Commit graph

1013 commits

Author SHA1 Message Date
Francis Dupont
185762b486 Merged rt43076 (log PKCS#11 provider load failure) 2016-08-22 14:08:33 +02:00
Tinderbox User
9831d2c6e5 update copyright notice / whitespace 2016-08-19 01:23:59 +00:00
Evan Hunt
b57eef8c27 [v9_10] clarify README.site
(cherry picked from commit 6d2963e4d4)
2016-08-18 17:53:03 -07:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Mark Andrews
10793ed5fd install isc/errno.h
(cherry picked from commit dec17fb662)
2016-08-18 22:14:55 +10:00
Tinderbox User
83b6462693 update copyright notice / whitespace 2016-08-17 23:46:31 +00:00
Evan Hunt
ddef16e1d9 [v9_10] isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]
2016-08-17 11:32:16 -07:00
Mark Andrews
fdcca0a23e 4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
will not fit into a single IPv4 encapsulated IPv6
                        UDP packet when transmitted over a Ethernet link.
                        [RT #42871]

(cherry picked from commit 31ffec1541)
2016-08-12 09:44:02 +10:00
Tinderbox User
5cebccfd7e update copyright notice / whitespace 2016-05-05 23:46:25 +00:00
Evan Hunt
19a4cb16fc [v9_10] nanosecond-accurate file modification times
4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]
2016-05-05 12:22:49 -07:00
Evan Hunt
38e0fc106e [v9_10] update pkcs11 headers
4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]
2016-05-04 16:06:51 -07:00
Tinderbox User
63741d968f update copyright notice / whitespace 2016-03-23 23:45:41 +00:00
Evan Hunt
ae96d1f641 [v9_10] disallow out-of-range descriptors in isc_socket_fdwatchcreate() 2016-03-22 18:12:02 -07:00
Tinderbox User
736b0ac1c8 update copyright notice / whitespace 2016-03-04 23:45:45 +00:00
Mukund Sivaraman
b15dde2889 Code cleanups (#41656)
(cherry picked from commit 9da98335c1)
2016-03-04 12:23:32 +05:30
Tinderbox User
724704f65b update copyright notice / whitespace 2016-02-01 23:45:54 +00:00
Mukund Sivaraman
6e2e0f72b1 Use __built_expect() where available (#41411)
(cherry picked from commit d1dbf6b20f)
2016-02-01 09:07:12 +05:30
Tinderbox User
c547a8836b update copyright notice / whitespace 2015-12-10 23:46:42 +00:00
Evan Hunt
f5f9dc0d83 [master] comments
(cherry picked from commit f21d2ee372)
2015-12-10 22:57:00 +05:30
Mukund Sivaraman
318158d66a Improve performance of RBT (#41165)
(cherry picked from commit 5d79b60fc5)
2015-12-10 22:52:52 +05:30
Tinderbox User
b66e3a7eeb update copyright notice / whitespace 2015-11-20 23:45:52 +00:00
Mark Andrews
dbeb3f06ff 4264. [bug] Check const of strchr/strrchr assignments match
argument's const status. [RT #41150]

(cherry picked from commit 5b1c7ef35b)
2015-11-20 18:39:57 +11:00
Tinderbox User
a68111c6f9 update copyright notice / whitespace 2015-11-09 23:45:50 +00:00
Evan Hunt
fbf5b36b69 [v9_10] fix python script versions
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
2015-11-08 21:36:27 -08:00
Evan Hunt
db67a07ab8 [v9_10] isc_atomic_storeq()/stats improvements
4248.	[func]		Add an isc_atomic_storeq() function, use it in
			stats counters to improve performance.
			[RT #39972] [RT #39979]
2015-10-28 22:19:58 -07:00
Tinderbox User
a793df69e9 update copyright notice / whitespace 2015-10-15 23:45:49 +00:00
Mark Andrews
1237d81417 4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
[RT #40947]

(cherry picked from commit 6588a2b404)
2015-10-16 08:07:35 +11:00
Tinderbox User
f8392ea370 update copyright notice / whitespace 2015-09-21 23:45:51 +00:00
Mark Andrews
e4f94ceb13 4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
EGAIN when these soft error are not retried for
                        isc_socket_send*().

(cherry picked from commit a21c415687)
2015-09-21 18:04:57 +10:00
Tinderbox User
f21b6da8ff update copyright notice / whitespace 2015-08-19 23:45:50 +00:00
Evan Hunt
cd6122b164 [v9_10] timing safe memory comparisons
4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
			code. Also, the timing-safe comparison functions have
			been renamed to avoid possible confusion with
			memcmp(). [RT #40148]

(cherry picked from commit 420a43c8d8)
2015-08-17 18:28:27 -07:00
Tinderbox User
a704920204 update copyright notice / whitespace 2015-07-09 23:45:51 +00:00
Evan Hunt
83d0b1ab69 [v9_10] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:55:31 -07:00
Tinderbox User
b08498ecf9 update copyright notice / whitespace 2015-06-05 23:45:53 +00:00
Mark Andrews
9cc1d6b878 4133. [port] Update how various json libraries are handled.
[RT #39646]

(cherry picked from commit 8a9bac8dec)
2015-06-05 10:17:10 +10:00
Mark Andrews
1d86bbd908 #undef before #define
(cherry picked from commit 503f0b324a)
2015-05-24 06:04:44 +10:00
Tinderbox User
3f319600ef update copyright notice / whitespace 2015-05-22 23:45:52 +00:00
Mark Andrews
1e9f8e4dfe unconditionally include stdio.h
(cherry picked from commit 22909ca827)
2015-05-22 10:08:56 +10:00
Evan Hunt
54b00a777b [v9_10] add %z format options to printf
4123.	[port]		Added %z (size_t) format options to the portable
			internal printf/sprintf implementation. [RT #39586]

(cherry picked from commit cadf8d687b)
2015-05-21 14:55:38 -07:00
Mark Andrews
2865753e29 4110. [bug] Address memory leaks / null pointer dereferences
on out of memory. [RT #39310]

(cherry picked from commit b292230ab8)
2015-04-29 03:18:04 +10:00
Tinderbox User
332ca2a157 update copyright notice / whitespace 2015-02-26 23:45:49 +00:00
Mukund Sivaraman
9b56539c01 Fix a segfault when running nslookup (#38548)
(cherry picked from commit db93c0def5)
2015-02-26 14:07:14 +05:30
Evan Hunt
8dfc6c27f1 [v9_10] Add facility to run system test nameds under Valgrind (#38546) 2015-02-25 16:21:49 -08:00
Mark Andrews
af0cbd44b3 4025. [port] bsdi: failed to build. [RT #38047]
(cherry picked from commit 00bb9b88cecf7e2c365c9f008c049da3802ac415)
2014-12-19 11:56:02 +11:00
Evan Hunt
c58e4a4503 [v9_10] remove inadvertently-retained content from quota.h 2014-11-20 12:55:25 -08:00
Evan Hunt
6c049c57d9 [v9_10] refactor max-recursion-queries
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
2014-11-19 18:26:46 -08:00
Evan Hunt
53b733da7f [v9_10] fix false positive compiler warning
a "pointer always evaluates to true" warning was blocking
compilation of the radix ATF test when using --enable-developer
with gcc 4.8.2.
2014-11-15 00:55:06 -08:00
Tinderbox User
c16cf64ba5 update copyright notice 2014-09-29 23:45:52 +00:00
Mark Andrews
319659fc23 3955. [bug] Notify messages due to changes are no longer queued
behind startup notify messages. [RT #24454]
2014-09-29 09:32:22 +10:00
Tinderbox User
be5457a1e5 update copyright notice 2014-08-02 23:45:46 +00:00