839 update copyright notice 2011-08-29 23:46:44 +00:00
Mark Andrews
d64e3b29bd check that the result of dns_dbiterator_current is ISC_R_SUCCESS or DNS_R_NEWORIGIN 2011-08-29 23:44:07 +00:00
Mark Andrews
6ba6ff39c0 check the results of dns_name_toprincipal calls, only use gnamebuf.value when valid 2011-08-29 06:33:25 +00:00
Mark Andrews
04ec1e31bf *++tp = 0; -> tp++; *tp = 0; 2011-08-29 05:58:31 +00:00
Mark Andrews
07a4f0eace POST(p); POST(len); 2011-08-29 04:15:50 +00:00
Mark Andrews
106561b398 INSIST(response); 2011-08-29 04:02:54 +00:00
Mark Andrews
069182809a remove unnecessary assignment to found_ttl 2011-08-26 05:29:48 +00:00
Mark Andrews
e1cf6fd20a DNS_R_NEWORIGIN could be accidently returned, clearnode's result was being ignored 2011-08-26 05:12:56 +00:00
Mark Andrews
e1d7ec063f mctx is nolonger required 2011-08-26 04:49:14 +00:00
Mark Andrews
4c11a79320 silence 'is never read' warnings 2011-08-26 04:42:24 +00:00
Mark Andrews
84e7c0efbf remove isc_os_minprivs call accidently committed 2011-08-25 11:37:13 +00:00
Mark Andrews
32f5f15b58 cltfd is only needed when select is being used 2011-08-25 08:17:54 +00:00
Mark Andrews
f4a4f6945e silence 'Dereference of undefined pointer value' by assigning to 'sorted' sequentially from zero 2011-08-25 06:28:11 +00:00
Mark Andrews
f67bcc9dc6 save the result of is_response(msg) so it can be treated as a invariant by clang 2011-08-25 06:20:07 +00:00
Mark Andrews
8f1c29d73f silence null pointer dereference warning by adding INSIST(sibling != NULL); 2011-08-25 05:56:50 +00:00
Mark Andrews
b62c2acf81 add method for isc_socket_getfd 2011-08-24 23:17:52 +00:00
Automatic Updater
5e965459a6 update copyright notice 2011-08-23 23:54:00 +00:00
Evan Hunt
6c18c134c8 add isc_socket_getfd() on win32 side 2011-08-23 18:24:33 +00:00
Evan Hunt
6986290f4e address win32 compile/link problems 2011-08-23 17:02:53 +00:00
Mark Andrews
e7008e7007 #include <stdlib.h> 2011-08-23 03:43:03 +00:00
Evan Hunt
e4c4cf5177 Prepare for release of 9.9.0a1 2011-08-23 02:06:46 +00:00
Evan Hunt
99cbc3d3a4 3145. [test] Capture output of ATF unit tests in "./atf.out" if 
there were any errors while running them. [RT #25527]
 2011-08-23 01:29:39 +00:00
Evan Hunt
5a75f61dd4 3144. [bug] dns_dbiterator_seek() could trigger an assert when 
used with a nonexistent database node. [RT #25358]
 2011-08-23 00:59:23 +00:00
Automatic Updater
d5c0739351 update copyright notice 2011-08-18 23:46:35 +00:00
Mark Andrews
0226bd69cd cast to unsigned 2011-08-18 17:41:54 +00:00
Mark Andrews
ecf809f959 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 06:00:07 +00:00
Mark Andrews
3a63259484 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 04:52:35 +00:00
Automatic Updater
4b21b35cff update copyright notice 2011-08-16 23:46:36 +00:00
Mark Andrews
0f97264419 3142. [bug] NAPTR is class agnostic. [RT #25429] 2011-08-16 00:02:38 +00:00
Automatic Updater
826f2233c9 update copyright notice 2011-08-09 23:46:39 +00:00
Francis Dupont
f558c8988e spelling 2011-08-09 10:29:23 +00:00
Mark Andrews
772dfb90be 3141. [bug] Silence spurious "zone serial (0) unchanged" messages 
associated with empty zones. [RT #25079]
 2011-08-09 02:24:28 +00:00
Automatic Updater
adbc177194 update copyright notice 2011-08-02 23:47:52 +00:00
Evan Hunt
0127993480 3140. [func] New command "rndc flushtree <name>" clears the 
specified name from the server cache along with
			all names under it. [RT #19970]
 2011-08-02 20:36:13 +00:00
Automatic Updater
f71ddcf65f update copyright notice 2011-07-29 23:47:52 +00:00
Automatic Updater
2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Curtis Blackburn
b068144e89 Actually adding the hash_test.c file... oops 2011-07-28 23:40:09 +00:00
Curtis Blackburn
8787b357e6 3139.[test]added tests from RFC6234, RFC2202, and RFC1321 for the 2011-07-28 21:05:09 +00:00
Mark Andrews
ea30861fe5 turn isc_socket_dup into a method 2011-07-28 11:42:41 +00:00
Mark Andrews
31f46f1869 3138. [bug] Address memory leaks and out-of-order operations when 
shutting named down. [RT #25210]
 2011-07-28 04:27:27 +00:00
Evan Hunt
f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple 
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
 2011-07-28 04:04:37 +00:00
Automatic Updater
c33e22f65a update copyright notice 2011-07-21 23:47:53 +00:00
Mark Andrews
7a4d2ccb62 s/fallbackas/fallback as/ 2011-07-21 06:26:09 +00:00
Mark Andrews
6fab2f80c9 3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing. 
See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
                        [RT #24950]
 2011-07-21 01:40:50 +00:00
Curtis Blackburn
7439c4f402 removed #include <stdlib.h> from lib/dns/zone.c 2011-07-20 16:28:28 +00:00
Curtis Blackburn
6fc85cd749 added #include <stdlib.h> to lib/dns/zone.c 2011-07-20 14:28:24 +00:00
Automatic Updater
de6d0a4a36 update copyright notice 2011-07-08 23:47:54 +00:00
Evan Hunt
b47c020d5c 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:43:26 +00:00
Automatic Updater
2a36d8ca40 update copyright notice 2011-07-07 23:47:50 +00:00
Evan Hunt
67be612120 *** empty log message *** 2011-07-06 18:13:22 +00:00
Evan Hunt
29f6e3e4f9 update cvsignore 2011-07-06 18:12:25 +00:00
Evan Hunt
2a749b3535 oops, missed updating the signature of dns_test_begin() when I merged 
update_test.c
 2011-07-06 18:11:35 +00:00
Evan Hunt
c46ce2d79b 3131. [func] Improve scalability by allocating one zone task 
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
 2011-07-06 05:05:52 +00:00
Evan Hunt
42cf2ff7ba 3131. [func] Improve scalability by allocating one zone task 
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
 2011-07-06 01:36:32 +00:00
Automatic Updater
122230159d update copyright notice 2011-07-01 23:47:44 +00:00
Evan Hunt
d3b9eefd1c 3130. [func] Support alternate methods for managing a dynamic 
zone's serial number. Two methods are currently
			defined using serial-update-method, "increment"
			(default) and "unixtime". [RT #23849]
 2011-07-01 07:15:19 +00:00
Mark Andrews
a69070d8fa 3130. [func] Support alternate methods for managing a dynamic 
zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]
 2011-07-01 02:25:48 +00:00
Automatic Updater
313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Mark Andrews
b4eaa17e82 update for api changes 2011-06-17 07:28:33 +00:00
Evan Hunt
e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when 
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
 2011-06-17 07:05:02 +00:00
Automatic Updater
0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt
79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an 
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
 2011-06-10 01:51:09 +00:00
Evan Hunt
5e3affc6a0 3127. [bug] 'rndc thaw' will now remove a zone's journal file 
if the zone serial number has been changed and
			ixfr-from-differences is not in use.  [RT #24687]
 2011-06-10 01:32:38 +00:00
Evan Hunt
6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate 
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
 2011-06-08 22:13:51 +00:00
Automatic Updater
6406d6507a update copyright notice 2011-05-26 23:47:28 +00:00
Evan Hunt
fbe2cff19f 3121. [security] An authoritative name server sending a negative 
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
 2011-05-26 23:11:15 +00:00
Mark Andrews
4100ae5109 move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build 2011-05-26 07:56:39 +00:00
Mark Andrews
ea82782532 3120. [bug] Named could fail to validate zones list in a DLV 
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
 2011-05-26 04:35:02 +00:00
Evan Hunt
0245f7725c 3118. [bug] When rolling to a new DNSSEC key, a private-type 
record could be created and never marked complete.
			[RT #23253]
 2011-05-26 04:25:47 +00:00
Evan Hunt
bfe32d08c5 3116. [func] New 'dnssec-update-mode' option controls updates 
of DNSSEC records in signed dynamic zones.  Set to
			'no-resign' to disable automatic RRSIG regeneration
			while retaining the ability to sign new or changed
			data. [RT #24533]
 2011-05-23 20:10:03 +00:00
Automatic Updater
b1b37b61da update copyright notice 2011-05-19 23:47:17 +00:00
Evan Hunt
ff330a6273 another post-commit fix for change 3114: call dns_db_resigned()/ 
dns_db_setsigningtime() only when incrementally resigning, not other
times.
 2011-05-19 21:29:07 +00:00
Evan Hunt
276f9fac3e another post-commit bugfix for change 3114: need to take rndc freeze into 
account in determining whether zone is dynamic
 2011-05-19 04:44:58 +00:00
Evan Hunt
d9343d917a minor code simplification 2011-05-19 04:33:17 +00:00
Evan Hunt
2a4f494565 Change 3114 wasn't complete--needed to remove another call to 
dns_db_resigned().
 2011-05-19 04:28:33 +00:00
Scott Mann
a50ce0f80b Fix for RT #23136 task 1. 2011-05-19 00:31:57 +00:00
Evan Hunt
ab77e813ea add dns_dnssec_signs 2011-05-17 01:48:24 +00:00
Automatic Updater
687d47f6c9 update copyright notice 2011-05-16 23:47:41 +00:00
Evan Hunt
5c8ec4d5ea "make install" was failing when building with both exportlibs and libtool. 
(trivial makefile fix, no CHANGES note.) [RT #24425]
 2011-05-16 22:58:05 +00:00
Evan Hunt
de7df3e56f 3111. [bug] Improved consistency checks for dnssec-enable and 
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
 2011-05-07 05:55:17 +00:00
Automatic Updater
40717638fa update copyright notice 2011-05-06 23:47:29 +00:00
Evan Hunt
ac21f918f2 3109. [func] The also-notify option now uses the same syntax 
as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]
 2011-05-06 21:23:51 +00:00
Evan Hunt
485522d7e1 3108. [cleanup] dnssec-signzone: Clarified some error and 
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
			code (use -P instead). [RT #20852]

3107.	[bug]		dnssec-signzone: Report the correct number of ZSKs
			when using -x. [RT #20852]
 2011-05-06 21:08:33 +00:00
Evan Hunt
989fb50178 fixed an error in prior commit 2011-05-05 18:04:01 +00:00
Evan Hunt
d454a60f56 3103. [bug] Configuring 'dnssec-validation auto' in a view 
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
 2011-05-05 16:13:35 +00:00
Automatic Updater
54968ae88e update copyright notice 2011-04-29 23:47:18 +00:00
Evan Hunt
39f2d1a96a 3102. [func] New 'dnssec-loadkeys-interval' option configures 
how often, in minutes, to check the key repository
			for updates when using automatic key maintenance.
			Default is every 60 minutes (formerly hard-coded
			to 12 hours). [RT #23744]

3101.	[bug]		Zones using automatic key maintenance could fail
			to check the key repository for updates. [RT #23744]
 2011-04-29 21:37:15 +00:00
Mark Andrews
1b9a5fa77f isc_file_isplainfile 2011-04-08 05:36:15 +00:00
Mark Andrews
53c1e5f991 dns_cache_create3 2011-04-08 04:45:03 +00:00
Mark Andrews
2b3bcbce23 3096. [bug] Set KRB5_KTNAME before calling log_cred() in 
dst_gssapi_acceptctx(). [RT #24004]
 2011-04-07 23:03:22 +00:00
Mark Andrews
9cf04a12ec 3095. [bug] Handle isolated reserved ports in the port range. 
[RT #23957]
 2011-04-06 10:27:16 +00:00
Mark Andrews
6b89a2c905 format portability: cast socklen_t -> long and use %ld 2011-04-05 06:33:50 +00:00
Mark Andrews
60821a4c33 1 -> 1U 2011-04-04 11:09:11 +00:00
Mark Andrews
64abedd85a unsigned constants 2011-03-28 05:32:16 +00:00
Mark Andrews
fade3b5f91 unsigned constants 2011-03-28 05:20:08 +00:00
Mark Andrews
d97637ce11 unsigned constants 2011-03-28 03:41:55 +00:00
Evan Hunt
319b8a1488 3092. [bug] Signatures for records at the zone apex could go 
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
 2011-03-25 23:53:02 +00:00
Automatic Updater
6333ba02a5 update copyright notice 2011-03-21 23:47:21 +00:00
Evan Hunt
0994d3a21b 3087. [bug] DDNS updates using SIG(0) with update-policy match 
type "external" could cause a crash. [RT #23735]
 2011-03-21 19:54:03 +00:00
Evan Hunt
1063914c30 Fixed some problems from change #3084 that turned up after committing it; 
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
 2011-03-21 18:38:40 +00:00
Evan Hunt
7cb226ec34 3084. [func] A new command "rndc sync" dumps pending changes in 
a dynamic zone to disk; "rndc sync -clean" also
			removes the journal file after syncing.  Also,
			"rndc freeze" no longer removes journal files.
			[RT #22473]
 2011-03-21 07:22:14 +00:00
Mark Andrews
5095e72ac3 3083. [bug] NOTIFY messages were not being sent when generating 
a NSEC3 chain incrementally. [RT #23702]
 2011-03-21 01:02:39 +00:00
Mark Andrews
b76715a02f Use UINT_MAX to initialise split_width (unsigned int) instead of -1. 2011-03-20 02:31:54 +00:00
Automatic Updater
7885190562 update copyright notice 2011-03-18 23:47:36 +00:00
Francis Dupont
d99d0c19b2 introduce STDTIME_ON_32BITS 2011-03-18 09:00:45 +00:00
Automatic Updater
207cee019e update copyright notice 2011-03-17 23:47:30 +00:00
Francis Dupont
50f64cf0e5 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:25:54 +00:00
Mark Andrews
ed53ec0b06 3077. [bug] zone.c:zone_refreshkeys() incorrectly called 
dns_zone_attach(), use zone->irefs instead. [RT #23303]
 2011-03-17 05:21:50 +00:00
Evan Hunt
61bcc23203 3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and 
dnssec-keyfromlabel sets the default TTL of the
			key.  When possible, automatic signing will use that
			TTL when the key is published.  [RT #23304]
 2011-03-17 01:40:40 +00:00
Mark Andrews
0e095727ff 3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant 
timestamp when determining which keys are active.
                        [RT #23642]
 2011-03-17 01:17:21 +00:00
Francis Dupont
0a25550b46 remove extra space 2011-03-14 13:40:52 +00:00
Francis Dupont
52c3f66536 isc_mutex_destroy() returns a value 2011-03-14 13:39:17 +00:00
Mark Andrews
26b49e8459 3074. [bug] Make the adb cache read through for zone data and 
glue learn for zone named is authoritative for.
                        [RT #22842]
 2011-03-13 02:49:28 +00:00
Automatic Updater
c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Evan Hunt
f563fcf124 Forgot to initialize a fixedname, which made it a brokenname. 2011-03-11 17:19:05 +00:00
Mark Andrews
2415f36f79 3073. [bug] managed-keys changes were not properly being recorded. 
[RT #20256]
 2011-03-11 13:20:43 +00:00
Mark Andrews
cf4ceeee5f 3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference. 
[RT #20256]
 2011-03-11 13:02:33 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Mark Andrews
8473cd921e pkey is only used if USE_ENGINE is defined or USE_EVP is 1 2011-03-11 02:59:37 +00:00
Evan Hunt
a7acfb05df Reversing prior change, turns out not to be legal on all compilers. 2011-03-11 01:28:10 +00:00
Evan Hunt
f2f2d20990 Silence a compiler warning by using #if comparison instead of if. No 
CHANGES note because it's trivial. [RT #23587]
 2011-03-11 01:20:39 +00:00
Mark Andrews
19f4b069dc 3068. [bug] Named failed to build with a OpenSSL without engine 
support. [RT #23473]
 2011-03-11 01:11:54 +00:00
Evan Hunt
422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default, 
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
 2011-03-10 04:36:16 +00:00
Automatic Updater
50d79c1309 update copyright notice 2011-03-09 23:47:17 +00:00
Mark Andrews
215ef83bbe 3065. [bug] RRSIG could have time stamps too far in the future. 
[RT #23356]
 2011-03-09 07:22:32 +00:00
Mark Andrews
345d37dbb6 add 'sync' to ISC_PLATFORM_USEMACASM build as well 2011-03-08 00:52:42 +00:00
Automatic Updater
5eee264bfa update copyright notice 2011-03-07 23:47:37 +00:00
Mark Andrews
4b583f0193 only reset first in multi-line mode 2011-03-07 13:42:11 +00:00
Mark Andrews
fea04b0ffe 3064. [bug] powerpc: add sync instructions to the end of atomic 
operations. [RT #23469]
 2011-03-07 00:17:08 +00:00
Automatic Updater
0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7 3062. [func] Made several changes to enhance human readability 
of DNSSEC data in dig output and in generated
			zone files:
			 - DNSKEY record comments are more verbose, no
			   longer used in multiline mode only
			 - multiline RRSIG records reformatted
			 - multiline output mode for NSEC3PARAM records
			 - "dig +norrcomments" suppresses DNSKEY comments
			 - "dig +split=X" breaks hex/base64 records into
			   fields of width X; "dig +nosplit" disables this.
			[RT #22820]
 2011-03-05 19:39:07 +00:00
Automatic Updater
26a7306397 update copyright notice 2011-03-04 23:47:47 +00:00
Francis Dupont
13d1b15b18 export dns_ncache_current and dns_resolver_settimeout 2011-03-04 21:36:51 +00:00
Scott Mann
32babe43eb Ensure that log files are plain files. (RT #22771) 2011-03-04 14:07:03 +00:00
Automatic Updater
7d9d170dbb update copyright notice 2011-03-03 23:47:32 +00:00
Francis Dupont
9fe8cca065 add URI support 2011-03-03 14:10:27 +00:00
Evan Hunt
70c7f4fb4f 3053. [bug] Under a sustained high query load with a finite 
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
 2011-03-03 04:42:25 +00:00
Mark Andrews
c1ced49662 3051. [bug] NS records obsure DS records at the bottom of the 
zone if both are present. [RT #23035]
 2011-03-02 04:20:34 +00:00
Automatic Updater
c8175ece69 update copyright notice 2011-03-01 23:48:07 +00:00
Mark Andrews
4c05f9a6a3 3048. [bug] Fully seperate view key mangement. [RT #23419] 2011-03-01 22:44:04 +00:00
Scott Mann
d31740ce28 Fixed DNSKEY NODATA responses not cached (RT #22908). 2011-03-01 14:40:39 +00:00
Francis Dupont
664917beda Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:21:35 +00:00
Mark Andrews
d3e3d7846d 3044. [bug] Hold the socket manager lock while freeing the socket. 
[RT #23333]
 2011-02-28 12:48:30 +00:00
Evan Hunt
ef421f66f4 3043. [test] Merged in the NetBSD ATF test framework (currently 
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
 2011-02-26 02:26:33 +00:00
Automatic Updater
45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00
Mark Andrews
0e507dbb81 2039. [func] Redirect on NXDOMAIN support. [RT #23146] 2011-02-23 03:08:11 +00:00
Mark Andrews
fd5d7b4b1c 2038. [bug] Install <dns/rpz.h>. [RT #23342] 2011-02-22 11:48:02 +00:00
Mark Andrews
b795de862b 2036. [bug] Check built-in zone arguments to see if the zone 
is re-usable or not. [RT #21914]
 2011-02-22 04:14:30 +00:00
Automatic Updater
b01d422daf update copyright notice 2011-02-21 23:47:45 +00:00
Mark Andrews
4b45a8fc5a handle cname response 2011-02-21 23:37:31 +00:00
Mark Andrews
17c98e7add 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET). 
[RT #22521]
 2011-02-21 07:08:33 +00:00
Mark Andrews
699e00089f 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:01:09 +00:00
Mark Andrews
6883a918f7 3031. [bug] dns_rdataclass_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:50:42 +00:00
Mark Andrews
e01f55daa4 3030. [bug] dns_rdatatype_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:41:07 +00:00
Mark Andrews
4c577cbd1e 3029. [bug] isc_netaddr_format() handle a zero sized buffer. 
[RT #22521]
 2011-02-21 06:30:06 +00:00
Mark Andrews
0b8c40c8d8 CHANGES 2011-02-21 06:18:03 +00:00
Mark Andrews
30aaec2122 3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to 
catch NULL pointer dereferences before they happen.
                        [RT #22521]
 2011-02-21 06:07:49 +00:00
Mark Andrews
17a0bbda33 3026. [bug] lib/isc/httpd.c: check that we have enough space 
after calling grow_headerspace() and if not
                        re-call grow_headerspace() until we do. [RT #22521]
 2011-02-21 05:55:09 +00:00
Automatic Updater
d5a3595af8 update copyright notice 2011-02-19 23:47:38 +00:00
Evan Hunt
b0c8948e37 Fixed incorrect library link order in libisccc and libisccfg 2011-02-19 01:30:52 +00:00
Evan Hunt
63b1c80af8 Fixed an error in change 3023, ensuring that journal file isn't 
removed after IXFR.  No CHANGES note.
 2011-02-19 01:24:46 +00:00
Automatic Updater
10aafc5aa3 update copyright notice 2011-02-18 23:47:25 +00:00
Michael Graff
b7f0ab323d catch two unused function params, followup to RT#23310 2011-02-18 23:39:55 +00:00
Evan Hunt
b32e391602 3025. [bug] Fixed a possible deadlock due to zone resigning. 
[RT #22964]
 2011-02-18 23:26:44 +00:00
Michael Graff
52d44117c8 Remove RTT banding [RT 23310] 2011-02-18 22:55:31 +00:00
Evan Hunt
1d5981dd3f 3023. [bug] Named could be left in an inconsistent state when 
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
 2011-02-18 21:22:12 +00:00
Mark Andrews
9e4359b42e silence: warning: 'manager_log' defined but not used 2011-02-18 04:19:05 +00:00
Automatic Updater
6885ca3220 update copyright notice 2011-02-17 23:47:24 +00:00
Mark Andrews
293e500697 simplify zone_signwithkey call 2011-02-17 04:57:28 +00:00
Mark Andrews
19afa17960 ensure that the DNSKEY rrset get re-signed even if it hasn't been 
updated in sign_apex.
 2011-02-17 02:57:22 +00:00
Automatic Updater
c41b2924a5 update copyright notice 2011-02-15 23:47:36 +00:00
Mark Andrews
b1b42b03b7 3020. [bug] auto-dnssec failed to correctly update the zone when changing the DNSKEY RRset. [RT #23232] 2011-02-15 22:02:36 +00:00
Francis Dupont
931814de4a typo in comment 2011-02-15 18:23:34 +00:00
Mark Andrews
462a97981f CHANGES 2011-02-07 00:10:36 +00:00
Automatic Updater
784a904bd0 update copyright notice 2011-02-03 12:18:12 +00:00
Mark Andrews
a8e5a59183 3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and 
IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
 2011-02-03 08:13:51 +00:00
Mark Andrews
c1ee8bb4ba 3013. [bug] The DNS64 ttl was not always being set as expected. 
[RT #23034]
 2011-02-03 07:35:56 +00:00
Mark Andrews
000a8970f8 3011. [func] Change the default query timeout from 30 seconds 
to 10.  Allow setting this in named.conf using the new
                        'resolver-query-timeout' option, which specifies a max
                        time in seconds.  0 means 'default' and anything longer
                        than 30 will be silently set to 30. [RT #22852]
 2011-02-03 05:41:55 +00:00
Evan Hunt
903b3c84e2 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer 
for refreshing managed-keys. [RT #22296]
 2011-02-03 00:21:55 +00:00
Automatic Updater
b720af4cd4 update copyright notice 2011-01-27 23:47:21 +00:00
Mark Andrews
1fba20bd0b 3009. [bug] clients-per-query code didn't work as expected with 
particular query patterns. [RT #22972]
 2011-01-27 02:24:49 +00:00
Automatic Updater
c674aacfd6 update copyright notice 2011-01-19 23:47:12 +00:00
Mark Andrews
f862994cbd explicitly initialise dump and restore 2011-01-19 03:09:14 +00:00
Mark Andrews
ee931bc7a3 silence warning: integer overflow detected: op "<<" 2011-01-17 04:27:23 +00:00
Automatic Updater
a09fff7051 update copyright notice 2011-01-14 00:51:43 +00:00
Mark Andrews
2c18cb2e9a explicit initialisation 2011-01-14 00:33:32 +00:00
Mark Andrews
481ebd6977 rpz require -DBIND9 2011-01-13 09:53:04 +00:00
Mark Andrews
17acd2a230 remove -I "../..../lib/dns/sec/openssl/include" 2011-01-13 08:56:45 +00:00
Automatic Updater
2352050890 update copyright notice 2011-01-13 08:50:29 +00:00
Mark Andrews
50fd8587a7 extra external symbols 2011-01-13 08:29:08 +00:00
Mark Andrews
6767b5b544 openssl include path 2011-01-13 08:15:30 +00:00
Mark Andrews
0a24e3a8ae openssl include path 2011-01-13 07:51:06 +00:00
Mark Andrews
000439ae98 isc_netaddr_getzone 2011-01-13 07:20:14 +00:00
Mark Andrews
9e78a55d81 opensslgost_link.c 2011-01-13 07:12:14 +00:00
Mark Andrews
23784a729d dst_key_restory -> dst_key_restore 2011-01-13 07:06:50 +00:00
Mark Andrews
559b51e980 only look for sys/socket.h if we also have sys/un.h 2011-01-13 07:05:57 +00:00
Mark Andrews
93b81c6d0a explicit conversion from unsigned long to dns_rpz_cidr_bits_t 2011-01-13 06:48:14 +00:00
Mark Andrews
68f6e45d28 uint8_t -> unsigned char 2011-01-13 06:41:05 +00:00
Mark Andrews
c3e9221f3b prototype mismatch 2011-01-13 06:36:04 +00:00
Mark Andrews
119f627c82 uint32_t -> isc_uint32_t 2011-01-13 06:29:16 +00:00
Mark Andrews
98455e2090 missing semi-colon 2011-01-13 06:21:15 +00:00
Automatic Updater
9cee5bb028 update copyright notice 2011-01-13 04:59:26 +00:00
Mark Andrews
e02c1d738b 9.8.0b1 2011-01-13 04:45:17 +00:00
Mark Andrews
a3eb8b33ec unsigned constants 2011-01-13 04:20:03 +00:00
Mark Andrews
6eba31815a #include <isc/print.h> 2011-01-13 03:03:31 +00:00
Mark Andrews
87708bde16 3008. [func] Response policy zones (RPZ) support. [RT #21726] 2011-01-13 01:59:28 +00:00
Mark Andrews
38b84a1fcf 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 00:55:49 +00:00
Automatic Updater
135bcc2e42 update copyright notice 2011-01-11 23:47:14 +00:00
Mark Andrews
adccda3b4c &dstkey -> dstkey 2011-01-10 07:38:22 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved 
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
 2011-01-10 05:32:04 +00:00
Mark Andrews
1403f9aa2f don't free memory passed to putenv(), use malloc and check for malloc failures 2011-01-10 03:49:49 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd 3005. [port] Solaris: Work around the lack of 
gsskrb5_register_acceptor_identity() by setting
			the KRB5_KTNAME environment variable to the
			contents of tkey-gssapi-keytab.  Also fixed
			test errors on MacOSX.  [RT #22853]
 2011-01-08 00:33:12 +00:00
Automatic Updater
93235c1cba update copyright notice 2011-01-07 23:47:07 +00:00
Evan Hunt
a727690e8b HPUX: silence compiler warnings about signed/unsigned comparisons 2011-01-07 21:42:03 +00:00
Evan Hunt
3df7f5a9d6 add ssu_external.c to win32 definitions 2011-01-07 05:32:49 +00:00
Evan Hunt
4ac6a44512 Forgot to add ssu_external.c when committing change #3003. 2011-01-07 05:29:08 +00:00
Mark Andrews
dc4fa197dd 3004. [func] DNS64 reverse support. [RT #22769] 2011-01-07 04:31:39 +00:00
Automatic Updater
db69d5d53c update copyright notice 2011-01-06 23:47:00 +00:00
Evan Hunt
3916872f37 3003. [experimental] Added update-policy match type "external", 
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
 2011-01-06 23:24:39 +00:00
Automatic Updater
1da9dbcf48 update copyright notice 2011-01-04 23:47:14 +00:00
Mark Andrews
161429fc05 3002. [bug] isc_mutex_init_errcheck() failed to destroy attr. 
[RT #22766]
 2011-01-04 04:32:13 +00:00
Evan Hunt
79bf7c874b 3001. [func] Added a default trust anchor for the root zone, which 
can be switched on by setting "dnssec-validation auto;"
			in the named.conf options. [RT #21727]
 2011-01-03 23:45:08 +00:00
Evan Hunt
d9ad0a55bb 3000. [bug] More TKEY/GSS fixes: 
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
 2010-12-24 02:20:47 +00:00
Automatic Updater
a094c46640 update copyright notice 2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94 2999. [func] Add GOST support (RFC 5933). [RT #20639] 2010-12-23 04:08:00 +00:00
Automatic Updater
557919588b update copyright notice 2010-12-22 23:46:59 +00:00
Mark Andrews
777b848142 2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive 
to the task api. [RT #22776]
 2010-12-22 13:05:20 +00:00
Mark Andrews
7a54dadeb5 2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive 
to the task api. [RT #22776]
 2010-12-22 05:19:02 +00:00
Mark Andrews
79344b9710 2996. [security] Temporarily disable SO_ACCEPTFILTER support. 
[RT #22589]
 2010-12-22 03:08:36 +00:00
Mark Andrews
179e028b35 2995. [bug] The Kerberos realm was not being correctly extracted 
from the signer's identity. [RT #22770]
 2010-12-22 02:33:12 +00:00
Automatic Updater
8868ef9c64 update copyright notice 2010-12-21 23:47:08 +00:00
Mark Andrews
c2170a4bd0 2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and 
do not use threads on earlier versions.  Also kill
                        the unproven-pthreads, mit-pthreads, and ptl2 support.
 2010-12-21 04:20:23 +00:00
Mark Andrews
82f77687ab 2993. [func] Dynamically grow adb hash tables. [RT #21186] 2010-12-21 03:11:42 +00:00
Automatic Updater
ca103999e6 update copyright notice 2010-12-20 23:47:21 +00:00
Evan Hunt
db4c1bc48a Looks like "ifdef" should have been "ifndef". (Committing without review to 
silence robie.)
 2010-12-19 21:32:35 +00:00
Evan Hunt
c445b2f648 Add #ifdef BIND9 to some of the new DLZ code to fix link errors 
when building with --enable-exportlibs
 2010-12-19 02:51:41 +00:00
Evan Hunt
9f453d9342 removed unnecessary "done" log message from dns_sdlzcreate(); it used 
__FUNCTION__ which caused problems on some compilers.
 2010-12-19 02:37:08 +00:00
Automatic Updater
941c0792f2 update copyright notice 2010-12-18 23:47:11 +00:00
Mark Andrews
c880d51849 gsskrb5_register_acceptor_identity is not available on all platforms 2010-12-18 14:46:21 +00:00
Mark Andrews
6dcb804dc6 UNUSED(use_static_stub); 2010-12-18 11:47:13 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed 
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
 2010-12-18 01:56:23 +00:00
Automatic Updater
0ccd663a83 update copyright notice 2010-12-16 23:47:08 +00:00
Tatuya JINMEI 神明達哉
743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub 
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
 2010-12-16 09:51:30 +00:00
Mark Andrews
8d8f0b4659 2984. [bug] Don't run MX checks when the target of the MX record is ".". [RT #22645] 2010-12-14 00:39:59 +00:00
Mark Andrews
a16d8521e4 re-base the api version for 9.8 2010-12-10 01:13:02 +00:00
Mark Andrews
391b2f42eb dns64 2010-12-09 06:12:43 +00:00
Mark Andrews
187d99dc53 s/dev/sdev/ 2010-12-09 06:08:05 +00:00
Mark Andrews
44c0cfd2be remove extraneos semicolon 2010-12-09 04:59:09 +00:00
Mark Andrews
987f2097a6 dns64 is BIND9 only 2010-12-09 04:53:48 +00:00
Mark Andrews
73dbd4e933 9.8.0a1 2010-12-09 04:39:10 +00:00
Automatic Updater
fd6a9d688c update copyright notice 2010-12-09 04:31:57 +00:00
Mark Andrews
b44bb86068 add comment 2010-12-09 04:17:15 +00:00
Mark Andrews
1e442d1994 zero bind 64 to 71 if prefix len is 64 2010-12-09 04:01:43 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Mark Andrews
8aee18709f 2980. [bug] named didn't properly handle UPDATES that changed the 
TTL of the NSEC3PARAM RRset. [RT #22363]
 2010-12-07 02:53:34 +00:00
Mark Andrews
ab39760512 silence warning. temporary 2010-12-04 22:27:29 +00:00
Mark Andrews
b286683ae8 temporally make isc__task_exiting become isc_task_exiting so that the 
export version of libisc has all the symbols to link.
 2010-12-04 13:25:59 +00:00
Automatic Updater
59b283de0a update copyright notice 2010-12-03 23:46:46 +00:00
Evan Hunt
e78c2b856b 2979. [bug] named could deadlock during shutdown if two 
"rndc stop" commands were issued at the same
			time. [RT #22108]
 2010-12-03 22:05:19 +00:00
Mark Andrews
310e10d536 pass the address of dstkey 2010-12-03 21:47:19 +00:00
Mark Andrews
cc83084441 s/dns_key_free/dst_key_free/ 2010-12-03 12:03:22 +00:00
Mark Andrews
c0a76b3c0b 2978. [port] hpux: look for <devpoll.h> [RT #21919] 2010-12-03 00:57:57 +00:00
Automatic Updater
326a702a35 update copyright notice 2010-12-02 23:46:56 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Mark Andrews
97664670d0 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 04:58:13 +00:00
Automatic Updater
e085624e0f update copyright notice 2010-11-30 23:46:55 +00:00
Evan Hunt
b5b934a0bb 2974. [bug] Some vaild UPDATE requests could fail due to a 
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
 2010-11-30 02:27:08 +00:00
Automatic Updater
bc7051ee3f update copyright notice 2010-11-18 00:59:43 +00:00
Mark Andrews
5a636f9951 2972. [bug] win32: address windows socket errors. [RT #21906] 2010-11-18 00:24:00 +00:00
Automatic Updater
33cc94f04c update copyright notice 2010-11-17 23:47:09 +00:00
Evan Hunt
8eb30f8dd3 2971. [bug] Fixed a bug that caused journal files not to be 
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
 2010-11-17 00:27:54 +00:00
Mark Andrews
d48730a446 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 06:46:44 +00:00
Mark Andrews
cd9d825a71 remove accidental commit 2010-11-16 05:38:31 +00:00
Mark Andrews
a27b3757fd 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 01:14:51 +00:00
Mark Andrews
7965c00ca8 check for size equal zero in _format(), replace snprintf of a fixed string with strlcpy 2010-11-16 00:53:36 +00:00
Mark Andrews
432e1ce402 check that grow_headerspace added enough space or re-call it 2010-11-16 00:51:41 +00:00
Mark Andrews
c5a3400f23 REQUIRE that rataset/rdatalist be non NULL 2010-11-16 00:50:28 +00:00
Mark Andrews
a158495f84 INSIST that bucket in no longer ISC_ADB_INVALIDBUCKET after find_*_and_lock calls 2010-11-16 00:49:18 +00:00
Mark Andrews
c2f5ddeeec isc_netaddr_format() check for sies equal 0 2010-11-16 00:43:02 +00:00
Mark Andrews
baab444222 isc_sockaddr_format() check for sies equal 0 2010-11-16 00:42:35 +00:00
Mark Andrews
d775887f01 cfg_obj_asnetprefix() check that the destinations are non NULL before writing to them 2010-11-16 00:41:32 +00:00
Automatic Updater
b3ff8e5ae7 update copyright notice 2010-10-18 23:47:08 +00:00
Mark Andrews
7bce336186 2966. [bug] isc_print_vsnprintf() failed to check if there was 
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
 2010-10-18 03:59:05 +00:00
Mark Andrews
ed83fa75f5 2963. [security] The allow-query acl was being applied instead of the 
allow-query-cache acl to cache lookups. [RT #22114]
 2010-09-24 05:09:03 +00:00
Automatic Updater
3255640981 update copyright notice 2010-09-15 12:38:36 +00:00
Mark Andrews
506a2177bf 2961. [bug] Be still more selective about the non-authoritative 
answers we apply change 2748 to. [RT #22074]
 2010-09-15 12:21:27 +00:00
Mark Andrews
70ba55161b 2957. [bug] entropy_get() and entropy_getpseudo() failed to match 
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
 2010-09-15 03:06:15 +00:00
Mark Andrews
240a7dc59d 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 00:58:36 +00:00
Mark Andrews
e588bfe689 2950. [bug] named failed to perform a SOA up to date check when 
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
 2010-09-06 04:41:13 +00:00
Mark Andrews
02a211f4c4 2949. [bug] dns_view_setnewzones() contained a memory leak if 
it was called multiple times. [RT #21942]
 2010-09-06 04:31:11 +00:00
Francis Dupont
ec288f1a26 reindent 2010-09-05 12:14:26 +00:00
Automatic Updater
f428e385a4 update copyright notice 2010-08-16 23:46:52 +00:00
Mark Andrews
10f9e687f5 silence redefinition warnings MacOS 2010-08-16 22:41:16 +00:00
Mark Andrews
c6f4972c74 2943. [func] Add support to load new keys into managed zones 
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
 2010-08-16 22:21:07 +00:00
Mark Andrews
8bc194b266 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 04:49:14 +00:00
Automatic Updater
2b43d1d8c5 update copyright notice 2010-08-13 23:47:04 +00:00
Francis Dupont
7641867b4c fix win32 build 2010-08-13 14:33:31 +00:00
Francis Dupont
bcb444aed0 remove connection aborted error message 2010-08-13 10:45:32 +00:00
Mark Andrews
c73d8c1b72 2938. [bug] When skipping NSEC3 records that don't match the 
current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]
 2010-08-13 06:46:25 +00:00
Tatuya JINMEI 神明達哉
d0b75b9ff6 define the wrapper function for mem_isovermem(). 
(a regression in rt21818)
 2010-08-12 21:30:26 +00:00
Evan Hunt
9b7efe7aca Removed a leftover UNUSED statement referencing a parameter that doesn't 
exist anymore.
 2010-08-12 04:04:14 +00:00
Automatic Updater
cc4dd0d08d update copyright notice 2010-08-11 23:46:42 +00:00
Tatuya JINMEI 神明達哉
253ae50e09 required ctx is valid in mem_isovermem(). 2010-08-11 23:11:45 +00:00
Tatuya JINMEI 神明達哉
27fe1966c9 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 22:54:58 +00:00
Evan Hunt
cfd262045c 2936. [func] Improved configuration syntax and multiple-view 
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
 2010-08-11 18:14:20 +00:00
Automatic Updater
548317f929 update copyright notice 2010-08-10 23:48:19 +00:00
Mark Andrews
712b976a06 2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c. [RT #21871] 2010-08-10 09:32:06 +00:00
Automatic Updater
a90aca78aa update copyright notice 2010-07-11 23:46:54 +00:00
Evan Hunt
a207cfc5d1 Removed a duplicate entry in namedconf.c. 2010-07-11 05:44:15 +00:00
Evan Hunt
86dcc40058 2930. [experimental] New "rndc addzone" and "rndc delzone" commads 
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
 2010-07-11 00:12:57 +00:00
Automatic Updater
1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00
Evan Hunt
bf9b852c3e 2929. [bug] Improved handling of GSS security contexts: 
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
 2010-07-09 05:13:15 +00:00
Mark Andrews
ff5864ef42 2928. [bug] Be more selective about the non-authoritative 
answer we apply change 2748 to. [RT #21594]
 2010-07-04 00:48:57 +00:00
Mark Andrews
2cf74a72fd isc_boolean_t -> dns_v4_aaaa_t 2010-06-26 05:30:30 +00:00
Mark Andrews
810656a187 2925. [bug] Named failed to accept uncachable negative responses 
from insecure zones. [RT# 21555]
 2010-06-25 23:50:13 +00:00
Automatic Updater
cf309ffeee update copyright notice 2010-06-25 23:46:51 +00:00
Mark Andrews
bf13e709db 2924. [func] 'rndc secroots' dump a combined summary of the 
current managed keys combined with trusted keys.
                        [RT #20904]
 2010-06-25 03:24:05 +00:00
Automatic Updater
b8d4e96e95 update copyright notice 2010-06-23 23:46:58 +00:00
Mark Andrews
4a8dc5f8ef 2921. [bug] The resolver could attempt to destroy a fetch context 
to soon.  [RT #19878]
 2010-06-23 01:31:43 +00:00
Automatic Updater
b61690dbad update copyright notice 2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively 
to IPv4 clients.  New acl 'filter-aaaa' (default any).
 2010-06-22 04:03:38 +00:00
Mark Andrews
ae538374fe AAAA not A 2010-06-18 05:36:24 +00:00
Mark Andrews
081b36ff95 2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET. 2010-06-18 02:11:44 +00:00
Automatic Updater
e40d5d6b71 update copyright notice 2010-06-09 23:50:58 +00:00
Automatic Updater
36961e2937 missing @ 2010-06-09 13:23:47 +00:00
Mark Andrews
cf56ac2b41 missing @ 2010-06-09 09:04:39 +00:00
Mark Andrews
76117ff568 CHANGES 2010-06-09 01:43:09 +00:00
Automatic Updater
ad0471f93b update copyright notice 2010-06-08 23:50:24 +00:00
Mark Andrews
63af1a646a 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:42:37 +00:00
Automatic Updater
3f2280d2fc update copyright notice 2010-06-04 23:51:14 +00:00
Mark Andrews
ec58c4ca54 remove trailing comma 2010-06-04 00:12:54 +00:00
Automatic Updater
6e13ffa218 update copyright notice 2010-06-03 23:51:05 +00:00
Mark Andrews
b7bc86a4d3 2912. [func] Windows clients don't like UPDATE responses that clear 
the zone section. [RT #20986]
 2010-06-03 05:23:27 +00:00
Mark Andrews
a20996ab6f 2910. [func] Sanity check Kerberos credentials. [RT #20986] 2010-06-03 02:29:58 +00:00
Mark Andrews
29f0da7fb8 2908. [bug] It was possible for re-signing to stop after removing 
a DNSKEY. [RT #21384]
 2010-06-02 00:58:54 +00:00
Mark Andrews
b00de53de2 2907. [bug] The export version of libdns had undefined references. 
[RT #21444]
 2010-06-02 00:38:29 +00:00
Mark Andrews
57b47bca26 checkpoint 2010-05-29 10:36:22 +00:00
Mark Andrews
ead77b9ad4 2906. [bug] Add RFC 5011 implementation issues. [RT #20903] 2010-05-28 03:15:48 +00:00
Mark Andrews
e27d55e3ee 2904. [bug] When using DLV, sub-zones of the zones in the DLV, 
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
 2010-05-26 06:28:00 +00:00
Mark Andrews
7d9be933d7 2903. [bug] managed-keys-directory missing from namedconf.c. 
[RT #21370]
 2010-05-21 14:10:32 +00:00
Mark Andrews
abb239e7fc silence compiler, explict coversion 2010-05-19 09:52:42 +00:00
Mark Andrews
5b02fc32d6 2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316] 2010-05-19 07:13:15 +00:00
Mark Andrews
b667946fa5 2900. [bug] The placeholder negative caching element was not 
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
 2010-05-19 06:39:50 +00:00
Mark Andrews
32f985bcf4 silence compile warnings, explict conversio 2010-05-18 06:28:29 +00:00
Mark Andrews
ed30e0358b 9.7.1b1 2010-05-18 06:14:32 +00:00
Automatic Updater
4dd3ec797d update copyright notice 2010-05-18 02:38:10 +00:00
Mark Andrews
8d31dd9ab6 2897. [bug] NSEC3 chains could be left behind when transitioning 
to insecure. [RT #21040]
 2010-05-18 01:39:41 +00:00
Mark Andrews
6d58400178 2896. [bug] "rndc sign" failed to properly update the zone 
when adding a DNSKEY for publication only. [RT #21045]
 2010-05-18 01:03:26 +00:00
Automatic Updater
515c7f3c43 update copyright notice 2010-05-14 23:50:40 +00:00
Mark Andrews
778a01b1aa 2893. [bug] Improve managed keys support. New named.conf option 
managed-keys-directory. [RT #20924]
 2010-05-14 04:48:28 +00:00
Mark Andrews
44f175a90a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:38:52 +00:00
Mark Andrews
b335299322 2890. [bug] Handle the introduction of new trusted-keys and 
DS, DLV RRsets better. [RT #21097]
 2010-05-14 00:13:43 +00:00
Automatic Updater
b7bcdb3eaa update copyright notice 2010-05-13 23:50:27 +00:00
Mark Andrews
e12030c433 2889. [bug] Element of the grammar where not properly reported. 
[RT #21046]
 2010-05-13 03:16:55 +00:00
Mark Andrews
49560ac770 typo in threaded build, silence compiler warning 2010-05-13 03:08:30 +00:00
Mark Andrews
e18c62b1da 2888. [bug] Only the first EDNS option was displayed. [RT #21273] 2010-05-13 00:40:46 +00:00
Automatic Updater
21d9ee0d73 update copyright notice 2010-05-12 23:51:13 +00:00
Mark Andrews
5c40acf215 2887. [bug] Report the keytag times in UTC in the .key file, 
local time is presented as a comment within the
                        comment.  [RT #21223]

2886.   [bug]           ctime() is not thread safe. [RT #21223]
 2010-05-12 23:49:40 +00:00
Mark Andrews
f083a44415 2884. [bug] Insufficient valadation in dns_name_getlabelsequence(). 
[RT #21283]
 2010-05-12 05:40:32 +00:00
Mark Andrews
2fca4a3321 2882. [bug] Remove memory context from list of active contexts 
before clearing 'magic'. [RT #21274]
 2010-05-12 00:46:55 +00:00
Automatic Updater
a955420bed update copyright notice 2010-05-10 23:50:55 +00:00
Mark Andrews
121f783b66 2881. [bug] Reduce the amount of time the rbtdb write lock 
is held when closing a version. [RT #21198]
 2010-05-10 01:39:03 +00:00
Automatic Updater
b98844704e update copyright notice 2010-04-28 23:50:51 +00:00
Mark Andrews
6ab18ae52c 2878. [func] Incrementally write the master file after performing 
a AXFR.  [RT #21010]
(part 2)
 2010-04-28 11:03:07 +00:00
Mark Andrews
1df2b7edfe 2878. [func] Incrementally write the master file after performing 
a AXFR.  [RT #21010]
 2010-04-27 03:24:52 +00:00
Automatic Updater
ed2fa6ce1b update copyright notice 2010-04-21 23:51:22 +00:00
Mark Andrews
fd95cc0da9 2877. [bug] The validator failed to skip obviously mismatching 
RRSIGs. [RT #21138]
 2010-04-21 05:45:47 +00:00
Mark Andrews
bb6d33103e 2876. [bug] Named could return SERVFAIL for negative responses 
from unsigned zones. [RT #21131]
 2010-04-21 04:16:49 +00:00
Mark Andrews
cc6d67469c 2875. [bug] dns_time64_fromtext() could accept non digits. 
[RT #21033]
 2010-04-21 02:21:31 +00:00
Automatic Updater
0a199807e7 update copyright notice 2010-04-20 23:51:12 +00:00
Mark Andrews
1e9848fb2b 2874. [bug] Cache lack of EDNS support only after the server 
successfully responds to the query using plain DNS.
                        [RT #20930]
 2010-04-20 07:28:52 +00:00
Tatuya JINMEI 神明達哉
c45d848e2a 2873. [bug] Canceling a dynamic update via the dns/client module 
could trigger an assertion failure. [RT #21133]
 2010-04-14 22:08:47 +00:00
Automatic Updater
0abd3cca60 update copyright notice 2010-04-13 23:50:58 +00:00
Shawn Routhier
7dc38ccd52 Modify dns/client.c:dns_client_createx() to only require one of IPv6 or 
IPv6 rather than both.  [RT #21122]
 2010-04-13 19:06:48 +00:00
Automatic Updater
127e1bde3a update copyright notice 2010-04-09 23:51:01 +00:00
Tatuya JINMEI 神明達哉
ce164dbd9c 2871. [bug] Type mismatch in mem_api.c between the definition and 
the header file, causing build failure with
			--enable-exportlib. [RT #21138]

9.8.0 and 9.7.1.
 2010-04-09 06:09:35 +00:00
Automatic Updater
f15cde2b63 update copyright notice 2010-04-07 23:51:06 +00:00
Mark Andrews
86077a2e87 2870. [maint] Add AAAA addresses for L.ROOT-SERVERS.NET. 2010-04-07 07:05:38 +00:00
Mark Andrews
b8d036c434 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call. 
[RT #20877]
 2010-03-26 17:12:48 +00:00
Automatic Updater
230987e819 update copyright notice 2010-03-12 23:51:11 +00:00
Mark Andrews
a80d26914a 2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers 
don't like it.  [RT #20986]
 2010-03-12 03:47:08 +00:00
Mark Andrews
c19f322914 2866. [bug] Windows does not like the TSIG name being compressed. 
[RT #20986]
 2010-03-12 03:34:56 +00:00
Mark Andrews
ff9301990d 2865. [bug] memset to zero event.data. [RT #20986] 2010-03-12 03:22:57 +00:00
Mark Andrews
08fb52ec8c 2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU. 
[RT #21056]
 2010-03-11 04:43:57 +00:00
Automatic Updater
4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Mark Andrews
22c4126ba5 2958. [bug] When canceling validation it was possible to leak 
memory. [RT #20800]
 2010-03-04 22:25:31 +00:00
Mark Andrews
b1003ace6f 2957. [bug] RTT estimates were not being adjusted on ICMP errors. 
[RT #20772]
 2010-03-04 06:43:21 +00:00
Mark Andrews
92348098eb 2956. [bug] named-checkconf did not fail on a bad trusted key. 
[RT #20705]
 2010-03-04 06:17:01 +00:00
Mark Andrews
5388178e8a 2955. [bug] The size of a memory allocation was not always properly 
recorded. [RT #20927]
 2010-03-04 05:45:51 +00:00
Mark Andrews
d1a5fdc34a 2955. [bug] The size of a memory allocation was not always properly 
recorded. [RT #20927]
 2010-03-04 05:29:15 +00:00
Mark Andrews
2e20dea9fc 2854. [func] nsupdate will now preserve the entered case of domain 
names in update requests it sends. [RT #20928]
 2010-03-04 05:24:56 +00:00
Mark Andrews
13396661f4 2854. [func] dig: allow the final soa record in a axfr response to 
be suppressed, dig +onesoa. [RT #20929]
 2010-03-04 05:18:04 +00:00
Mark Andrews
6f8edd57ae dns_resolver_*badcache 2010-03-03 05:13:53 +00:00
Mark Andrews
c76ae1723f dns_rdataset_expire/dns_rdataset_settrust 2010-03-03 05:11:45 +00:00
Mark Andrews
64f8608ed6 2853. [bug] add_sigs() could run out of scratch space. [RT #21015] 2010-02-26 01:39:49 +00:00
Mark Andrews
8b026a66fd grab a write lock before updating header->trust 2010-02-26 00:18:06 +00:00
Automatic Updater
bd2b08d5a3 update copyright notice 2010-02-25 05:08:01 +00:00
Mark Andrews
0cae66577c 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 04:39:13 +00:00
Automatic Updater
8077efca7d update copyright notice 2010-02-22 23:49:11 +00:00
Mark Andrews
f56be26f60 .NOTPARALLEL/.NO_PARALLEL 2010-02-22 02:00:07 +00:00
Automatic Updater
6f1b350c3a update copyright notice 2010-02-04 23:49:13 +00:00
Tatuya JINMEI 神明達哉
139cedabf9 2850. [bug] If isc_heap_insert() failed due to memory shortage 
the heap would have corrupted entries.

9.8.0, 9.7.1(?), 9.6.2, 9.5.3
(what about 9.4-ESV?)
 2010-02-04 23:22:05 +00:00
Mark Andrews
8ac908b38a 2849. [bug] Don't treat errors from the xml2 library as fatal. 
[RT #20945]
 2010-02-04 00:57:25 +00:00
Automatic Updater
aad3d15976 update copyright notice 2010-01-31 23:49:09 +00:00
Mark Andrews
ebaf977ecf 2846. [bug] EOF on unix domain sockets was not being handled 
correctly. [RT #20731]
 2010-01-31 23:18:03 +00:00
Francis Dupont
19a62c240d RFC 5011 client can crash. [RT #20903] 2010-01-26 23:33:10 +00:00
Evan Hunt
c46b6864af fix typo 2010-01-22 01:46:20 +00:00
Evan Hunt
da4a8c89a8 remove reference to isc_time member "seconds", which doesn't exist in win32 2010-01-22 01:34:47 +00:00
Evan Hunt
b47d410f84 2840. [bug] Change 2836 was not complete. [RT #20883] 2010-01-14 23:27:38 +00:00
Automatic Updater
5bdf8cd3c2 update copyright notice 2010-01-13 23:48:59 +00:00
Francis Dupont
f77148e029 a KSK revoked by named could not be deleted. [RT #20881] 2010-01-13 08:35:24 +00:00
Francis Dupont
51512910da comment trivial update 2010-01-12 23:56:12 +00:00
Automatic Updater
8576a40424 update copyright notice 2010-01-12 23:48:57 +00:00
Francis Dupont
d481cfdab5 fix spelling in comment 2010-01-12 23:23:21 +00:00
Automatic Updater
65d1486535 update copyright notice 2010-01-11 23:48:37 +00:00
Francis Dupont
a91029a00e Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 10:49:14 +00:00
Francis Dupont
125da90ced trivial spelling error in comment 2010-01-11 01:14:08 +00:00
Automatic Updater
b871a3e0cd update copyright notice 2010-01-09 23:48:45 +00:00
Evan Hunt
05b1ab91a6 2836. [bug] Keys that were scheduled to become active could 
be delayed. [RT #20874]
 2010-01-09 17:09:00 +00:00
Francis Dupont
a26d73a734 fix trivial typo in comment 2010-01-09 15:21:10 +00:00
Automatic Updater
49644c0c8f update copyright notice 2010-01-08 23:51:44 +00:00
Evan Hunt
03e5afa4c0 2835. [bug] Key inactivity dates were inadvertently stored in 
the private key file with the outdated tag
			"Unpublish" rather than "Inactive".  This has been
			fixed; however, any existing keys that had Inactive
			dates set will now need to have them reset, using
			'dnssec-settime -I'. [RT #20868]
 2010-01-08 17:15:36 +00:00
Automatic Updater
a30c7003af update copyright notice 2010-01-07 23:48:54 +00:00
Evan Hunt
0f66aced26 2834. [bug] HMAC-SHA* keys that were longer than the algorithm 
digest length were used incorrectly, leading to
			interoperability problems with other DNS
			implementations.  This has been corrected.
			(Note: If an oversize key is in use, and
			compatibility is needed with an older release of
			BIND, the new tool "isc-hmac-fixup" can convert
			the key secret to a form that will work with all
			versions.) [RT #20751]
 2010-01-07 21:52:12 +00:00
Shawn Routhier
7c25b5f311 Modify "struct stat" in lib/export/samples/nsprobe.c to avoid redefinition in 
some OSes - rt20831
 2010-01-07 18:31:34 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache 
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
 2010-01-07 16:48:23 +00:00
Automatic Updater
842920c7db update copyright notice 2010-01-04 23:48:51 +00:00
Evan Hunt
d3a6cd7c7e 2830. [bug] Changing the OPTOUT setting could take multiple 
passes. [RT #20813]
 2010-01-04 22:47:58 +00:00
Evan Hunt
845bb3195a 2829. [bug] Fixed potential node inconsistency in rbtdb.c. 
[RT #20808]
 2010-01-04 22:30:14 +00:00
Automatic Updater
400615c294 update copyright notice 2009-12-30 23:49:14 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:02:23 +00:00
Evan Hunt
9ead684875 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:46:58 +00:00
Evan Hunt
687b6322fb 2826. [bug] NSEC3->NSEC transitions could fail due to a lock not 
being released.  [RT #20740]
 2009-12-30 03:38:57 +00:00
Mark Andrews
7ddd859470 more for: 
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
 2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58 more for: 
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
 2009-12-30 02:26:30 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task. 
[RT #20759]
 2009-12-29 22:20:33 +00:00
Mark Andrews
288486df9d 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:04:16 +00:00
Mark Andrews
5773d3c007 2822. [bug] rbtdb.c:loadnode() could return the wrong result. 
[RT #20802]
 2009-12-29 08:53:33 +00:00
Evan Hunt
bd31f734ee 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define 
[RT #20771]
 2009-12-24 00:35:46 +00:00
Evan Hunt
b09559fd36 2816. [bug] previous_closest_nsec() could fail to return 
data for NSEC3 nodes [RT #29730]
 2009-12-23 23:43:01 +00:00
Mark Andrews
c9630524c7 2814. [func] Provide a definitive error message when a master 
zone is not loaded. [RT #20757]
 2009-12-21 04:29:10 +00:00
Automatic Updater
928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Evan Hunt
4e55893d30 2813. [bug] Better handling of unreadable DNSSEC key files. 
[RT #20710]

2812.	[bug]		Make sure updates can't result in a zone with
			NSEC-only keys and NSEC3 records. [RT 20748]
 2009-12-18 22:16:49 +00:00
Mark Andrews
28f4cd0a45 2808. [bug] Remove the attempt to install atomic.h from lib/isc. 
atomic.h is correctly intalled by the architecture
                        specific subdirectories.  [RT #20722]
 2009-12-18 04:07:08 +00:00
Mark Andrews
485a435efe 2808. [bug] atomic.h was not being properly installed under all 
circumstances. [RT #20722]
 2009-12-18 03:05:37 +00:00
Evan Hunt
bc04d6ec15 2807. [bug] Fixed a possible ASSERT when reconfiguring zone 
keys. [RT #20720]
 2009-12-11 01:06:03 +00:00
Evan Hunt
b8b602f89b 2806. [bug] "rdnc sign" could delay re-signing the DNSKEY 
when it had changed. [RT #20703]
 2009-12-07 20:51:12 +00:00
Evan Hunt
daa4933c4d prep for 9.7.0rc1 2009-12-06 02:54:26 +00:00
Evan Hunt
c7611c7dd2 prep for 9.7.0rc1 release 2009-12-06 02:31:42 +00:00
Evan Hunt
12178c8652 2805. [bug] Fixed namespace problems encountered when building 
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
 2009-12-05 23:31:41 +00:00
Evan Hunt
d4d836350f add .cvsignore files 2009-12-05 05:36:03 +00:00
Evan Hunt
c2f095969c oops: missed a declaration, and forgot to lock the zone before clearing 
the flag.  (and accidentally ran make tests in the wrong tree, misleading
myself into thinking it was fine.)
 2009-12-05 01:25:43 +00:00
Evan Hunt
d601ef9e89 2804. [bug] Send notifies when a zone is signed with "rndc sign" 
or as a result of a scheduled key change. [RT #20700]
 2009-12-04 22:45:11 +00:00
Automatic Updater
4b6dc226f7 update copyright notice 2009-12-04 22:06:37 +00:00
Mark Andrews
3d17a3ba61 2801. [func] Detect and report records that are different according 
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
 2009-12-04 21:09:34 +00:00
Mark Andrews
5d850024cb 2800. [func] Reject zones which have NS records which refer to 
CNAMEs, DNAMEs or don't have address record (class IN
                        only).  Reject UPDATEs which would cause the zone
                        to fail the above checks if committed. [RT #20678]
 2009-12-04 03:33:15 +00:00
Evan Hunt
8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to 
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
 2009-12-03 23:18:17 +00:00
Evan Hunt
22304041d1 typo caused a missing semicolon 2009-12-03 16:49:09 +00:00
Evan Hunt
e6dda86e8b 2798. [bug] Addressed bugs in managed-keys initialization 
and rollover. [RT #20683]
 2009-12-03 15:40:03 +00:00
Mark Andrews
2a0d4c4d6b 2797. [bug] Don't decrement the dispatch manager's maxbuffers. 
[RT #20613]
 2009-12-02 23:15:14 +00:00
Mark Andrews
d524a81532 2796. [bug] Missing dns_rdataset_disassociate() call in 
dns_nsec3_delnsec3sx(). [RT #20681]
 2009-12-01 05:28:40 +00:00
Evan Hunt
feeca57f18 2795. [cleanup] Add text to differentiate "update with no effect" 
log messages. [RT #18889]
 2009-12-01 00:47:09 +00:00
Mark Andrews
8b37c0dd6e 2794. [bug] Install <isc/namespace.h>. [RT #20677] 2009-11-30 21:34:57 +00:00
Vernon Schryver
5d9922e86f Allow the optional filter-aaaa-on-v4 option in view statements to close #20635 2009-11-28 15:57:37 +00:00
Automatic Updater
3e920dd0c6 update copyright notice 2009-11-26 23:48:14 +00:00
Mark Andrews
66ecb6789b 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:28:19 +00:00
Automatic Updater
2b2fc9b4df update copyright notice 2009-11-25 23:49:22 +00:00
Mark Andrews
536e36ac8d declarations before statements 2009-11-25 13:17:59 +00:00
Evan Hunt
cfc22e53a8 2789. [bug] Fixed an INSIST in dispatch.c [RT #20576] 2009-11-25 05:55:32 +00:00
Evan Hunt
fc1fb1a469 2786. [bug] Spurious log message when zone keys were 
dynamically reconfigured. [RT #20659]
 2009-11-25 02:30:54 +00:00
Mark Andrews
d0ca4e90e2 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:22:05 +00:00
Automatic Updater
b314ea10b4 update copyright notice 2009-11-24 23:48:12 +00:00
Evan Hunt
d312bc5d81 2785. [bug] Revoked keys could fail to self-sign [RT #20652] 2009-11-24 03:42:32 +00:00
Mark Andrews
9dd2ee95f1 2784. [bug] TC was not always being set when required glue was 
dropped. [RT #234186]
 2009-11-24 03:20:02 +00:00
Automatic Updater
94e3a63110 update copyright notice 2009-11-23 23:48:16 +00:00
Evan Hunt
5985af3f5c 2781. [bug] Inactive keys could be used for signing. [RT #20649] 2009-11-23 15:18:07 +00:00
Evan Hunt
cef109efa7 2780. [bug] dnssec-keygen -A none didn't properly unset the 
activation date in all cases. [RT #20648]

2779.	[bug]		Dynamic key revokation could fail. [RT #20644]

2778.	[bug]		dnssec-signzone could fail when a key was revoked
			without deleting the unrevoked version. [RT #20638]
 2009-11-23 02:55:41 +00:00
Mark Andrews
c16d37d06e 2776. [bug] Change #2762 was not correct. [RT #20647] 2009-11-23 02:10:16 +00:00
Automatic Updater
fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3 2773. [bug] In autosigned zones, the SOA could be signed 
with the KSK. [RT #20628]
 2009-11-18 21:22:31 +00:00
Evan Hunt
2ad776a5c4 changed age to 0 2009-11-18 16:46:10 +00:00
Evan Hunt
af52d6ddd7 prep for release of 9.7.0b3 2009-11-18 00:30:37 +00:00
Mark Andrews
a39a5f4d81 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-17 23:55:18 +00:00
Automatic Updater
e34e9a8d68 update copyright notice 2009-11-17 23:48:13 +00:00
Evan Hunt
7ee4b13ded 2771. [bug] dnssec-signzone: DNSKEY records could be 
corrupted when importing from key files [RT #20624]
 2009-11-17 05:46:53 +00:00
Evan Hunt
44a3999cf4 2770. [cleanup] Add log messages to resolver.c to indicate events 
causing FORMERR responses. [RT #20526]
 2009-11-17 02:23:15 +00:00
Evan Hunt
7048af0a55 2769. [cleanup] Change #2742 was incomplete. [RT #19589] 2009-11-16 07:56:06 +00:00
Evan Hunt
e856482b1f 2767. [bug] named could crash on startup if a zone was 
configured with auto-dnssec and there was no
			key-directory. [RT #20615]
 2009-11-16 01:44:33 +00:00
Evan Hunt
37a34ab54f 2766. [bug] isc_socket_fdwatchpoke() should only update the 
socketmgr state if the socket is not pending on a
			read or write.  [RT #20603]
 2009-11-13 00:41:58 +00:00
Automatic Updater
53d502202a update copyright notice 2009-11-12 23:47:59 +00:00
Evan Hunt
86132f0ef5 eliminate warning when building without -DBIND9 2009-11-12 23:43:02 +00:00
Mark Andrews
1d0ebb4cf2 2765. [bug] Skip masters for which the TSIG key cannot be found. 
[RT #20595]
 2009-11-12 23:30:36 +00:00
Evan Hunt
e9dff04d3b 2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591] 2009-11-12 03:03:36 +00:00
Evan Hunt
0c3948e606 2761. [bug] DLV validation failed with a local slave DLV zone. 
[RT #20577]
 2009-11-12 02:59:20 +00:00
Evan Hunt
5857247dbb 2758. [bug] win32: Added a workaround for a windows 2008 bug 
that could cause the UDP client handler to shut
			down. [RT #19176]
 2009-11-10 18:31:47 +00:00
Evan Hunt
5c6c5669ec #include <time.h> for the ctime() prototype. 2009-11-07 03:36:58 +00:00
Mark Andrews
df1599d0e1 address initialization type mismatch warning 2009-11-06 04:19:28 +00:00
Mark Andrews
7963a67df0 address statement not reached warning 2009-11-06 04:12:15 +00:00
Evan Hunt
c1bfa5b0ad 2753. [bug] Removed an unnecessary warning that could appear when 
building an NSEC chain. [RT #20588]
 2009-11-06 03:26:59 +00:00
Evan Hunt
aa2f010f13 Switch from OpenSSL 0.9.8k to 0.9.8l 2009-11-06 03:14:10 +00:00
Mark Andrews
302ed789bd 2752. [bug] Locking violation. [RT #20587] 2009-11-06 01:30:06 +00:00
Evan Hunt
ca97301c37 remove extra \n from a log message 2009-11-05 21:45:05 +00:00
Automatic Updater
2d84cba8f4 update copyright notice 2009-11-04 23:48:18 +00:00
Mark Andrews
7efc6d9cb8 cleanup [RT #20509] 2009-11-04 05:58:46 +00:00
Mark Andrews
2484c7db7a spelling 2009-11-04 04:22:16 +00:00
Mark Andrews
e94fe42a20 2749. [bug] ixfr-from-differences generated a non-minimal ixfr 
for NSEC3 signed zones. [RT #20452]
 2009-11-04 03:46:44 +00:00
Mark Andrews
0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them 
as referrals. [RT #18884]
 2009-11-04 02:15:30 +00:00
Mark Andrews
0181a0a92f 2747. [bug] Journal roll forwards failed to set the re-signing 
time of RRSIGs correctly. [RT #20541]
 2009-11-04 01:25:55 +00:00
Mark Andrews
a3285e811d 2746. [port] hpux: address signed/unsigned expansion mismatch of 
dns_rbtnode_t.nsec. [RT #20542]
 2009-11-04 01:18:19 +00:00
Automatic Updater
126dce8ebf update copyright notice 2009-11-03 23:48:23 +00:00
Mark Andrews
5ccd971c72 UNUSED(engine) if !defined(OPENSSL) 2009-11-03 19:43:54 +00:00
Mark Andrews
554d22d2de 2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record 
for a insecure delegation.
 2009-11-03 01:07:48 +00:00
Mark Andrews
8a0943e125 silence compiler warnings. [RT #20472] 2009-10-30 05:08:23 +00:00
Mark Andrews
4c53f98dbd RFC5702 2009-10-28 21:08:18 +00:00
Evan Hunt
3684692720 update def file 2009-10-28 18:39:47 +00:00
Evan Hunt
5b72cda36b update API and def files for 9.7.0b2 release 2009-10-28 18:13:24 +00:00
Evan Hunt
5cb44a38d9 back out change 2740 2009-10-28 18:04:29 +00:00
Evan Hunt
be69d48443 2742. [cleanup] Clarify some DNSSEC-related log messages in 
validator.c. [RT #19589]
 2009-10-28 05:34:21 +00:00
Automatic Updater
990dca4605 update copyright notice 2009-10-27 23:47:45 +00:00
Mark Andrews
e9d45c0a04 2740. [func] Identify bad answers from GTLD servers and treat them 
as referrals. [RT #18884]
 2009-10-27 23:05:53 +00:00
Evan Hunt
95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust 
anchors for a view. [RT #20211]
 2009-10-27 22:46:13 +00:00
Mark Andrews
e09cdbac08 2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system 
test. [RT #20453]
 2009-10-27 22:25:37 +00:00
Mark Andrews
63d5a6f680 2736. [func] Improve the performance of NSEC signed zones with 
more than a normal amount of glue below a delegation.
                        [RT #20191]
 2009-10-27 04:46:58 +00:00
Evan Hunt
e8831e51c1 2735. [bug] dnssec-signzone could fail to read keys 
that were specified on the command line with
			full paths, but weren't in the current
			directory. [RT #20421]
 2009-10-27 03:59:45 +00:00
Automatic Updater
5f744ebbdc update copyright notice 2009-10-26 23:47:35 +00:00
Evan Hunt
c8aa7ce70d 2732. [func] Add optional filter-aaaa-on-v4 option, available 
if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]
 2009-10-26 23:14:54 +00:00
Evan Hunt
c021499604 2731. [func] Additional work on change 2709. The key parser 
will now ignore unrecognized fields when the
			minor version number of the private key format
			has been increased.  It will reject any key with
			the major version number increased. [RT #20310]
 2009-10-26 21:18:24 +00:00
Automatic Updater
0da9fafc18 update copyright notice 2009-10-24 23:47:36 +00:00
Francis Dupont
775a8d86d9 keygen progress indication [RT #20284] 2009-10-24 09:46:19 +00:00
Automatic Updater
510032fdf4 update copyright notice 2009-10-22 23:48:07 +00:00
Evan Hunt
cc6cddfd94 2726. [func] Added support for SHA-2 DNSSEC algorithms, 
RSASHA256 and RSASHA512. [RT #20023]
 2009-10-22 02:21:31 +00:00
Automatic Updater
3cae549ddb update copyright notice 2009-10-21 23:48:05 +00:00
Evan Hunt
8ec993c774 2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and 
isc_base64_totext(), didn't always mark regions of
			memory as fully consumed after conversion.  [RT #20445]
 2009-10-21 01:22:29 +00:00
Automatic Updater
b15df8f9bc update copyright notice 2009-10-20 23:47:32 +00:00
Mark Andrews
7704a47aec 2722. [bug] Ensure that the memory associated with the name of 
a node in a rbt tree is not altered during the life
                        of the node. [RT #20431]
 2009-10-20 04:57:57 +00:00
Mark Andrews
a01095a487 2721. [port] Have dst__entropy_status() prime the random number 
generator. [RT #20369]
 2009-10-20 04:39:48 +00:00
Evan Hunt
bfbd69c43f 2720. [bug] RFC 5011 trust anchor updates could trigger an 
assert if the DNSKEY record was unsigned. [RT #20406]
 2009-10-20 04:13:38 +00:00
Mark Andrews
3c5e54941f 2718. [bug] The space calculations in opensslrsa_todns() were 
incorrect. [RT #20394]
 2009-10-20 02:59:19 +00:00
Mark Andrews
29dd4bdd14 2717. [bug] named failed to update the NSEC/NSEC3 record when 
the last private type record was removed as a result
                        of completing the signing the zone with a key.
                        [RT #20399]
 2009-10-20 02:45:06 +00:00
Mark Andrews
9ac35b4e4d grammar, line length 2009-10-19 02:37:08 +00:00
Automatic Updater
8ab6a775bb update copyright notice 2009-10-16 23:47:54 +00:00
Evan Hunt
8f7de3db7e Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.) 2009-10-16 02:59:41 +00:00
Automatic Updater
f6cd5ef97a update copyright notice 2009-10-14 23:47:51 +00:00
Mark Andrews
cbee6197d1 2713. [bug] powerpc: atomic operations missing asm("ics") / 
__isync() calls.
 2009-10-14 03:54:23 +00:00
Evan Hunt
19ac4707ee changes needed for win32 build 2009-10-13 00:55:51 +00:00
Automatic Updater
97639003b0 update copyright notice 2009-10-12 23:48:02 +00:00
Evan Hunt
77b8f88f14 2712. [func] New 'auto-dnssec' zone option allows zone signing 
to be fully automated in zones configured for
			dynamic DNS.  'auto-dnssec allow;' permits a zone
			to be signed by creating keys for it in the
			key-directory and using 'rndc sign <zone>'.
			'auto-dnssec maintain;' allows that too, plus it
			also keeps the zone's DNSSEC keys up to date
			according to their timing metadata. [RT #19943]
 2009-10-12 20:48:12 +00:00
Mark Andrews
30bb4870da remove, not zero, extended flags 2009-10-12 09:03:06 +00:00
Mark Andrews
11804ca08f zero extended flags 2009-10-12 08:57:38 +00:00
Mark Andrews
515053881b remove extended flags before comparing if set 2009-10-12 06:05:29 +00:00
Mark Andrews
af20baa960 silence compiler warning/enforce const [RT #20390] 2009-10-12 05:50:52 +00:00
Automatic Updater
8667770ad2 update copyright notice 2009-10-10 23:47:58 +00:00
Evan Hunt
3727725bb7 2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only' 
zone option cause a zone to be signed with only KSKs
			signing the DNSKEY RRset, not ZSKs.  This reduces
			the size of a DNSKEY answer.  [RT #20340]
 2009-10-10 01:48:00 +00:00
Mark Andrews
0d9fb986c5 silence comiler warning 2009-10-10 01:13:39 +00:00
Automatic Updater
8a07de2f03 update copyright notice 2009-10-09 23:48:09 +00:00
Evan Hunt
315a1514a5 2709. [func] Added some data fields, currently unused, to the 
private key file format, to allow implementation
			of explicit key rollover in a future release
			without impairing backward or forward compatibility.
			[RT #20310]
 2009-10-09 06:09:21 +00:00
Mark Andrews
d1bcaec0d6 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-09 00:33:39 +00:00
Mark Andrews
bb4e0bd8e8 silence ininitialised 2009-10-08 23:58:14 +00:00
Mark Andrews
0838b3c02f Recompute check_ksk as it may have changed 2009-10-08 23:55:57 +00:00
Automatic Updater
15bbb8a129 update copyright notice 2009-10-08 23:48:10 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-08 23:13:07 +00:00
Evan Hunt
246c504f90 2706. [bug] Loading a zone with a very large NSEC3 salt could 
trigger an assert. [RT #20368]
 2009-10-06 21:20:45 +00:00
Automatic Updater
e74245134d update copyright notice 2009-10-06 04:40:14 +00:00
Automatic Updater
464f9144fe update copyright notice 2009-10-05 23:48:27 +00:00
Evan Hunt
ea845a6b72 Rebase all of the API files to interface=60, as this is the first 
beta of a new major release.
 2009-10-05 22:01:26 +00:00
Evan Hunt
3ff75c89eb 2704. [bug] Serial of dynamic and stub zones could be inconsistent 
with their SOA serial.  [RT #19387]
 2009-10-05 19:39:20 +00:00
Francis Dupont
3c52c4e44c 20230 update 2009-10-05 17:39:36 +00:00
Francis Dupont
8b78c993cb explicit engine rt20230a 2009-10-05 17:30:49 +00:00
Automatic Updater
4fa2649d57 update copyright notice 2009-10-03 23:48:10 +00:00
Evan Hunt
c36ba263d6 2699. [bug] Missing lock in rbtdb.c. [RT #20037] 2009-10-03 22:39:27 +00:00
Evan Hunt
1210799345 Add /* NOTREACHED */ comments 2009-10-03 18:03:54 +00:00
Automatic Updater
edb08fdf7b update copyright notice 2009-10-01 23:48:08 +00:00
Mark Andrews
cf7432f747 2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and 
S_IFREG are defined after including <isc/stat.h>.
                        [RT #20309]
 2009-10-01 04:43:30 +00:00
Mark Andrews
eb95d2e917 2696. [bug] named failed to successfully process some valid 
acl constructs. [RT #20308]
 2009-10-01 04:06:37 +00:00
Shawn Routhier
bafa76b324 Updates to fdwatch code to support DHCP/DDNS code, ticket rt20253. 2009-10-01 01:30:01 +00:00
Automatic Updater
61dd99bfae update copyright notice 2009-09-29 23:48:04 +00:00
Francis Dupont
debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Mark Andrews
1e733ffc11 2792. [port] win32: 32/64 bit cleanups. [RT #128244] 2009-09-29 04:38:23 +00:00
Automatic Updater
627f3e0805 update copyright notice 2009-09-25 23:48:13 +00:00
Mark Andrews
ff850b81c8 2690. [bug] win32: fix isc_thread_key_getspecific() prototype. 
[RT #20315]
 2009-09-25 05:48:17 +00:00
Mark Andrews
ef830a7750 use (char *) for {get,set}sockopt argument 2009-09-25 02:44:06 +00:00
Mark Andrews
11144f86dc silence signed/unsigned comparision warning 2009-09-25 01:42:09 +00:00
Automatic Updater
b4336342d1 update copyright notice 2009-09-24 23:48:13 +00:00
Mark Andrews
0f869e8d52 2689. [bug] Correctly handle snprintf result. [RT #20306] 2009-09-24 22:19:08 +00:00
Francis Dupont
c59a7b0629 missing updates in recent changes 2009-09-24 14:39:17 +00:00
Mark Andrews
69338455d9 2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT, 
to decide to fetch the destination address. [RT #20305]
 2009-09-24 06:37:50 +00:00
Evan Hunt
53c22b8e0d 2685. [bug] Fixed dnssec-signzone -S handling of revoked keys. 
Also, added warnings when revoking a ZSK, as this is
			not defined by protocol (but is legal).  [RT #19943]
 2009-09-23 16:01:57 +00:00
Francis Dupont
6839f8b6df cleanup USE_EVP_RSA (RT #20044) 2009-09-23 11:16:50 +00:00
Francis Dupont
adb6972f01 minor fix, cf 20295 2009-09-22 08:38:14 +00:00
Tatuya JINMEI 神明達哉
790e471f6e 2681. [bug] IPSECKEY RR of gateway type 3 was not correctly 
decoded [RT #20269].

BIND 9.7.0, 9.6.2, 9.5.2, 9.4.4
 2009-09-18 21:55:21 +00:00
Tatuya JINMEI 神明達哉
148e9f3feb removed a non-existent .h. gmake (which is assumed to be used to build 
the exportlib) ignores it so it doesn't cause a trouble in practice, but
should still better be fixed.

(found by Shawn, I confirmed it.)
 2009-09-18 07:18:04 +00:00
Evan Hunt
b843f577bb 2677. [func] Changes to key metadata behavior: 
- Keys without "publish" or "active" dates set will
			  no longer be used for smart signing.  However,
			  those dates will be set to "now" by default when
			  a key is created; to generate a key but not use
			  it yet, use dnssec-keygen -G.
			- New "inactive" date (dnssec-keygen/settime -I)
			  sets the time when a key is no longer used for
			  signing but is still published.
			- The "unpublished" date (-U) is deprecated in
			  favor of "deleted" (-D).
			[rt20247]
 2009-09-14 18:45:45 +00:00
Automatic Updater
6d7e30b030 update copyright notice 2009-09-10 23:48:00 +00:00
Evan Hunt
f267b27f0e 2675. [bug] dnssec-signzone could crash if the key directory 
did not exist. [RT #20232]
 2009-09-10 05:09:31 +00:00
Evan Hunt
0e7cb68ea0 fix implicit memset() declaration 2009-09-10 02:18:40 +00:00
Evan Hunt
dbabab1f37 rt20045: 
- sync_keyzone() could leak ISC_R_NOMORE, causing zone_postload() to think
  it had failed
- journal roll-forward on key zones complained about having the wrong
  number of SOA records
- dns_soa_buildrdata() could return a pointer to memory allocated on the
  stack
 2009-09-10 01:47:09 +00:00
Automatic Updater
d8b801bd19 update copyright notice 2009-09-08 23:41:50 +00:00
Francis Dupont
e7de5dcef6 typo, cf RT20219 2009-09-08 13:04:29 +00:00
Francis Dupont
1f821c1058 merge rt19294 2009-09-07 12:58:33 +00:00
Mark Andrews
0b8385f5c5 2670. [bug] Unexpected connect failures failed to log enough 
information to be useful. [RT #20205]
 2009-09-07 02:08:51 +00:00
Tatuya JINMEI 神明達哉
457144a0c6 explained the portability workaround macro for isc__ vs isc___ 2009-09-04 18:51:37 +00:00
Tatuya JINMEI 神明達哉
2eb6a502bc added a missing .c file to SRC 2009-09-04 18:13:44 +00:00
Evan Hunt
82629edf81 jinmei's updated mem.h, which uses macros to generate function prototypes. 
this change was needed to support the bind9 build and export library build
on both *nix and win32.  cleanup from change 2660/rt19369.
 2009-09-04 17:47:26 +00:00
Automatic Updater
7b1894bec1 update copyright notice 2009-09-03 23:48:13 +00:00
Tatuya JINMEI 神明達哉
af55bddf26 cleanup: fixed incorrect ifdef [RT #20210] 2009-09-03 21:55:13 +00:00
Tatuya JINMEI 神明達哉
0984eeca5b added workaround for a recent change thatview->secroots is not created 
with view. [RT #20209]
 2009-09-03 21:45:46 +00:00
Evan Hunt
2e46523695 update cvsignore files 2009-09-03 20:28:46 +00:00
Mark Andrews
bbc204a237 2669. [func] Update PKCS#11 support to support Keyper HSM. 
Update PKCS#11 patch to be against openssl-0.9.8i.
 2009-09-03 04:09:58 +00:00
Evan Hunt
9f8d002a66 silence win32 compiler warnings 2009-09-03 00:12:23 +00:00
Evan Hunt
c164f233b4 s/isc__mem_reallocate/isc___mem_reallocate/ 2009-09-02 23:51:55 +00:00
Automatic Updater
d7201de09b update copyright notice 2009-09-02 23:48:03 +00:00
Evan Hunt
e7c38ca963 - define isc_mem_reallocate() in the abstract API for export lib [rt20208] 
- define BIND9 in config.h.win32
- fix problems in mem.h caused by the win32 preprocessor failing to
  expand macros used within macros
- silence a win32 compiler warning in hip_55.c
 2009-09-02 23:43:54 +00:00
Evan Hunt
fff4ec3629 add /D BIND9 for win32 build 2009-09-02 19:36:36 +00:00
Evan Hunt
41e251fad0 add backtrace.c, backtrace.h, backtrace-emptytbl.c, backtrace-emptytbl.h 
to win32 build
 2009-09-02 19:01:49 +00:00
Tatuya JINMEI 神明達哉
9dbca282e4 corrected trivial comment errors (reviewed by Evan in jabber) 2009-09-02 18:38:40 +00:00
Evan Hunt
f0eecd4d62 changes needed for win32 build 2009-09-02 18:32:25 +00:00
Evan Hunt
0c1326fa62 add /D "BIND9" for win32 builds 
(we'll probably need a different project file for creating an exportable DLL)
 2009-09-02 18:00:51 +00:00
Evan Hunt
e30d8c5a47 missing include needed for win32 build 2009-09-02 17:58:06 +00:00
Evan Hunt
a21cde0291 update win32 libisc.def 2009-09-02 17:23:45 +00:00
Evan Hunt
3a6b6f5b11 remove references to the "ddns-autoconf" option, which no longer exists 2009-09-02 16:10:03 +00:00
Evan Hunt
eab9975bcf 2668. [func] Several improvements to dnssec-* tools, including: 
- dnssec-keygen and dnssec-settime can now set key
			  metadata fields 0 (to unset a value, use "none")
			- dnssec-revoke sets the revocation date in
			  addition to the revoke bit
			- dnssec-settime can now print individual metadata
			  fields instead of always printing all of them,
			  and can print them in unix epoch time format for
			  use by scripts
			[RT #19942]
 2009-09-02 06:29:01 +00:00
Tatuya JINMEI 神明達哉
8fec8134ea suppress compiler warnings [RT #20203] 2009-09-02 04:25:19 +00:00
Automatic Updater
823ca3c14f update copyright notice 2009-09-01 23:47:45 +00:00
Tatuya JINMEI 神明達哉
ae16941d9f cleanup: removed a redundant semi-colon 2009-09-01 23:05:33 +00:00
Tatuya JINMEI 神明達哉
d364948549 treat FD_SIZE as int (which can be defined as unsigned on some platforms) 
to silence compiler
 2009-09-01 22:52:27 +00:00
Evan Hunt
93ebf0fc08 - add .cvsignore files 
- silence tinderbox warnings about missing config.h in a few files.
 2009-09-01 20:13:44 +00:00
Tatuya JINMEI 神明達哉
a27fe4c990 2667. [func] Add support for logging stack backtrace on assertion 
failure (not available for all platforms). [RT #19780]
9.7.0
 2009-09-01 18:40:25 +00:00
Tatuya JINMEI 神明達哉
588f79e557 fixed build error on hpux due to gai_strerror() prototype mismatch 
[RT #20194]
 2009-09-01 17:54:16 +00:00
Tatuya JINMEI 神明達哉
44de0b1f7d 2666. [func] Added an 'options' argument to dns_name_fromstring() 
(API change from 9.7.0a2). [RT #20196]
 2009-09-01 17:36:51 +00:00
Tatuya JINMEI 神明達哉
965b6e2a1b fixed trivial errors about the type of function return values 2009-09-01 08:12:33 +00:00
Evan Hunt
85be60e3c8 2665. [func] Clarify syntax for managed-keys {} statement, add 
ARM documentation about RFC 5011 support. [RT #19874]
 2009-09-01 07:14:26 +00:00
Evan Hunt
b1f3364f52 2664. [bug] create_keydata() and minimal_update() in zone.c 
didn't properly check return values for some
			functions.  [RT #19956]
 2009-09-01 07:04:12 +00:00
Evan Hunt
ef22fffeeb 2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr() 
returned a misleading error code when lwresd was
			down. [RT #20028]

2661.	[bug]		Check whether socket fd exceeds FD_SETSIZE when
			creating lwres context. [RT #20029]
 2009-09-01 05:50:18 +00:00
Tatuya JINMEI 神明達哉
9eae5f2a7a added include <config.h> 2009-09-01 03:43:27 +00:00
Mark Andrews
e2a61b7bb2 add #include <isc/print.h> 2009-09-01 02:54:26 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00
Evan Hunt
747abb4993 2658. [bug] dnssec-settime and dnssec-revoke didn't process 
key file paths correctly. [RT #20078]
 2009-08-28 03:13:08 +00:00
Mark Andrews
11b4f17027 2657. [cleanup] Lower "journal file <path> does not exist, creating it" 
log level to debug 1. [RT #20058]
 2009-08-25 07:41:28 +00:00
Francis Dupont
995f3bc4c4 indent 2009-08-23 11:44:44 +00:00
Mark Andrews
97a2451eea 2653. [bug] Treat ENGINE_load_private_key() failures as key 
not found rather than out of memory.  [RT #18033]
 2009-08-18 07:45:14 +00:00
Automatic Updater
800fb35bf0 update copyright notice 2009-08-15 23:48:06 +00:00
Evan Hunt
181b990c21 Back out change #2652 2009-08-15 05:03:14 +00:00
Evan Hunt
38cd84d1b3 2652. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr() 
returned a misleading error code when lwresd was
			down. [RT #20028]
 2009-08-15 03:11:57 +00:00
Mark Andrews
ece6c39dd8 missing semicolon 2009-08-14 07:51:08 +00:00
Evan Hunt
ddc225b15d 2651. [bug] Dates could print incorrectly in K*.key files on 
64-bit systems. [RT #20076]
 2009-08-14 06:28:40 +00:00
Automatic Updater
1f5dc0fc22 update copyright notice 2009-08-13 07:14:05 +00:00
Mark Andrews
bcd0cbfdae 2649. [bug] Set the domain for forward only zones. [RT #19944] 2009-08-13 04:33:51 +00:00
Mark Andrews
1d9958c6cc 2648. [port] win32: isc_time_seconds() was broken. [RT #19900] 2009-08-13 03:34:10 +00:00
Mark Andrews
8cff1a894f 2647. [bug] Remove unnecessary SOA updates when a new KSK is 
added. [RT #19913]
 2009-08-13 02:53:01 +00:00
Mark Andrews
048690a34d 2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987] 2009-08-13 02:11:20 +00:00
Evan Hunt
33a31c5cab fix a comment ("ddns.key" should have been changed to "session.key"). 2009-07-31 23:43:23 +00:00
Evan Hunt
a3288b425a 2642. [bug] nsupdate could dump core on solaris when reading 
improperly formatted key files.  [RT #20015]
 2009-07-29 23:45:24 +00:00
Evan Hunt
9069215eac 2641. [bug] Fixed an error in parsing update-policy syntax, 
added a regression test to check it. [RT #20007]
 2009-07-29 17:52:00 +00:00
Mark Andrews
6a1a8186af 2638. [bug] Silence compiler warnings in gssapi code. [RT #19954] 2009-07-21 06:53:09 +00:00
Mark Andrews
f1de96a386 char mechbuf[17] -> unsigned char mechbuf[17] 2009-07-20 01:55:37 +00:00
Automatic Updater
26d8ffe715 update copyright notice 2009-07-19 23:47:55 +00:00
Evan Hunt
9edd523c22 more win32 build fixes 2009-07-19 05:06:48 +00:00
Evan Hunt
b1fa84a099 win32 build fixes 2009-07-19 04:50:15 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the 
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
 2009-07-19 04:18:05 +00:00
Automatic Updater
4a979d3577 update copyright notice 2009-07-17 23:47:41 +00:00
Evan Hunt
3967528c77 2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses. 
[RT #19716]
 2009-07-17 22:01:44 +00:00
Evan Hunt
aeff7de836 2634. [port] win32: Add support for libxml2, enable 
statschannel. [RT #19773]
 2009-07-17 06:25:45 +00:00
Mark Andrews
2792e226c7 2633. [bug] Handle 15 bit rand() functions. [RT #19783] 2009-07-16 05:52:46 +00:00
Automatic Updater
3e12c54de2 update copyright notice 2009-07-14 23:47:54 +00:00
Evan Hunt
08f860f800 2630. [func] Improved syntax for DDNS autoconfiguration: use 
"update-policy local;" to switch on local DDNS in a
			zone.  [RT #19875]
 2009-07-14 22:54:57 +00:00
Automatic Updater
fd4dcaddae update copyright notice 2009-07-13 23:47:42 +00:00
Evan Hunt
943cbe8ae5 2627. [bug] Named aborted if the same key was included in 
trusted-keys more than once. [RT #19918]
 2009-07-13 21:53:03 +00:00
Evan Hunt
ef370118d5 2626. [bug] Multiple trusted-keys could trigger an assertion 
failure. [RT #19914]
 2009-07-13 21:49:57 +00:00
Mark Andrews
5b7525f51f 2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865] 2009-07-13 07:03:47 +00:00
Mark Andrews
6d5852f318 2623. [bug] Named started seaches for DS non-optimally. [RT #19915] 2009-07-13 06:24:27 +00:00
Automatic Updater
4a14ce5ba0 regen 2009-07-11 01:12:47 +00:00
Automatic Updater
b655c721b6 update copyright notice 2009-07-10 23:47:58 +00:00
Mark Andrews
98e8948bd7 2622. [bug] Printing of named.conf grammar was broken. [RT #19919] 2009-07-10 07:33:21 +00:00
Automatic Updater
c8da39c6c7 update copyright notice 2009-07-02 23:47:26 +00:00
Mark Andrews
109580e7e5 2920. [bug] Delay thawing the zone until the reload of it has 
completed successfully.  [RT #19750]
 2009-07-02 07:39:03 +00:00
Automatic Updater
c6fb85f950 update copyright notice 2009-07-01 23:47:36 +00:00
Automatic Updater
f66c8eed51 update copyright notice 2009-06-30 23:48:01 +00:00
Evan Hunt
cfb1587eb9 2619. [func] Add support for RFC 5011, automatic trust anchor 
maintenance.  The new "managed-keys" statement can
			be used in place of "trusted-keys" for zones which
			support this protocol.  (Note: this syntax is
			expected to change prior to 9.7.0 final.) [RT #19248]
 2009-06-30 02:53:46 +00:00
Mark Andrews
01dbc4fc00 2618. [bug] The sdb and sdlz db_interator_seek() methods could 
loop infinitely. [RT #19847]
 2009-06-26 06:21:03 +00:00
Automatic Updater
eddfb6120c update copyright notice 2009-06-25 23:48:02 +00:00
Mark Andrews
86739ab72c Editorial nits. [RT #19815] 2009-06-25 05:28:34 +00:00
Mark Andrews
76110b31fe 2615. [bug] "__attribute__((unused))" was in the wrong place 
for ia64 gcc builds. [RT #19854]
 2009-06-24 02:22:50 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to 
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
 2009-06-17 06:51:44 +00:00
Mark Andrews
b577875266 missing line breaks 2009-06-17 04:29:43 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build 
- began versioning for 9.7.0a1
 2009-06-12 02:33:21 +00:00
Automatic Updater
754cb8a2b3 update copyright notice 2009-06-11 23:47:56 +00:00
Automatic Updater
b6306ef56e update copyright notice 2009-06-10 23:47:47 +00:00
Evan Hunt
18ad4708eb commit windows build changes needed for DDNS patch 2009-06-10 23:36:57 +00:00
Evan Hunt
351b62535d 2609. [func] Simplify the configuration of dynamic zones: 
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
 2009-06-10 00:27:22 +00:00
Mark Andrews
afbe695de3 "got insecure response; parent indicates it should be secure" wrongly emitted [RT #19800] 2009-06-09 22:57:09 +00:00
Mark Andrews
3d785d7666 dns_dnssec_selfsigns 2009-06-04 04:58:10 +00:00
Automatic Updater
39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:13:37 +00:00
Mark Andrews
f05a6b110f 2607. [bug] named could incorrectly delete NSEC3 records for 
empty nodes when processing a update request.
                        [RT #19749]
 2009-06-04 01:43:41 +00:00
Mark Andrews
0bc3af9834 2606. [bug] "delegation-only" was not being accepted in 
delegation-only type zones. [RT #19717]
 2009-06-03 00:04:38 +00:00
Automatic Updater
dc0c165ce3 update copyright notice 2009-06-02 23:47:50 +00:00
Mark Andrews
5422cf284f 2605. [bug] Accept DS responses from delegation only zones. 
[RT # 19296]
 2009-06-02 05:51:44 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Mark Andrews
7be6336565 2602. [port] win32: fix debugging command line build of libisccfg. 
[RT #19767]
 2009-05-29 01:16:31 +00:00
Automatic Updater
cc5f9fe224 update copyright notice 2009-05-11 02:38:35 +00:00
Mark Andrews
8a805c9f41 spelling 2009-05-11 02:30:07 +00:00
Mark Andrews
4c2ed3d141 2599. [bug] Address rapid memory growth when validation fails. 
[RT #19654]
 2009-05-11 02:22:03 +00:00
Automatic Updater
54cdd2b307 update copyright notice 2009-05-07 23:47:44 +00:00
Francis Dupont
ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Mark Andrews
e7eede965d 2597. [bug] Handle a validation failure with a insecure delegation 
from a NSEC3 signed master/slave zone.  [RT #19464]
 2009-05-07 02:34:19 +00:00
Automatic Updater
7a272c6b0d update copyright notice 2009-05-06 23:47:50 +00:00
Tatuya JINMEI 神明達哉
5d7849ad7f 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay 
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
 2009-05-06 22:53:54 +00:00
Mark Andrews
d2c115f913 2590. [func] Report zone/class of "diff with no effect". [RT #19542] 2009-04-30 06:53:10 +00:00
Automatic Updater
542b74bec7 update copyright notice 2009-04-29 23:48:02 +00:00
Mark Andrews
f030c71500 2589. [bug] dns_db_unregister() failed to clear '*dbimp'. 
[RT #19626]
 2009-04-29 22:11:34 +00:00
Automatic Updater
d76bbb6c40 update copyright notice 2009-04-28 23:48:01 +00:00
Tatuya JINMEI 神明達哉
089f456eb3 2588. [bug] SO_REUSEADDR could be set unconditionally after failure 
of bind(2) call.  This should be rare and mostly
			harmless, but may cause interference with other
			processes that happen to use the same port. [RT #19642]
 2009-04-28 21:39:00 +00:00
Jeremy Reed
f20f19de19 2587. [func] Improve logging by reporting serial numbers for 
when zone serial has gone backwards or unchanged.
			[RT #19506]
 2009-04-28 12:48:35 +00:00
Automatic Updater
ab381c1e22 update copyright notice 2009-04-21 23:48:04 +00:00
Tatuya JINMEI 神明達哉
b1b0dca146 2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB 
or SDB. [RT #19577]
 2009-04-21 00:41:02 +00:00
Tatuya JINMEI 神明達哉
cda7c783c3 2585. [bug] Uninitialized socket name could be referenced via a 
statistics channel, triggering an assertion failure in
			XML rendering. [RT #19427]
 2009-04-18 01:28:17 +00:00
Automatic Updater
cc0f37ba17 update copyright notice 2009-04-08 06:48:23 +00:00
Tatuya JINMEI 神明達哉
af2e2f5ed7 2584. [bug] alpha: gcc optimization could break atomic operations. 
[RT #19227]
 2009-04-08 05:46:22 +00:00
Tatuya JINMEI 神明達哉
3dc1cb7e96 wording fix for cpp error message (rt #19569) 2009-04-07 02:49:37 +00:00
Mark Andrews
64e161a7f7 2582. [bug] Don't emit warning log message when we attempt to 
remove non-existant journal. [RT #19516]
 2009-03-26 22:51:54 +00:00
Evan Hunt
6b9728dde7 ARM and log message changes to clarify "insecure response". [rt19400] 2009-03-23 22:30:57 +00:00
Automatic Updater
8e3d340655 update copyright notice 2009-03-17 23:48:02 +00:00
Mark Andrews
72dbc7216a 2579. [bug] DNSSEC lookaside validation failed to handle unknown 
algorithms. [RT #19479]
 2009-03-17 01:34:28 +00:00
Mark Andrews
56708c6fb4 2576. [bug] NSEC record were not being correctly signed when 
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
 2009-03-13 01:35:18 +00:00
Automatic Updater
74f4bfde4a update copyright notice 2009-03-11 23:47:35 +00:00
Evan Hunt
3f8be559f0 2575. [func] New functions dns_name_fromstring() and 
dns_name_tostring(), to simplify conversion
			of a string to a dns_name structure and vice
			versa. [RT #19451]
 2009-03-11 07:02:34 +00:00
Automatic Updater
2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Mark Andrews
e422b84c73 2573. [bug] Replacing a non-CNAME record with a CNAME record in a 
single transaction in a signed zone failed. [RT #19397]
 2009-03-05 04:54:33 +00:00
Mark Andrews
f605647060 Undocumented firewall test hook. [RT #19398] 2009-03-05 03:13:55 +00:00
Automatic Updater
e61db954bf update copyright notice 2009-03-04 23:48:02 +00:00
Evan Hunt
3a30493983 2572. [func] Simplify DLV configuration, with a new option 
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
 2009-03-04 02:42:31 +00:00
Automatic Updater
4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Mark Andrews
98b2be76fc 2567. [bug] dst__privstruct_writefile() could miss write errors. 
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
 2009-03-02 03:01:04 +00:00
Mark Andrews
05c162292f 2567. [bug] dst__privstruct_writefile() could miss write errors. 
[RT #19360]
 2009-03-02 02:03:59 +00:00
Mark Andrews
d55bdffe2f report when chdir fails. [RT #19360] 2009-03-02 01:57:10 +00:00
Automatic Updater
3e63c43386 update copyright notice 2009-03-01 23:47:25 +00:00
Evan Hunt
bfe0517fdc Clarify logged message when an insecure DNSSEC response arrives from a zone 
thought to be secure: "insecurity proof failed" instead of "not insecure".
[RT #19400]
 2009-03-01 02:45:38 +00:00
Mark Andrews
549e34bbf4 2564. [bug] Only take EDNS fallback steps when processing timeouts. 
[RT #19405]
 2009-02-27 23:01:48 +00:00
Automatic Updater
92e4603c55 update copyright notice 2009-02-26 11:18:56 +00:00
Mark Andrews
e4c6491bbf 2565. [func] Add support for HIP record. Includes new functions 
dns_rdata_hip_first(), dns_rdata_hip_next()
                        and dns_rdata_hip_current().  [RT #19384]
 2009-02-26 06:09:19 +00:00
Mark Andrews
499fa72075 2564. [bug] 'named' was treating a TCP retry as a timeout when 
deciding whether to perform a EDNS fallback step.
                        [RT #19393]
 2009-02-25 22:46:05 +00:00
Automatic Updater
87a58323be update copyright notice 2009-02-18 23:47:48 +00:00
Mark Andrews
d53cade6ae add #include "config.h" 2009-02-18 06:44:58 +00:00
Mark Andrews
0f39e477c5 2660. [bug] Add #include <config.h> to iptable.c. [RET #18258] 2009-02-18 05:31:17 +00:00
Mark Andrews
803bf59371 silence 'Different types treated as unsigned for <=.' warning 2009-02-17 05:53:13 +00:00
Mark Andrews
eab2fb739e silence compiler warnings [RT #17079] 2009-02-17 03:40:28 +00:00
Automatic Updater
bf33eb0b52 update copyright notice 2009-02-16 23:48:04 +00:00
Mark Andrews
fd8c0286c1 silence 'Different types treated as unsigned for >.' warning 2009-02-16 03:19:40 +00:00
Mark Andrews
6fbeed7f8f silence 'Different types treated as unsigned for >=.' warning 2009-02-16 03:16:10 +00:00
Mark Andrews
e502b133d6 2556. [cleanup] PCI compliance: 
* new libisc log module file
                        * isc_dir_chroot() now also changes the working
                          directory to "/".
                        * additional INSISTs
                        * additional logging when files can't be removed.
 2009-02-16 02:01:16 +00:00
Mark Andrews
7d211b458f 2554. [bug] Validation of uppercase queries from NSEC3 zones could 
fail. [RT #19297]
 2009-02-15 23:46:23 +00:00
Mark Andrews
d2ef5b3c5c 2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291] 2009-02-15 23:37:29 +00:00
Mark Andrews
45c3c12ed3 2552. [bug] zero-no-soa-ttl-cache was not being honoured. 
[RT #19340]
 2009-02-15 23:13:32 +00:00
Automatic Updater
bbdbde5fa0 update copyright notice 2009-02-13 23:48:14 +00:00
Mark Andrews
6cf047f100 2549. [port] linux: define NR_OPEN if not currently defined. 
[RT #19344]
 2009-02-13 09:15:18 +00:00
Automatic Updater
dd0adce112 update copyright notice 2009-02-12 23:47:56 +00:00
Mark Andrews
b663e99af6 2548. [bug] Install iterated_hash.h. [RT #19335] 2009-02-12 22:17:15 +00:00
Francis Dupont
b5297573c9 add 8 missing exports 2009-02-12 13:46:41 +00:00
Francis Dupont
d7d2a7fbad add isc__mem_reallocate() 2009-02-12 12:45:04 +00:00
Francis Dupont
ee620d5bd0 add stats 2009-02-12 11:32:57 +00:00
Tatuya JINMEI 神明達哉
77d90dc2b5 2547. [bug] openssl_link.c:mem_realloc() could reference an 
out-of-range area of the source buffer.  New public
			function isc_mem_reallocate() was introduced to address
			this bug. [RT #19313]
 2009-02-11 03:04:18 +00:00
Automatic Updater
53f0234c3e update copyright notice 2009-02-06 23:47:42 +00:00
Francis Dupont
c1d7e0562f OpenSSL hashes 2009-02-06 12:26:23 +00:00
Automatic Updater
c520b0f616 update copyright notice 2009-02-04 23:48:09 +00:00
Mark Andrews
ba576cf8e7 silence comiler warning. [RT #18630] 2009-02-04 04:43:42 +00:00
Tatuya JINMEI 神明達哉
5d0984f4fd 2544. [cleanup] Removed unused structure members in adb.c. [RT #19225] 2009-02-03 22:33:13 +00:00
Mark Andrews
870a748bae isc_statscounter_t 2009-01-31 00:37:04 +00:00
Mark Andrews
f19e6ef1eb 2541. [bug] Conditionally update dispatch manager statistics. 
[RT #19247]
 2009-01-31 00:10:24 +00:00
Mark Andrews
53cd44e716 2540. [func] Add a nibble mode to $GENERATE. [RT #1887] 2009-01-30 04:35:44 +00:00
Tatuya JINMEI 神明達哉
03ff5c04b8 missing 'ISC_LANG_BEGINDECLS' 2009-01-29 01:03:56 +00:00
Tatuya JINMEI 神明達哉
c82bb6a709 2538. [bug] cache/ADB memory could grow over max-cache-size, 
especially with threads and smaller max-cache-size
			values. [RT #19240]
 2009-01-28 23:20:23 +00:00
Automatic Updater
39a8abdb83 update copyright notice 2009-01-27 23:47:54 +00:00
Tatuya JINMEI 神明達哉
d9059b0c38 2537. [func] Added more statistics counters including those on socket 
I/O events and query RTT histograms.  [RT #18802]
 2009-01-27 22:30:00 +00:00
Automatic Updater
3bed8e9913 update copyright notice 2009-01-23 23:47:54 +00:00
Mark Andrews
0cee7fdce3 move formating out of msgcat 2009-01-23 01:27:12 +00:00
Mark Andrews
6bcb646fd1 undo one change from #2536 2009-01-23 01:15:41 +00:00
Automatic Updater
3319413a67 update copyright notice 2009-01-22 23:47:54 +00:00
Mark Andrews
f148f53794 2536. [cleanup] Silence some warnings when -Werror=format-security is 
specified. [RT #19083]
 2009-01-22 05:39:29 +00:00
Automatic Updater
83b86f3936 update copyright notice 2009-01-21 23:47:27 +00:00
Mark Andrews
31b7a2fed6 2534. [func] Check NAPTR records regular expressions and 
replacement strings to ensure they are syntaxically
                        valid and consistant. [RT #18168]
 2009-01-21 05:37:55 +00:00
Automatic Updater
9a14f870dd update copyright notice 2009-01-18 23:48:14 +00:00
Francis Dupont
98cc7e7c59 spelling 2009-01-18 18:08:22 +00:00
Francis Dupont
9b899a5758 spelling 2009-01-18 18:02:14 +00:00
Francis Dupont
a05abc1767 spelling 2009-01-18 00:50:21 +00:00
Francis Dupont
1016f2638f spelling 2009-01-18 00:34:19 +00:00
Francis Dupont
3b8b44559a spelling 2009-01-18 00:11:07 +00:00
Francis Dupont
23af793acb spelling 2009-01-18 00:06:06 +00:00
Automatic Updater
d362465c77 update copyright notice 2009-01-17 23:47:43 +00:00
Francis Dupont
0ef59d2288 spelling 2009-01-17 23:42:01 +00:00
Francis Dupont
b65746833b spelling 2009-01-17 23:13:19 +00:00
Francis Dupont
09eaa8e309 spelling 2009-01-17 15:18:15 +00:00
Francis Dupont
708383382f spelling 2009-01-17 15:12:26 +00:00
Francis Dupont
a344069fe8 spelling 2009-01-17 15:06:49 +00:00
Francis Dupont
bdfaef63f5 spelling 2009-01-17 14:59:03 +00:00
Francis Dupont
47b7dfffe5 spelling 2009-01-17 14:45:17 +00:00
Francis Dupont
584848087f spelling 2009-01-17 14:18:27 +00:00
Francis Dupont
340804cbdb spelling 2009-01-17 13:52:02 +00:00
Francis Dupont
a7e3a86619 spelling 2009-01-17 13:45:25 +00:00
Francis Dupont
08d44d4510 spelling 2009-01-17 13:33:29 +00:00
Francis Dupont
7d6d9c2240 spelling 2009-01-17 13:25:11 +00:00
Francis Dupont
45b4efd07f spelling 2009-01-17 12:56:23 +00:00
Francis Dupont
3678015d3f spelling 2009-01-17 11:57:25 +00:00
Automatic Updater
03faa7804e update copyright notice 2009-01-14 23:48:00 +00:00
Francis Dupont
fa7ef31685 integrate -P1 patch 2009-01-14 17:28:47 +00:00
Automatic Updater
9e0d0a279b update copyright notice 2009-01-09 23:47:46 +00:00
Tatuya JINMEI 神明達哉
7781f25078 2526. [func] New named option "attach-cache" that allows multiple 
views to share a single cache to save memory and
			improve lookup efficiency. [RT 18905]
 2009-01-09 22:24:37 +00:00
Automatic Updater
d7845fc5ba update copyright notice 2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉
609f86163a 2525. [func] New logging category "query-errors" to provide detailed 
internal information about query failures, especially
			about server failures. [RT #19027]
 2009-01-07 01:46:40 +00:00
Automatic Updater
0cfbb9285a update copyright notice 2009-01-06 23:47:57 +00:00
Francis Dupont
b393e55a76 bug in dns_nsec_typepresent() - 19112 2009-01-06 09:06:02 +00:00
Automatic Updater
5569e7de51 update copyright notice 2009-01-05 23:47:54 +00:00
Tatuya JINMEI 神明達哉
3fb1637c92 trivial comment cleanups (RT#19118) 2009-01-05 23:20:22 +00:00
Automatic Updater
c6b65dff51 update copyright notice 2008-12-17 23:47:58 +00:00
Tatuya JINMEI 神明達哉
10a6f640ed 2519. [bug] dig/host with -4 or -6 didn't work if more than two 
nameserver addresses of the excluded address family
			preceded in resolv.conf. [RT #19081]
 2008-12-17 19:19:29 +00:00
Mark Andrews
1ee054ca44 2518. [func] Add support for the new CERT types from RFC 4398. 
[RT #19077]
 2008-12-16 05:04:47 +00:00
Mark Andrews
8bf0c05627 2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel. 
[RT #19063]
 2008-12-14 21:14:54 +00:00
Mark Andrews
24450ad58d 2513 [bug] Fix windows cli build. [RT #19062] 2008-12-13 00:23:54 +00:00
Mark Andrews
47d89fcd4f 2512. [func] Print a summary of the cached records which make up 
the negative response.  [RT #18885]
 2008-12-12 04:41:25 +00:00
Mark Andrews
a5746c4ec1 2511. [cleanup] dns_rdata_tofmttext() add const to linebreak. 
[RT #18885]
 2008-12-12 04:37:24 +00:00
Automatic Updater
a8a8e73121 update copyright notice 2008-12-10 23:48:43 +00:00
Mark Andrews
92241b04f1 2509. [bug] Specifying a fixed query source port was broken. 
[RT #19051]
 2008-12-10 07:03:50 +00:00
Mark Andrews
3d4e5a200f remove XXXMPA 2008-12-03 02:11:32 +00:00
Mark Andrews
d8fc8514b1 2504. [bug] Address race condition in the socket code. [RT #18899] 2008-12-03 02:03:47 +00:00
Automatic Updater
f8f8a5b3a3 update copyright notice 2008-12-01 23:47:45 +00:00
Mark Andrews
04ec5b376d unsigned contants 2008-12-01 13:26:51 +00:00
Mark Andrews
36c12f1bb4 #undef inet_aton 2008-12-01 04:14:54 +00:00
Mark Andrews
9935447b51 2503. [port] linux: improve compatibility with Linux Standard 
Base. [RT #18793]
 2008-12-01 03:53:32 +00:00
Mark Andrews
ce1d07a80f out of memory condition could be missed. [RT #18970] 2008-12-01 00:15:37 +00:00
Mark Andrews
175a8bd2b7 2502. [cleanup] isc_radix: Improve compliance with coding style, 
document function in <isc/radix.h>. [RT #18534]
 2008-12-01 00:04:21 +00:00
Mark Andrews
46018d5d23 2501. [func] $GENERATE now supports all rdata types. Multi-field 
rdata types need to be quoted.  See the ARM for
                        details. [RT #18368]
 2008-11-30 23:49:21 +00:00
Automatic Updater
1f426f426e update copyright notice 2008-11-25 23:47:23 +00:00
Mark Andrews
9019569316 2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash. 
[RT #18837]
 2008-11-25 05:39:10 +00:00
Tatuya JINMEI 神明達哉
eb8265942b 2498. [bug] Removed a bogus function argument used with 
ISC_SOCKET_USE_POLLWATCH: it could cause compiler
			warning or crash named with the debug 1 level
			of logging. [RT #18917]

(Note that this entry is placed below the 9.6.0rc1 mark)
 2008-11-20 00:04:17 +00:00
Mark Andrews
9f41ec8010 1204 -> 1024U 2008-11-19 05:38:49 +00:00
Mark Andrews
e7ba4d8dc4 2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure 
delegation.
 2008-11-17 23:46:42 +00:00
Mark Andrews
ac4b736ab2 9.6.0rc1 2008-11-16 21:21:42 +00:00
Mark Andrews
81e5de1741 2496. [bug] Add sanity length checks to NSID option. [RT #18813] 2008-11-16 20:57:55 +00:00
Automatic Updater
49960a74b5 update copyright notice 2008-11-14 23:47:33 +00:00
Mark Andrews
50df1ec60a 2495. [bug] Tighten RRSIG checks. [RT #18795] 2008-11-14 22:53:46 +00:00
Mark Andrews
2628c71479 silence compiler warning. [RT #18990] 2008-11-14 14:07:48 +00:00
Mark Andrews
da2d57c8cf 2493. [bug] The linux capabilites code was not correctly cleaning 
up after itself. [RT #18767]
 2008-11-14 05:24:11 +00:00
Automatic Updater
cfeaf83e2b update copyright notice 2008-11-12 23:47:17 +00:00
Mark Andrews
96b3cb85d3 2491. [func] Attempt to re-use a local port if we are already using 
the port. [RT #18548]
 2008-11-12 23:10:57 +00:00
Mark Andrews
dc143a8f5c 2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO 
is cleared when IPV6_V6ONLY is set. [RT #18785]
 2008-11-12 03:52:32 +00:00
Mark Andrews
ac62b63619 add NULL gssapi fromlabel method. [RT #18877] 2008-11-11 03:55:01 +00:00
Tatuya JINMEI 神明達哉
f99fd90097 2489. [port] solaris: Workaround Solaris's kernel bug about 
/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]
 2008-11-08 22:35:12 +00:00
Mark Andrews
09b45f7b58 2487. [bug] Give TCP connections longer to complete. [RT #18675] 2008-11-07 00:52:34 +00:00
Mark Andrews
2cada19312 align comment w/ code [RT #18833] 2008-11-06 02:20:14 +00:00
Mark Andrews
09416abf2d remove debugging log that was accidently left in 2008-11-04 21:23:14 +00:00
Automatic Updater
d9edfd5642 update copyright notice 2008-11-02 23:47:01 +00:00
Francis Dupont
7b1a7a098b no chroot() in Win32 API 2008-11-02 12:48:39 +00:00
Mark Andrews
76bd01263f remove debugging printf 2008-10-29 05:53:12 +00:00
Mark Andrews
736e6a6709 2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain 
collisions.  [RT #18812]

2480.   [bug]           named could fail to emit all the required NSEC3
                        records.  [RT #18812]
 2008-10-29 04:54:00 +00:00
Tatuya JINMEI 神明達哉
ff2c81060f added pre-initialization check on cachedb->node_lock_count. 2008-10-27 22:43:34 +00:00
Mark Andrews
86ee7433b3 2475. [bug] LRU cache cleanup under overmem condition could purge 
particular entries more aggresively. [RT #17628]
 2008-10-27 03:52:43 +00:00
Evan Hunt
06a230fe9f 2474. [bug] ACL structures could be allocated with insufficient 
space, causing an array overrun. [RT #18765]
 2008-10-24 02:28:55 +00:00
Mark Andrews
455ada05af 2471. [bug] named-checkzone was not reporting missing manditory 
glue when sibling checks were disabled. [RT #18768]
 2008-10-24 00:28:00 +00:00
Mark Andrews
4ac81dfb30 silence compiler warning. [RT #18766] 2008-10-24 00:11:17 +00:00
Mark Andrews
0d444dc136 2470. [bug] Elements of the isc_radix_node_t could be incorrectly 
overwritten.  [RE# 18719]
 2008-10-23 00:00:58 +00:00
Tatuya JINMEI 神明達哉
35378bcc6a 2468. [bug] Resolver could try unreachable servers multiple times. 
[RT #18739]
 2008-10-17 21:58:09 +00:00
Tatuya JINMEI 神明達哉
b05585dcfe 2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740] 2008-10-17 21:49:23 +00:00
Mark Andrews
698a4dcc8a 2465. [bug] Adb's handling of lame addresses was different 
for IPv4 and IPv6. [RT #18738]
 2008-10-17 03:23:13 +00:00
Automatic Updater
87ecfd734c update copyright notice 2008-10-15 23:47:31 +00:00
Mark Andrews
f2d09cd90d silence coverity false positive 2008-10-15 04:22:30 +00:00
Mark Andrews
394c1ac533 evloop prototype. [RT #18196] 2008-10-15 03:41:17 +00:00
Mark Andrews
4aee922977 coverity analysis support. [RT #18196] 2008-10-15 03:29:13 +00:00
Mark Andrews
b018450b0e sig is only used if threads are in use. [RT #18196] 2008-10-15 03:21:22 +00:00
Tatuya JINMEI 神明達哉
2be6798f93 2457. [tuning] max-cache-size is reverted to 0, the previous 
default.  It should be safe because expired cache
			entries are also purged.
 2008-09-27 23:35:31 +00:00
Automatic Updater
cdbb3d2774 update copyright notice 2008-09-26 23:47:06 +00:00
Evan Hunt
b0bf1ad5b0 2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any 
address, regardless of family.  They now correctly
			distinguish IPv4 from IPv6.  [RT #18559]
 2008-09-26 21:12:02 +00:00
Evan Hunt
106360491a address review comment 2008-09-26 16:44:49 +00:00
Mark Andrews
dd14c953a8 unsigned constants 2008-09-26 01:27:08 +00:00
Mark Andrews
86e0a671ed 9.6.0a1 2008-09-25 04:39:58 +00:00
Mark Andrews
75a4ad0829 0 -> dns_rdatatype_none 2008-09-25 04:12:39 +00:00
Automatic Updater
3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews
eab4a5c29d 2455. [bug] Stop metadata being transfered via axfr/ixfr. 
[RT #18639]
 2008-09-25 03:49:55 +00:00
Mark Andrews
5737b74d34 2453. [bug] Remove NULL pointer dereference in dns_journal_print(). 
[RT #18316]

2452.   [func]          Improve bin/test/journalprint. [RT #18316]
 2008-09-25 02:01:45 +00:00
Evan Hunt
f66ac0c858 silence compiler warnings 2008-09-24 16:33:27 +00:00
Automatic Updater
6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Mark Andrews
11dbf2fc38 2447. [cleanup] libbind has been split out as a seperate produce. 2008-09-24 02:13:12 +00:00
Mark Andrews
c6c09f77f8 2444. [port] Linux, FreeBSD, AIX: Turn of path mtu discovery 
(clear DF) for UDP responses and requests.
 2008-09-23 02:20:21 +00:00
Michael Graff
467e6fd167 make the same change to win32/socket.c here as was made on v9_5 to fix connected UDP sockets 2008-09-16 17:19:01 +00:00
Mark Andrews
896f88361e 2442. [bug] A lock could be destroyed twice. [RT# 18626] 2008-09-14 04:54:49 +00:00
Automatic Updater
6011ef0f4d update copyright notice 2008-09-12 23:47:25 +00:00
Evan Hunt
5ce9206eb9 2441. [bug] isc_radix_insert() could copy radix tree nodes 
incompletely. [RT #18573]

2440.   [bug]		named-checkconf used an incorrect test to determine
			if an ACL was set to none.
 2008-09-12 06:02:31 +00:00
Evan Hunt
e80f661db8 possible null dereference in dns_acl_isanyornone() [rt18559] 2008-09-12 04:54:39 +00:00
Mark Andrews
691f1f7731 2438. [bug] Timeouts could be logged incorrectly under win32. 
2436.   [security]      win32: UDP client handler can be shutdown. [RT #18576]

2434.   [bug]           Fixed a minor error-reporting bug in
                        lib/isc/win32/socket.c.

2432.   [bug]           More Windows socket handling improvements.  Stop
                        using I/O events and use IO Completion Ports
                        throughout.  Rewrite the receive path logic to make
                        it easier to support multiple simultaneous
                        requestrs in the future.  Add stricter consistency
                        checking as a compile-time option (define
                        ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).

2420.   [bug]           Windows socket handling cleanup.  Let the io
                        completion event send out cancelled read/write
                        done events, which keeps us from writing to memeory
                        we no longer have ownership of.  Add debugging
                        socket_log() function.  Rework TCP socket handling
                        to not leak sockets.
 2008-09-12 04:46:25 +00:00
Evan Hunt
aeadcd6319 pull up windows acl leak fix from 9.5.0-P2-W1 2008-09-10 21:52:49 +00:00
Automatic Updater
e2c97aef51 update copyright notice 2008-09-08 23:47:10 +00:00
Mark Andrews
ac3d398b56 update 2008-09-08 08:55:05 +00:00
Mark Andrews
24119ac6bd update 2008-09-08 08:52:18 +00:00
Mark Andrews
612045f8e1 update 2008-09-08 08:49:24 +00:00
Mark Andrews
62e67fd6c0 update 2008-09-08 08:42:07 +00:00
Mark Andrews
922cb29cfe isc_portset_isset 2008-09-08 08:33:41 +00:00
Mark Andrews
327070c7e5 stats 2008-09-08 08:30:04 +00:00
Mark Andrews
ed9ca23065 syntax error 2008-09-08 08:28:08 +00:00
Mark Andrews
12eb8057cb portset 2008-09-08 08:26:28 +00:00
Mark Andrews
ab834d21f1 exports 2008-09-08 08:23:58 +00:00
Mark Andrews
2f88444e9a add portset 2008-09-08 07:06:15 +00:00
Mark Andrews
8343d55b3d windows implementation of isc_time_set 2008-09-08 06:53:10 +00:00
Mark Andrews
66d720025d update isc_time_set's description 2008-09-08 06:51:10 +00:00
Mark Andrews
739240a9d1 remove dns_stats_copy dns_stats_create dns_stats_destroy dns_stats_incrementcounter dns_zone_getstats 2008-09-08 05:59:11 +00:00
Mark Andrews
7e52028a83 remove dns_resolver_createdispatchpool 2008-09-08 05:41:22 +00:00
Mark Andrews
efc8a6ba16 remove dns_dispatch_hash 2008-09-08 05:35:06 +00:00
Mark Andrews
1d77be00c4 default maxsockets to 0 2008-09-08 05:30:35 +00:00
Mark Andrews
d8aa1541f0 move prototype out of #ifdef/#endif 2008-09-04 07:46:02 +00:00
Mark Andrews
0eeaaaf0ae 2398. [bug] Improve file descriptor management. New, 
temporary, named.conf option reserved-sockets,
                        default 512. [RT #18344]
 2008-09-04 05:56:43 +00:00
Mark Andrews
f5662f41e7 2433. [tuning] Set initial timeout to 800ms. 2008-09-04 04:23:43 +00:00