Commit graph

1747 commits

Author SHA1 Message Date
Tinderbox User
8eb77bc70b update copyright notice / whitespace 2015-05-11 23:46:10 +00:00
Mark Andrews
20890f61bf use dns_opcode_t
(cherry picked from commit 844b568182)
2015-05-11 12:17:50 +10:00
Tinderbox User
9bd61f393f update copyright notice / whitespace 2015-04-28 23:46:12 +00:00
Mark Andrews
fdb83d87d6 4110. [bug] Address memory leaks / null pointer dereferences
on out of memory. [RT #39310]

(cherry picked from commit b292230ab8)
2015-04-29 03:37:25 +10:00
Tinderbox User
124e64db5e update copyright notice / whitespace 2015-03-04 23:46:08 +00:00
Mark Andrews
263413c7a7 4082. [bug] Incrementally sign large inline zone deltas.
[RT #37927]

(cherry picked from commit 1b05d22789)
2015-03-05 10:08:11 +11:00
Tinderbox User
15dce01ef4 update copyright notice / whitespace 2015-02-26 23:46:12 +00:00
Evan Hunt
14926c3403 [v9_9] fix LOADPENDING issues
4063.	[bug]		Asynchronous zone loads were not handled
			correctly when the zone load was already in
			progress; this could trigger a crash in zt.c.
			[RT #37573]

(cherry picked from commit 7acc2f2156)
(cherry picked from commit 62fd632bcb)
2015-02-25 16:12:34 -08:00
Tinderbox User
9cbd625449 update copyright notice / whitespace 2015-01-20 23:47:26 +00:00
Mark Andrews
398a63d660 4038. [bug] Add 'rpz' flag to node and use it to determine whether
to call dns_rpz_delete.  This should prevent unbalanced
                        add / delete calls. [RT #36888

(cherry picked from commit cc0a48a381)
2015-01-20 17:48:51 +11:00
Tinderbox User
19c3ef455b update copyright notice / whitespace 2014-12-03 23:46:11 +00:00
Mark Andrews
bbc8cca27d 4015. [bug] Nameservers that are skipped due to them being
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]

(cherry picked from commit ea3aa401bc)
2014-12-03 11:47:10 +11:00
Evan Hunt
1d47cb124d [v9_9] refactor max-recursion-queries
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
(cherry picked from commit 6c049c57d9)
2014-11-19 18:38:52 -08:00
Evan Hunt
711e833921 [v9_9] add max-recursion-queries
also fixes and documentation for max-recursion-depth

(cherry picked from commit c4f54e5bd1)
(cherry picked from commit b3aa528d7e)
2014-11-18 22:14:55 -08:00
Evan Hunt
603a0e2637 [v9_9] limit recursion depth and iterative queries
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
2014-11-17 23:49:07 -08:00
Tinderbox User
aaa24cf075 update copyright notice 2014-09-30 23:47:13 +00:00
Mark Andrews
650404030c 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
BADSIG.  [RT #37216]

(cherry picked from commit a6869655d6)
2014-10-01 07:43:17 +10:00
Mark Andrews
13ffd78910 3908. [bug] rndc now differentiates between a zone in multiple
views and a zone that doesn't exist at all. [RT #36691]

(cherry picked from commit c38341ec43)
2014-08-02 15:09:03 +10:00
Mark Andrews
570effe386 3904. [func] Add the RPZ SOA to the additional section. [RT36507]
(cherry picked from commit 3a55d43527)
2014-07-31 10:53:33 +10:00
Tinderbox User
18ae2b1347 update copyright notice 2014-05-21 23:46:07 +00:00
Mark Andrews
a86bb63d99 3855. [bug] Limit smoothed round trip time aging to no more than
once a second. [RT #32909]

(cherry picked from commit 0fe0789181)
2014-05-21 11:09:56 +10:00
Mark Andrews
28f0e82bea 3838. [protocol] EDNS EXPIRE as been assigned a code point of 9. 2014-05-09 12:09:54 +10:00
Tinderbox User
853c451dc5 update copyright notice 2014-05-08 23:46:02 +00:00
Mark Andrews
2fd5f9a326 s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/
(cherry picked from commit 801b958a5c)
2014-05-08 11:43:45 +10:00
Mark Andrews
375dac22e4 define DNS_OPT_EDNSOPTIONS
(cherry picked from commit 72ba6ba736)
2014-05-08 11:39:56 +10:00
Tinderbox User
ed32138fe7 update copyright notice 2014-05-02 23:46:00 +00:00
Mark Andrews
b9d7857d16 3836. [bug] Address C++ keyword usage in header file.
(cherry picked from commit dd820d8fd2)
2014-05-02 11:36:12 +10:00
Tinderbox User
6ec060a1f9 update copyright notice 2014-04-29 23:46:03 +00:00
Evan Hunt
7939308755 [v9_9] SIT/max-cache-size flag collision
3824.	[bug]		A collision between two flag values could cause
			problems with cache cleaning when SIT was enabled.
			[RT #35858]

(cherry picked from commit e01fbe2a45)
2014-04-29 11:28:11 +10:00
Mark Andrews
34c6d20fe3 sort
(cherry picked from commit 51af0a72ad)
2014-04-08 10:44:01 +10:00
Mark Andrews
81697d5d7a order.h
(cherry picked from commit c7bd423cec)
2014-04-08 10:38:44 +10:00
Mark Andrews
7908a238dd 3802. [bug] Various header files were not being installed
(cherry picked from commit 866606b9c7)
2014-04-04 22:06:24 +11:00
Tinderbox User
ed05579879 update copyright notice 2014-03-27 23:45:30 +00:00
Mark Andrews
caf94c7fbe fix typo in comment
(cherry picked from commit 6d5740075b)
2014-03-27 18:22:06 +11:00
Tinderbox User
6e1a48501e update copyright notice 2014-02-07 23:45:57 +00:00
Evan Hunt
c2d3d0eda5 [v9_9] add no-case-compress
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]

(cherry picked from commit 166341d554)
2014-02-06 19:42:39 -08:00
Tinderbox User
f148939b08 update copyright notice 2014-01-30 23:45:43 +00:00
Mark Andrews
52f0c7ba83 3720. [bug] Address compiler warnings. [RT #35261]
(cherry picked from commit 63add83a26)
2014-01-30 10:33:52 +11:00
Tinderbox User
c5917963bc update copyright notice 2014-01-27 23:45:47 +00:00
Mark Andrews
736db05eb6 doxygen markup
(cherry picked from commit bc28371004d70b17f0ca872da8bd84e70591eaf4)
2014-01-28 09:13:06 +11:00
Tinderbox User
ba3a0473b5 update copyright notice 2014-01-13 23:45:42 +00:00
Evan Hunt
65510ca0d7 [v9_9] See ticket 35140 for details.
Install some include files:

dns/client.h
dns/compress.h
dns/tsec.h
irs/resconf.h
irs/types.h
(I noticed these when building DHCP using installed BIND9.)

This was okayed during the 2014-01-02 BIND9 phone meeting.

(cherry picked from commit c55b7dce48)
2014-01-13 15:18:29 -08:00
Tinderbox User
c75c9ee78e update copyright notice 2013-12-11 23:46:56 +00:00
Evan Hunt
2c73b0a857 [v9_9] dnssec-signzone -Q
3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
			that are still published but no longer active.
			[RT #34990]

(cherry picked from commit 0bbe3273a2)
2013-12-11 13:25:44 -08:00
Mark Andrews
a0095a7c1a update copyrights 2013-12-05 15:13:01 +11:00
Mark Andrews
3b38a23089 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]

(cherry picked from commit c3c8823fed)

Conflicts:
	CHANGES
	bin/check/win32/checktool.dsp.in
	bin/dnssec/win32/dnssectool.dsp.in
	bin/dnssec/win32/importkey.dsp.in
	bin/dnssec/win32/importkey.mak.in
	bin/named/geoip.c
	bin/named/include/named/geoip.h
	bin/tools/win32/rrchecker.dsp.in
	bin/tools/win32/rrchecker.mak.in
	config.h.win32
	lib/dns/geoip.c
	lib/dns/master.c
	lib/dns/win32/libdns.dsp.in
	lib/dns/win32/libdns.mak.in
	lib/isc/mem.c
	lib/isc/stats.c
	lib/isc/win32/file.c
	lib/isc/win32/libisc.def.in
	lib/isc/win32/libisc.mak.in
	lib/isc/win32/stdio.c
	lib/isccc/cc.c
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/makeversion.pl
	win32utils/setpk11provider.pl
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt
2013-12-04 13:48:45 +11:00
Tinderbox User
a960d3a679 update copyright notice 2013-11-13 23:45:54 +00:00
Evan Hunt
eaa4ead2bd [v9_9] allow setting local addr in dns_client
3672.	[func]		Local address can now be specified when using
			dns_client API. [RT #34811]

(cherry picked from commit 0618287859)
2013-11-13 10:57:50 -08:00
Mark Andrews
2e4548087a 3642. [func] Allow externally generated DNSKEY to be imported
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
2013-11-13 12:54:37 +11:00
Tinderbox User
2db9d480e8 update copyright notice 2013-09-23 23:45:46 +00:00