Commit graph

5910 commits

Author SHA1 Message Date
Tinderbox User
f9ac1dde8f update copyright notice 2014-06-12 23:45:45 +00:00
Evan Hunt
099e457c77 [v9_10] address rpz bugs
3877.	[bug]		Inserting and deleting parent and child nodes
			in response policy zones could trigger an assertion
			failure. [RT #36272]

(cherry picked from commit 06e0d6bb12)
2014-06-11 20:01:21 -07:00
Mark Andrews
e3779a2642 make lhs unsigned
(cherry picked from commit 1208790272)
2014-06-12 11:13:48 +10:00
Mark Andrews
615ff95bd1 add INSISTs to silence tainted data false positive in Coverity
(cherry picked from commit 83a5c670b8)
2014-06-12 10:50:19 +10:00
Mark Andrews
0f09809855 add INSISTs to silence tainted data false positive in Coverity
(cherry picked from commit 8a2ff13c3d)
2014-06-12 10:46:24 +10:00
Mark Andrews
555137ee1f 3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
(cherry picked from commit 634f66c659dade56502b55b1bbd514e5cfcae185)
2014-06-10 09:30:04 +10:00
Mark Andrews
9becd4c7d6 3872. [bug] Address issues found by static analysis. [RT #36209]
(cherry picked from commit b16d99bac1)
2014-06-10 09:22:43 +10:00
Mukund Sivaraman
2a7ecad81b [35063] Don't publish an activated key automatically before its publish time
(cherry picked from commit 79d27f505a)
2014-06-04 15:23:56 +05:30
Mark Andrews
29b682f68d attempt to silence leaked lock false positive 2014-06-04 15:23:07 +10:00
Mark Andrews
d2fbb50b98 place a upper bound on rdcount 2014-06-04 13:16:42 +10:00
Mark Andrews
73086f17b0 update copyrights 2014-05-30 09:42:32 +10:00
Evan Hunt
1c961887b8 [v9_10] Add various RBT unit tests
3865.	[test]		Improved testability of the red-black tree
			implementation and added unit tests. [RT #35904]
2014-05-29 12:30:33 -07:00
Mark Andrews
753d85520a silence coverity warning 2014-05-28 10:44:18 +10:00
Mark Andrews
298b35a1df 3861. [security] Missing isc_buffer_availablelength check results
in a REQUIRE assertion when printing out a packet.
                        [RT #36078]
2014-05-25 12:39:52 +10:00
Mark Andrews
666e734005 correct EDNSOK sense 2014-05-22 22:02:29 +10:00
Mark Andrews
624b99c749 3857. [bug] Make it harder for a incorrect NOEDNS classification
to be made. [RT #36020]
2014-05-22 21:39:20 +10:00
Tinderbox User
3ce6761246 update copyright notice 2014-05-21 23:45:48 +00:00
Mark Andrews
653b4fbf79 remove unused assignment
(cherry picked from commit a771e8c154d85dea18c2ae77dbc082d197ba433a)
2014-05-22 00:57:29 +10:00
Mark Andrews
56f9a15e47 3855. [bug] Limit smoothed round trip time aging to no more than
once a second. [RT #32909]

(cherry picked from commit 0fe0789181)
2014-05-21 10:16:20 +10:00
Mark Andrews
e59b84417b 3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out
the handling of a rdataset with no records. [RT #35968]

(cherry picked from commit 27b09ceb12)
2014-05-20 11:37:28 +10:00
Mark Andrews
60e7e63a72 3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
[RT #35969]

(cherry picked from commit ae5335dcd9d750312a4fa455495080fcb314b9d8)
2014-05-13 12:47:27 +10:00
Mark Andrews
eac1484001 suppress clang static analysis warning
(cherry picked from commit e188b84bc4)
2014-05-11 10:48:23 +10:00
Mark Andrews
64f015935f 3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
[RT #35924]

(cherry picked from commit faa01edd13)
2014-05-08 09:39:06 +10:00
Mark Andrews
7062c5fb25 3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
(cherry picked from commit cd07e4d038)
2014-05-05 16:41:17 +10:00
Mark Andrews
29e6ce6e60 3837. [security] A NULL pointer is passed to query_prefetch resulting
a REQUIRE assertion failure when a fetch is actually
                        initiated.  [ RT #35899]

Squashed commit of the following:

commit 7f4e1f3917d743089c42cc52ec2c0eea598d2c00
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun May 4 22:34:34 2014 +0530

    Fix a comment

commit 6a35a6a2346013fa8e3798b9b680d8a3031fcb03
Author: Mark Andrews <marka@isc.org>
Date:   Sun May 4 23:34:25 2014 +1000

    pass the correct name to query_prefetch

(cherry picked from commit b36fc8294e)
2014-05-05 10:12:39 +10:00
Tinderbox User
76bc53b31f update copyright notice 2014-05-02 23:45:43 +00:00
Mark Andrews
7848d72398 3836. [bug] Address C++ keyword usage in header file.
(cherry picked from commit dd820d8fd2)
2014-05-02 11:35:45 +10:00
Mark Andrews
1a1b313cab dec_adbstats should decrement rather than increment
(cherry picked from commit 3b27d9a318)
2014-05-01 20:59:10 +10:00
Mark Andrews
7ef8ac49b3 protect geoip_elem use with HAVE_GEOIP
(cherry picked from commit c2638d3d5a)
2014-05-01 15:03:42 +10:00
Mark Andrews
993f91edc0 silence compiler warning
(cherry picked from commit ab02ecbb30)
2014-05-01 14:55:21 +10:00
Mark Andrews
ab7e5820b2 silence NULL pointer dereference warning
(cherry picked from commit 4442141672)
2014-05-01 14:23:56 +10:00
Evan Hunt
4266ef751e [v9_10] fixed geoip elements in named ACLs
3835.	[bug]		Geoip ACL elements didn't work correctly when
                        referenced via named or nested ACLs. [RT #35879]

(cherry picked from commit c0c4512020)
2014-04-30 20:23:38 -07:00
Mark Andrews
204d10864c 3834. [bug] The re-signing heaps were not being updated soon enough
leading to multiple re-generations of the same RRSIG
                        when a zone transfer was in progress. [RT #35273]

(cherry picked from commit 5d739300d1)
2014-04-30 11:58:31 +10:00
Evan Hunt
22cededc29 [v9_10] reduce EDNS logging noise
3831.	[cleanup]	Reduce logging noise when EDNS state changes occur.
			[RT #35843]

(cherry picked from commit 2b78610512)
2014-04-29 17:07:03 -07:00
Evan Hunt
6318f03621 [v9_10] SIT/max-cache-size flag collision
3824.	[bug]		A collision between two flag values could cause
			problems with cache cleaning when SIT was enabled.
			[RT #35858]

(cherry picked from commit e01fbe2a45)

Conflicts:
	CHANGES
2014-04-29 14:36:02 +10:00
Evan Hunt
de03407445 [v9_10] restore changes post 9.10.0
This reverts commit 2bb45e9515.
2014-04-25 16:29:32 -07:00
Evan Hunt
2bb45e9515 [v9_10] revert so 9.10.0 can be tagged
(changes for 9.10.1 were inadvertently committed early)
2014-04-25 16:27:03 -07:00
Tinderbox User
18c4d53ad7 update copyright notice 2014-04-24 23:45:43 +00:00
Mark Andrews
7ce6651a2a 3819. [bug] NSEC3 hashes need to be able to be entered and
displayed without padding.  This is not a issue for
                        currently defined algorithms but may be for future
                        hash algorithms. [RT #27925]

(cherry picked from commit 36e5ac0033)
2014-04-24 19:12:00 +10:00
Mark Andrews
78e2afc0cb make days a const
(cherry picked from commit 974fb3a9c5)
2014-04-24 13:16:36 +10:00
Evan Hunt
088b1abfd0 [master] prep 9.10.0 respin 2014-04-16 22:49:02 -07:00
Mark Andrews
469bbe0f97 3810. [bug] Work around broken nameservers that fail to ignore
unknown EDNS options. [RT #35766]
2014-04-17 15:43:38 +10:00
Evan Hunt
2dc978b8a1 [master] fix "prefetch" doc
3808.	[doc]		Clean up "prefetch" documentation. [RT #35751]
2014-04-13 18:50:34 -07:00
Francis Dupont
c80fef792a fix char sign extension [#35743] 2014-04-11 13:25:49 +02:00
Mark Andrews
51af0a72ad sort 2014-04-08 10:43:43 +10:00
Mark Andrews
c7bd423cec order.h 2014-04-08 10:37:21 +10:00
Evan Hunt
38c3ed154a [master] fix race
3804.   [bug]           Corrected a race condition in dispatch.c in which
                        portentry could be reset leading to an assertion
                        failure in socket_search(). (Change #3708
                        addressed the same issue but was incomplete.)
                        [RT #35128]
2014-04-07 13:54:08 -07:00
Mark Andrews
866606b9c7 3802. [bug] Various header files were not being installed 2014-04-04 21:56:08 +11:00
Evan Hunt
4c4d6213e1 [master] prep 9.10.0rc1 2014-04-03 20:34:46 -07:00
Tinderbox User
657099c9bc update copyright notice 2014-03-29 23:46:04 +00:00