Commit graph

9926 commits

Author SHA1 Message Date
Evan Hunt
ae96d1f641 [v9_10] disallow out-of-range descriptors in isc_socket_fdwatchcreate() 2016-03-22 18:12:02 -07:00
Evan Hunt
4d8742e668 [v9_10] remove obsolete unit test 2016-03-22 17:46:16 -07:00
Tinderbox User
2a28287aa7 update copyright notice / whitespace 2016-03-22 23:45:30 +00:00
Mark Andrews
57564eff5f 4338. [bug] Reimplement change 4324 as it wasn't properly doing
all the required book keeping. [RT #41941]

(cherry picked from commit 558278974e)
2016-03-23 10:39:02 +11:00
Evan Hunt
c82e4d2379 [v9_10] fix mkeys TTL 0 issue
4337.	[bug]		The previous change exposed a latent flaw in
			key refresh queries for managed-keys when
			a cached DNSKEY had TTL 0. [RT #41986]
2016-03-22 12:13:25 -07:00
Tinderbox User
9861d0b5c6 update copyright notice / whitespace 2016-03-21 23:45:41 +00:00
Mark Andrews
b7e6ee04a7 4336. [bug] Don't emit records with zero ttl unless the records
were learnt with a zero ttl. [RT #41687]

(cherry picked from commit 0993cd5f22)
2016-03-21 13:24:55 +11:00
Mark Andrews
21c7ebce7d 4335. [bug] zone->view could be detached too early. [RT #41942]
(cherry picked from commit b8dcc13bc5)
2016-03-21 13:03:19 +11:00
Tinderbox User
2995f694f2 update copyright notice / whitespace 2016-03-11 23:45:45 +00:00
Mark Andrews
8a51afbac5 4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
2001:500:9f::42.

(cherry picked from commit 1add4a7939)
2016-03-11 20:41:26 +11:00
Mark Andrews
35fed7be8c 9.10.4b2 2016-03-11 12:36:06 +11:00
Mark Andrews
3578e664e3 4331. [func] When loading managed signed zones detect if the
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]

(cherry picked from commit 7c52595464)
2016-03-11 12:17:02 +11:00
Tinderbox User
48c13be6d9 update copyright notice / whitespace 2016-03-10 23:45:32 +00:00
Mark Andrews
9f8d166497 4330. [protocol] Identify the PAD option as "PAD" when printing out
a message.

(cherry picked from commit 33a4294f44)
2016-03-10 16:54:08 +11:00
Mark Andrews
98e54554ed silence compiler false positive
(cherry picked from commit 31a1cbf101)
2016-03-10 08:43:47 +11:00
Mark Andrews
37a931d774 silence compiler warning 2016-03-09 14:43:27 +11:00
Mark Andrews
632f984881 silence compiler warning
(cherry picked from commit 0e5c8a65a2)
2016-03-09 12:38:05 +11:00
Mark Andrews
13a95c3775 update copyrights 2016-03-08 16:20:10 +11:00
Mark Andrews
ff813ea134 add dns_name_isrfc1918 and dns_name_isula
(cherry picked from commit 56d1de40e4)
2016-03-08 12:00:39 +11:00
Mark Andrews
b712215fcb 9.10.4b1 2016-03-08 11:53:41 +11:00
Mark Andrews
274ea210b0 sync w/ 9.10.3-P4 2016-03-08 11:34:15 +11:00
Tinderbox User
b45473686c update copyright notice / whitespace 2016-03-07 23:45:44 +00:00
Mark Andrews
b8341f294c 4329. [func] Warn about a common misconfiguration when forwarding
RFC 1918 zones. [RT #41441]
2016-03-08 10:11:56 +11:00
Mukund Sivaraman
2a461f1348 Repack dns_rbtnode struct to gain some space (reduce packing holes) (#41854)
(cherry picked from commit 8dbf9ceb8c)
2016-03-07 16:16:32 +05:30
Evan Hunt
53bcdbd5e3 [v9_10] silence coverity warning 2016-03-05 19:50:51 -08:00
Mukund Sivaraman
19afa0cc8f Fix rbt_remove_empty unittest
(reviewed by Evan on Jabber)

(cherry picked from commit f5cb0dd58b)
2016-03-05 13:55:10 +05:30
Tinderbox User
736b0ac1c8 update copyright notice / whitespace 2016-03-04 23:45:45 +00:00
Mukund Sivaraman
09b9ffc029 Revert DEFAULT_NODE_LOCK_COUNT back to 7 (#40997) 2016-03-04 16:30:33 +05:30
Mukund Sivaraman
1cbbc0bde6 Include missing isc/print.h 2016-03-04 14:56:58 +05:30
Mukund Sivaraman
491a5a2a3c Check if threads support is available
(cherry picked from commit 2457a4b245)
2016-03-04 14:06:32 +05:30
Mukund Sivaraman
cb93542612 Use libisc thread functions
(cherry picked from commit 051197362b)
2016-03-04 14:00:26 +05:30
Mukund Sivaraman
d820e8ff8a Add dns_name_fromwire() benchmark
(cherry picked from commit 59328c7674)
2016-03-04 13:47:31 +05:30
Mukund Sivaraman
666fa20ef3 Log query and depth counters during fetches when querytrace is enabled (#41787)
(cherry picked from commit 275265ab27)
2016-03-04 13:26:33 +05:30
Evan Hunt
1c57a595b1 [rt41656] line length
(cherry picked from commit 6957e9451cc7bf89d44716dfe4266281867e00e5)
(cherry picked from commit d4ed29b019)
2016-03-04 13:02:17 +05:30
Mark Andrews
d489cf8fd7 4326. [protocol] Add support for AVC. [RT #41819
(cherry picked from commit 8398f00156)
2016-03-04 18:14:04 +11:00
Mukund Sivaraman
b15dde2889 Code cleanups (#41656)
(cherry picked from commit 9da98335c1)
2016-03-04 12:23:32 +05:30
Evan Hunt
db06cd726c [v9_10] recursively clean empty interior nodes when deleting database records
4324.	[bug]		When deleting records from a zone database, interior
			nodes could be left empty but not deleted, damaging
			search performance afterward. [RT #40997]

(cherry picked from commit 44c86318ed)
2016-03-03 21:15:21 -08:00
Tinderbox User
03eeffb060 update copyright notice / whitespace 2016-03-02 23:45:38 +00:00
Mark Andrews
62e7d7533a 4223. [bug] Improve HTTP header processing on statschannel.
[RT #41674]

(cherry picked from commit ce7216c40a)
2016-03-02 11:10:32 +11:00
Mark Andrews
c08e4c3636 silence may be used when unset false positive
(cherry picked from commit c7aae79b62)
2016-02-29 11:25:08 +11:00
Mark Andrews
e87b18eb8f more sit -> cookie cleanups 2016-02-29 11:15:44 +11:00
Mark Andrews
499952eb45 Part 2 of:
4319.   [security]      Fix resolver assertion failure due to improper
                        DNAME handling when parsing fetch reply messages.
                        (CVE-2016-1286) [RT #41753]

(cherry picked from commit 2de89ee9de)
2016-02-29 07:17:31 +11:00
Mark Andrews
7cd300abd6 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]

(cherry picked from commit 455c0848f8)
2016-02-27 11:46:16 +11:00
Mark Andrews
f0eb27c402 4321. [bug] Zones using mapped files containing out-of-zone data
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]

(cherry picked from commit f9da4a8e54)
2016-02-24 11:25:04 +11:00
Tinderbox User
c2d5cfa264 update copyright notice / whitespace 2016-02-23 23:46:00 +00:00
Mukund Sivaraman
c685f0d741 Fix allocation for "none" ACL that caused assertion failure (#41745)
(cherry picked from commit 293a9e9978)
2016-02-23 12:57:08 +05:30
Mukund Sivaraman
456e1eadd2 Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753)
(cherry picked from commit 5995fec51c)
2016-02-22 12:24:15 +05:30
Tinderbox User
160c8ad89d update copyright notice / whitespace 2016-02-18 23:45:59 +00:00
Mark Andrews
e7e15d1302 4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

(cherry picked from commit a2b15b3305)
2016-02-18 12:12:02 +11:00
Mark Andrews
849e9d6dce 4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
(cherry picked from commit d372f426ca)
2016-02-12 12:34:49 +11:00