bind9/lib/dns
Evan Hunt 3230429e17 [master] limit recursion depth and iterative queries
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
2014-11-17 23:24:44 -08:00
..
include [master] limit recursion depth and iterative queries 2014-11-17 23:24:44 -08:00
rdata update copyright notice 2014-11-04 23:45:20 +00:00
tests [master] add diffie-hellman key unit test 2014-10-17 15:55:37 -07:00
win32 3956. [func] Notify messages are now rate limited by notify-rate and 2014-09-29 10:01:08 +10:00
.gitignore add gen.dSYM 2013-05-09 10:54:36 +10:00
acache.c [master] possible race in acache.c 2013-05-31 17:30:09 -07:00
acl.c update copyright notice 2014-08-29 23:45:22 +00:00
adb.c [master] limit recursion depth and iterative queries 2014-11-17 23:24:44 -08:00
api [master] prep 9.10.0 respin 2014-04-16 22:49:02 -07:00
Atffile 3043. [test] Merged in the NetBSD ATF test framework (currently 2011-02-26 02:26:33 +00:00
badcache.c check isc_mutext_init and destoy mutex when done 2014-09-07 08:24:36 +10:00
byaddr.c [master] unify internal and export libraries 2013-04-10 13:49:57 -07:00
cache.c update copyright notice 2014-06-19 23:45:23 +00:00
callbacks.c update copyright notice 2012-06-21 23:46:36 +00:00
client.c [master] merge several interdependent fixes 2014-02-26 19:00:05 -08:00
clientinfo.c update copyright notice 2014-04-25 23:45:21 +00:00
compress.c update copyright notice 2007-06-19 23:47:24 +00:00
db.c [master] unify internal and export libraries 2013-04-10 13:49:57 -07:00
dbiterator.c update copyright notice 2007-06-19 23:47:24 +00:00
dbtable.c update copyright notice 2013-02-21 23:45:56 +00:00
diff.c update copyright notice 2014-01-09 23:46:35 +00:00
dispatch.c update copyright notice 2014-09-30 23:45:22 +00:00
dlz.c [master] unify internal and export libraries 2013-04-10 13:49:57 -07:00
dns64.c [master] updated published drafts 2014-02-14 08:53:06 -08:00
dnssec.c [master] add print.h, CHANGES note 2014-06-10 08:54:16 -07:00
ds.c update copyrights 2014-01-16 15:19:24 +11:00
dst_api.c [24702] Include key filename in logged message 2014-06-10 19:18:34 +05:30
dst_gost.h [master] merge libiscpk11 to libisc 2014-02-11 21:20:28 -08:00
dst_internal.h [master] better error output when initializing pkcs11 2014-03-12 20:52:01 -07:00
dst_lib.c update copyright notice 2007-06-19 23:47:24 +00:00
dst_openssl.h [master] silence noisy OpenSSL logging 2012-10-24 12:58:16 -07:00
dst_parse.c update copyrights 2014-01-16 15:19:24 +11:00
dst_parse.h update copyrights 2014-01-16 15:19:24 +11:00
dst_pkcs11.h update copyrights 2014-01-16 15:19:24 +11:00
dst_result.c [master] better error output when initializing pkcs11 2014-03-12 20:52:01 -07:00
ecdb.c update copyright notice 2014-03-04 23:46:15 +00:00
forward.c update copyright notice 2013-03-23 23:46:06 +00:00
gen-unix.h update copyright notice 2009-01-17 23:47:43 +00:00
gen-win32.h update copyright notice 2014-01-24 23:46:22 +00:00
gen.c Handle VS14 incompatible changes [RT #37380] 2014-10-21 09:34:33 +02:00
geoip.c [master] geoip security fixes 2014-11-16 08:43:22 -08:00
gssapi_link.c [master] native PKCS#11 support 2014-01-14 15:40:56 -08:00
gssapictx.c update copyrights 2014-02-25 12:07:41 +11:00
hmac_link.c [master] rationalize external key handling 2014-01-30 17:49:32 -08:00
iptable.c update copyrights 2014-08-30 12:27:49 +10:00
journal.c 3966. [bug] Missing dns_db_closeversion call in receive_secure_db. 2014-10-03 07:50:09 +10:00
key.c 3174. [bug] Always compute to revoked key tag from scratch. 2011-10-20 21:20:02 +00:00
keydata.c update copyright notice 2014-01-09 23:46:35 +00:00
keytable.c [master] rndc nta 2014-05-29 22:22:53 -07:00
lib.c update copyright notice 2014-02-27 23:46:22 +00:00
log.c [master] rndc nta 2014-05-29 22:22:53 -07:00
lookup.c update copyright notice 2013-02-21 23:45:56 +00:00
Makefile.in [master] [rt36786] use INSTALL_PROGRAM for shared libs 2014-09-05 10:24:20 -07:00
mapapi [master] change "fast" to "map" 2013-01-24 14:20:48 -08:00
master.c silence compiler warning 2014-10-08 17:47:46 +11:00
masterdump.c [master] dig +ttlunits 2014-04-29 16:58:36 -07:00
message.c 3965. [func] Log outgoing packets and improve packet logging to 2014-10-02 09:40:11 +10:00
name.c 3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the 2014-09-27 11:41:44 +10:00
ncache.c update copyright notice 2013-01-10 23:46:00 +00:00
nsec.c 3945. [bug] Invalid wildcard expansions could be incorrectly 2014-09-05 12:10:55 +10:00
nsec3.c 3942. [bug] Wildcard responses from a optout range should be 2014-09-04 13:57:50 +10:00
nta.c [master] allow arbitrary-size rndc output 2014-11-14 15:58:54 -08:00
openssl_link.c update copyright notice 2014-03-04 23:46:15 +00:00
openssldh_link.c 3974. [bug] handle DH_compute_key() failure correctly in 2014-10-13 23:41:36 +11:00
openssldsa_link.c [master] rationalize external key handling 2014-01-30 17:49:32 -08:00
opensslecdsa_link.c 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 2014-09-29 10:18:54 +10:00
opensslgost_link.c 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 2014-09-29 10:18:54 +10:00
opensslrsa_link.c [master] rationalize external key handling 2014-01-30 17:49:32 -08:00
order.c update copyright notice 2007-06-19 23:47:24 +00:00
peer.c 3949. [experimental] Experimental support for draft-andrews-edns1 by sending 2014-09-10 15:31:40 +10:00
pkcs11.c [master] merge libiscpk11 to libisc 2014-02-11 21:20:28 -08:00
pkcs11dh_link.c [master] better error output when initializing pkcs11 2014-03-12 20:52:01 -07:00
pkcs11dsa_link.c [master] better error output when initializing pkcs11 2014-03-12 20:52:01 -07:00
pkcs11ecdsa_link.c 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 2014-09-29 10:18:54 +10:00
pkcs11gost_link.c 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 2014-09-29 10:18:54 +10:00
pkcs11rsa_link.c [master] better error output when initializing pkcs11 2014-03-12 20:52:01 -07:00
portlist.c update copyright notice 2014-01-09 23:46:35 +00:00
private.c 3410. [bug] Addressed Coverity warnings. [RT #31626] 2012-10-29 20:04:59 +11:00
rbt.c 3872. [bug] Address issues found by static analysis. [RT #36209] 2014-06-10 09:17:15 +10:00
rbtdb.c 3890. [bug] RRSIG sets that were not loaded in a single transaction 2014-07-07 12:05:01 +10:00
rbtdb.h update copyright notice 2012-03-10 23:45:53 +00:00
rbtdb64.c update copyright notice 2007-06-19 23:47:24 +00:00
rbtdb64.h update copyright notice 2007-06-19 23:47:24 +00:00
rcode.c [master] null terminate strings for coverity 2014-06-16 15:30:11 -07:00
rdata.c 3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159] 2014-09-27 12:14:20 +10:00
rdatalist.c update copyright notice 2012-03-10 23:45:53 +00:00
rdatalist_p.h update copyright notice 2008-09-25 04:02:39 +00:00
rdataset.c update copyright notice 2014-10-16 23:45:23 +00:00
rdatasetiter.c update copyright notice 2007-06-19 23:47:24 +00:00
rdataslab.c 3853. [cleanup] Refactor dns_rdataslab_fromrdataset to seperate out 2014-05-20 11:36:03 +10:00
request.c 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with 2014-10-01 07:24:16 +10:00
resolver.c [master] limit recursion depth and iterative queries 2014-11-17 23:24:44 -08:00
result.c missing comma 2014-10-28 16:10:49 +11:00
rootns.c update copyright notice 2014-03-29 23:46:04 +00:00
rpz.c 3897. [bug] RPZ summary information was not properly being updated 2014-07-22 10:57:58 +10:00
rriterator.c update copyright notice 2012-03-10 23:45:53 +00:00
rrl.c silence NULL pointer dereference warning 2014-05-01 14:23:23 +10:00
sdb.c update copyrights 2013-02-27 12:27:58 +11:00
sdlz.c [master] suppress unnecessary db lookups in DLZ redirect zones 2014-06-10 16:25:26 -07:00
soa.c fix implicit memset() declaration 2009-09-10 02:18:40 +00:00
spnego.asn1 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 01:54:53 +00:00
spnego.c update copyright notice 2014-01-09 23:46:35 +00:00
spnego.h update copyright notice 2007-06-19 23:47:24 +00:00
spnego_asn1.c 3681. [port] Update the Windows build system to support feature 2013-12-04 12:47:23 +11:00
spnego_asn1.pl update copyright notice 2012-06-29 23:45:57 +00:00
ssu.c update copyright notice 2014-01-09 23:46:35 +00:00
ssu_external.c update copyrights 2013-12-05 15:04:53 +11:00
stats.c update copyright notice 2012-06-08 23:45:57 +00:00
tcpmsg.c update copyright notice 2007-06-19 23:47:24 +00:00
time.c silence coverity warnings 2014-07-02 15:28:02 +10:00
timer.c update copyright notice 2007-06-19 23:47:24 +00:00
tkey.c [master] merge libiscpk11 to libisc 2014-02-11 21:20:28 -08:00
tsec.c 2982. [bug] Reference count dst keys. dst_key_attach() can be used 2010-12-09 00:54:34 +00:00
tsig.c 3996. [bug] Address use after free on out of memory error in 2014-10-31 11:44:09 +11:00
ttl.c [master] dig +ttlunits 2014-04-29 16:58:36 -07:00
update.c [master] "dnssec-signzone -N date" 2014-04-29 16:29:20 -07:00
validator.c 3945. [bug] Invalid wildcard expansions could be incorrectly 2014-09-05 12:10:55 +10:00
version.c update copyright notice 2013-01-25 23:45:56 +00:00
view.c [master] new mkeys and nzf naming format 2014-11-04 19:43:27 -08:00
xfrin.c update copyright notice 2014-10-02 23:45:25 +00:00
zone.c [master] reference leak with AAAA glue but not A 2014-11-14 09:02:28 -08:00
zonekey.c update copyright notice 2007-06-19 23:47:24 +00:00
zt.c update copyright notice 2014-09-30 23:45:22 +00:00