Evan Hunt
ae96d1f641
[v9_10] disallow out-of-range descriptors in isc_socket_fdwatchcreate()
2016-03-22 18:12:02 -07:00
Evan Hunt
4d8742e668
[v9_10] remove obsolete unit test
2016-03-22 17:46:16 -07:00
Tinderbox User
2a28287aa7
update copyright notice / whitespace
2016-03-22 23:45:30 +00:00
Mark Andrews
57564eff5f
4338. [bug] Reimplement change 4324 as it wasn't properly doing
...
all the required book keeping. [RT #41941 ]
(cherry picked from commit 558278974e )
2016-03-23 10:39:02 +11:00
Evan Hunt
c82e4d2379
[v9_10] fix mkeys TTL 0 issue
...
4337. [bug] The previous change exposed a latent flaw in
key refresh queries for managed-keys when
a cached DNSKEY had TTL 0. [RT #41986 ]
2016-03-22 12:13:25 -07:00
Tinderbox User
9861d0b5c6
update copyright notice / whitespace
2016-03-21 23:45:41 +00:00
Mark Andrews
b7e6ee04a7
4336. [bug] Don't emit records with zero ttl unless the records
...
were learnt with a zero ttl. [RT #41687 ]
(cherry picked from commit 0993cd5f22 )
2016-03-21 13:24:55 +11:00
Mark Andrews
21c7ebce7d
4335. [bug] zone->view could be detached too early. [RT #41942 ]
...
(cherry picked from commit b8dcc13bc5 )
2016-03-21 13:03:19 +11:00
Tinderbox User
2995f694f2
update copyright notice / whitespace
2016-03-11 23:45:45 +00:00
Mark Andrews
8a51afbac5
4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
...
2001:500:9f::42.
(cherry picked from commit 1add4a7939 )
2016-03-11 20:41:26 +11:00
Mark Andrews
35fed7be8c
9.10.4b2
2016-03-11 12:36:06 +11:00
Mark Andrews
3578e664e3
4331. [func] When loading managed signed zones detect if the
...
RRSIG's inception time is in the future and regenerate
the RRSIG immediately. [RT #41808 ]
(cherry picked from commit 7c52595464 )
2016-03-11 12:17:02 +11:00
Tinderbox User
48c13be6d9
update copyright notice / whitespace
2016-03-10 23:45:32 +00:00
Mark Andrews
9f8d166497
4330. [protocol] Identify the PAD option as "PAD" when printing out
...
a message.
(cherry picked from commit 33a4294f44 )
2016-03-10 16:54:08 +11:00
Mark Andrews
98e54554ed
silence compiler false positive
...
(cherry picked from commit 31a1cbf101 )
2016-03-10 08:43:47 +11:00
Mark Andrews
37a931d774
silence compiler warning
2016-03-09 14:43:27 +11:00
Mark Andrews
632f984881
silence compiler warning
...
(cherry picked from commit 0e5c8a65a2 )
2016-03-09 12:38:05 +11:00
Mark Andrews
13a95c3775
update copyrights
2016-03-08 16:20:10 +11:00
Mark Andrews
ff813ea134
add dns_name_isrfc1918 and dns_name_isula
...
(cherry picked from commit 56d1de40e4 )
2016-03-08 12:00:39 +11:00
Mark Andrews
b712215fcb
9.10.4b1
2016-03-08 11:53:41 +11:00
Mark Andrews
274ea210b0
sync w/ 9.10.3-P4
2016-03-08 11:34:15 +11:00
Tinderbox User
b45473686c
update copyright notice / whitespace
2016-03-07 23:45:44 +00:00
Mark Andrews
b8341f294c
4329. [func] Warn about a common misconfiguration when forwarding
...
RFC 1918 zones. [RT #41441 ]
2016-03-08 10:11:56 +11:00
Mukund Sivaraman
2a461f1348
Repack dns_rbtnode struct to gain some space (reduce packing holes) ( #41854 )
...
(cherry picked from commit 8dbf9ceb8c )
2016-03-07 16:16:32 +05:30
Evan Hunt
53bcdbd5e3
[v9_10] silence coverity warning
2016-03-05 19:50:51 -08:00
Mukund Sivaraman
19afa0cc8f
Fix rbt_remove_empty unittest
...
(reviewed by Evan on Jabber)
(cherry picked from commit f5cb0dd58b )
2016-03-05 13:55:10 +05:30
Tinderbox User
736b0ac1c8
update copyright notice / whitespace
2016-03-04 23:45:45 +00:00
Mukund Sivaraman
09b9ffc029
Revert DEFAULT_NODE_LOCK_COUNT back to 7 ( #40997 )
2016-03-04 16:30:33 +05:30
Mukund Sivaraman
1cbbc0bde6
Include missing isc/print.h
2016-03-04 14:56:58 +05:30
Mukund Sivaraman
491a5a2a3c
Check if threads support is available
...
(cherry picked from commit 2457a4b245 )
2016-03-04 14:06:32 +05:30
Mukund Sivaraman
cb93542612
Use libisc thread functions
...
(cherry picked from commit 051197362b )
2016-03-04 14:00:26 +05:30
Mukund Sivaraman
d820e8ff8a
Add dns_name_fromwire() benchmark
...
(cherry picked from commit 59328c7674 )
2016-03-04 13:47:31 +05:30
Mukund Sivaraman
666fa20ef3
Log query and depth counters during fetches when querytrace is enabled ( #41787 )
...
(cherry picked from commit 275265ab27 )
2016-03-04 13:26:33 +05:30
Evan Hunt
1c57a595b1
[rt41656] line length
...
(cherry picked from commit 6957e9451cc7bf89d44716dfe4266281867e00e5)
(cherry picked from commit d4ed29b019 )
2016-03-04 13:02:17 +05:30
Mark Andrews
d489cf8fd7
4326. [protocol] Add support for AVC. [RT #41819
...
(cherry picked from commit 8398f00156 )
2016-03-04 18:14:04 +11:00
Mukund Sivaraman
b15dde2889
Code cleanups ( #41656 )
...
(cherry picked from commit 9da98335c1 )
2016-03-04 12:23:32 +05:30
Evan Hunt
db06cd726c
[v9_10] recursively clean empty interior nodes when deleting database records
...
4324. [bug] When deleting records from a zone database, interior
nodes could be left empty but not deleted, damaging
search performance afterward. [RT #40997 ]
(cherry picked from commit 44c86318ed )
2016-03-03 21:15:21 -08:00
Tinderbox User
03eeffb060
update copyright notice / whitespace
2016-03-02 23:45:38 +00:00
Mark Andrews
62e7d7533a
4223. [bug] Improve HTTP header processing on statschannel.
...
[RT #41674 ]
(cherry picked from commit ce7216c40a )
2016-03-02 11:10:32 +11:00
Mark Andrews
c08e4c3636
silence may be used when unset false positive
...
(cherry picked from commit c7aae79b62 )
2016-02-29 11:25:08 +11:00
Mark Andrews
e87b18eb8f
more sit -> cookie cleanups
2016-02-29 11:15:44 +11:00
Mark Andrews
499952eb45
Part 2 of:
...
4319. [security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
(CVE-2016-1286) [RT #41753 ]
(cherry picked from commit 2de89ee9de )
2016-02-29 07:17:31 +11:00
Mark Andrews
7cd300abd6
4322. [security] Duplicate EDNS COOKIE options in a response could
...
trigger an assertion failure. (CVE-2016-2088)
[RT #41809 ]
(cherry picked from commit 455c0848f8 )
2016-02-27 11:46:16 +11:00
Mark Andrews
f0eb27c402
4321. [bug] Zones using mapped files containing out-of-zone data
...
could return SERVFAIL instead of the expected NODATA
or NXDOMAIN results. [RT #41596 ]
(cherry picked from commit f9da4a8e54 )
2016-02-24 11:25:04 +11:00
Tinderbox User
c2d5cfa264
update copyright notice / whitespace
2016-02-23 23:46:00 +00:00
Mukund Sivaraman
c685f0d741
Fix allocation for "none" ACL that caused assertion failure ( #41745 )
...
(cherry picked from commit 293a9e9978 )
2016-02-23 12:57:08 +05:30
Mukund Sivaraman
456e1eadd2
Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) ( #41753 )
...
(cherry picked from commit 5995fec51c )
2016-02-22 12:24:15 +05:30
Tinderbox User
160c8ad89d
update copyright notice / whitespace
2016-02-18 23:45:59 +00:00
Mark Andrews
e7e15d1302
4318. [security] Malformed control messages can trigger assertions
...
in named and rndc. (CVE-2016-1285) [RT #41666 ]
(cherry picked from commit a2b15b3305 )
2016-02-18 12:12:02 +11:00
Mark Andrews
849e9d6dce
4317. [bug] Age all unused servers on fetch timeout. [RT #41597 ]
...
(cherry picked from commit d372f426ca )
2016-02-12 12:34:49 +11:00