upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-28 01:28:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
23813 commits 18 branches 854 tags 440 MiB
Commit graph

994 commits

Author SHA1 Message Date
Tinderbox User
077f3c4e27 update copyright notice / whitespace 2017-09-14 00:03:54 +00:00
Evan Hunt
f07825440f [master] cleanup strcat/strcpy 
4722.	[cleanup]	Clean up uses of strcpy() and strcat() in favor of
			strlcpy() and strlcat() for safety. [RT #45981]

(cherry picked from commit 114f95089c)
(cherry picked from commit 7cd594b842)
(cherry picked from commit e0ddfb109e)
 2017-09-13 00:20:09 -07:00
Tinderbox User
907bd36c10 update copyright notice / whitespace 2017-09-12 23:50:35 +00:00
Mark Andrews
171f1f06ab 4714. [port] openbsd/libressl: add support for building with 
--enable-openssl-hash. [RT #45982]

(cherry picked from commit c75e9c7630)
 2017-09-12 14:24:14 +10:00
Tinderbox User
0b3fb0379d update copyright notice / whitespace 2017-07-11 01:47:26 +00:00
Mark Andrews
7015ac4491 4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message 
will not fit into a single IPv4 encapsulated IPv6
                        UDP packet when transmitted over a Ethernet link.
                        [RT #42871]

(cherry picked from commit 31ffec1541)
 2017-07-11 11:42:43 +10:00
Tinderbox User
07967caf75 update copyright notice / whitespace 2017-03-24 23:47:23 +00:00
Mark Andrews
8c2d209f09 4582. [security] 'rndc ""' could trigger a assertion failure in named. 
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
 2017-03-25 02:08:26 +11:00
Mark Andrews
182d657891 remove outdated cvs $Id strings 2017-02-03 18:44:36 +11:00
Evan Hunt
ad1ebb5b28 [v9_9] address portability issues 
(cherry picked from commit a2bd99a959)
 2017-01-30 16:52:42 -08:00
Tinderbox User
0ed649b6e5 update copyright notice / whitespace 2017-01-12 23:48:25 +00:00
Mark Andrews
ff963a5d93 4552. [bug] Named could trigger a assertion when sending notify 
messages. [RT #44019]

(cherry picked from commit 7b9e28f1a5)
 2017-01-12 14:14:05 +11:00
Tinderbox User
ff69a0423e update copyright notice / whitespace 2016-11-08 23:57:34 +00:00
Mark Andrews
964e19cea8 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] 2016-11-09 09:59:32 +11:00
Evan Hunt
60814deed8 [v9_9] make uninstall 
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
(cherry picked from commit 398f8c32f3)
 2016-11-01 20:22:35 -07:00
Mark Andrews
fa2ed4b627 update copyrights 2016-10-28 11:30:47 +11:00
Mark Andrews
9de8fa2535 4492. [bug] irs_resconf_load failed to initialise sortlistnxt 
causing bad writes if resolv.conf contained a
                        sortlist directive. [RT #43459]

(cherry picked from commit 55b78fff62)
 2016-10-27 13:20:39 +11:00
Tinderbox User
481a84d8ab update copyright notice / whitespace 2016-10-04 23:48:50 +00:00
Witold Krecicki
61a9e9108b [master] Fix a minor bug in isc_netaddr_masktoprefixlen 
(cherry picked from commit f78603b534)
 2016-10-05 09:07:30 +11:00
Tinderbox User
7e8f6348fc update copyright notice / whitespace 2016-09-07 23:46:39 +00:00
Mark Andrews
867ddf62f4 4461. [bug] win32: not all external data was properly marked 
as external data for windows dll. [RT #43161]
 2016-09-07 14:53:02 +10:00
Tinderbox User
9da1040540 update copyright notice / whitespace 2016-08-18 23:46:51 +00:00
Mark Andrews
12f7b04f08 install isc/errno.h 
(cherry picked from commit dec17fb662)
 2016-08-18 22:16:20 +10:00
Tinderbox User
65588217fc update copyright notice / whitespace 2016-08-17 23:46:55 +00:00
Evan Hunt
65e144e0de [v9_9] isc_errno_toresult() 
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]

(cherry picked from commit ddef16e1d9)
 2016-08-17 11:37:51 -07:00
Tinderbox User
c88775524d update copyright notice / whitespace 2016-05-05 23:47:00 +00:00
Evan Hunt
a1f4c3c55c [v9_9] nanosecond-accurate file modification times 
4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]
 2016-05-05 12:22:55 -07:00
Tinderbox User
42b854e5dd update copyright notice / whitespace 2016-03-23 23:46:03 +00:00
Evan Hunt
955c101ff5 [v9_9] disallow out-of-range descriptors in isc_socket_fdwatchcreate() 2016-03-22 18:12:07 -07:00
Tinderbox User
dc16fb4615 update copyright notice / whitespace 2016-03-04 23:46:07 +00:00
Mukund Sivaraman
65f562e5e4 Code cleanups (#41656) 
(cherry picked from commit 9da98335c1)
(cherry picked from commit b15dde2889)
 2016-03-04 13:00:43 +05:30
Tinderbox User
757b2400b8 update copyright notice / whitespace 2016-02-01 23:46:15 +00:00
Mukund Sivaraman
48915fab93 Use __built_expect() where available (#41411) 
(cherry picked from commit d1dbf6b20f)
(cherry picked from commit 6e2e0f72b1)
 2016-02-01 09:13:28 +05:30
Tinderbox User
d9acbe311a update copyright notice / whitespace 2015-12-11 23:47:08 +00:00
Evan Hunt
64fa79be37 [master] comments 
(cherry picked from commit f21d2ee372)
(cherry picked from commit f5f9dc0d83)
 2015-12-11 11:03:08 +05:30
Mukund Sivaraman
a28d8e8bf5 Improve performance of RBT (#41165) 
(cherry picked from commit 5d79b60fc5)
(cherry picked from commit 318158d66a)
 2015-12-11 10:29:36 +05:30
Tinderbox User
28f860c226 update copyright notice / whitespace 2015-11-20 23:46:13 +00:00
Mark Andrews
31085192d6 4264. [bug] Check const of strchr/strrchr assignments match 
argument's const status. [RT #41150]

(cherry picked from commit 5b1c7ef35b)
 2015-11-20 18:41:10 +11:00
Tinderbox User
4acf5216d7 update copyright notice / whitespace 2015-11-09 23:46:11 +00:00
Evan Hunt
7d984067ee [v9_9] fix python script versions 
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
 2015-11-08 21:41:04 -08:00
Evan Hunt
da7e65a6aa [v9_9] isc_atomic_storeq()/stats improvements 
4248.	[func]		Add an isc_atomic_storeq() function, use it in
			stats counters to improve performance.
			[RT #39972] [RT #39979]
 2015-10-28 22:22:04 -07:00
Tinderbox User
514488e7cf update copyright notice / whitespace 2015-10-15 23:46:07 +00:00
Mark Andrews
b2cb638754 4238. [bug] Don't send to servers on net zero (0.0.0.0/8). 
[RT #40947]

(cherry picked from commit 6588a2b404)
 2015-10-16 08:07:58 +11:00
Tinderbox User
ddd0dd179c update copyright notice / whitespace 2015-09-21 23:46:09 +00:00
Mark Andrews
1460b2afe3 4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK, 
EGAIN when these soft error are not retried for
                        isc_socket_send*().

(cherry picked from commit a21c415687)
 2015-09-21 18:05:39 +10:00
Tinderbox User
d901205191 update copyright notice / whitespace 2015-08-18 23:46:14 +00:00
Evan Hunt
05d0d33cb8 [v9_9] timing safe memory comparisons 
4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
			code. Also, the timing-safe comparison functions have
			been renamed to avoid possible confusion with
			memcmp(). [RT #40148]

(cherry picked from commit 420a43c8d8)
 2015-08-17 18:31:11 -07:00
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 23:00:58 -07:00
Mark Andrews
50a4326d7b #undef before #define 
(cherry picked from commit 503f0b324a)
 2015-05-24 06:05:26 +10:00