3746 Commits

Author SHA1 Message Date
Evan Hunt
b32a14510f fixed an exploitable hang bug
3383.	[security]	A certain combinations of records in the RBT could
                        cause named to hang while populating the additional
                        section of a response. [RT #31090]
2012-09-26 17:21:02 -07:00
Evan Hunt
d60371373d revert to previous v9_7_7 2012-09-26 17:19:35 -07:00
ckb
8e283c2578 3374. [bug] isc_parse_uint32 failed to return a range error on
systems with 64 bit longs [RT #30232]
2012-09-12 15:33:04 -05:00
Mark Andrews
c69b129809 3373. [bug] win32: open raw files in binary mode. [RT #30944] 2012-09-12 12:07:22 +10:00
Mark Andrews
afe43d8a21 9.7.7 2012-08-24 14:18:29 +10:00
Mark Andrews
0a870b5cc5 3364. [security] Named could die on specially crafted record.
[RT #30416]
2012-08-24 13:54:29 +10:00
Mark Andrews
415883c1a9 9.7.7rc1 2012-08-23 16:44:47 +10:00
Mark Andrews
924a3d1087 change number 2012-08-22 19:24:41 +10:00
Mark Andrews
6c59a9a855 3379. [bug] nsupdate terminated unexpectedly in interactive mode
if built with readline support. [RT #29550]
2012-08-22 13:54:02 +10:00
Evan Hunt
11774df97a spelling 2012-08-21 12:08:18 -07:00
Mark Andrews
fd06dcf5fc 3368. [bug] <dns/iptable.h> and <dns/zone.h> where not C++ safe. 2012-08-21 16:46:35 +10:00
Mark Andrews
a88b9da347 3367. [bug] dns_dnsseckey_create() result was not being checked.
[RT #30685]
2012-08-21 12:07:02 +10:00
ckb
1d64f8f33e 3366. [bug] Fixed Read-After-Write dependency violation for IA64
atomic operations. [RT #25181]
2012-08-17 13:07:55 -05:00
Evan Hunt
18cf8f1a79 remove spurious newlines in zone.c logging
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
2012-08-16 10:47:28 -07:00
Evan Hunt
78dd369f15 properly range-check fields that do not allow 0
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
2012-08-13 22:44:49 -07:00
Mark Andrews
e3eacfaad7 3360. [bug] 'host -w' could die. [RT #18723] 2012-08-14 11:10:53 +10:00
Evan Hunt
aa65a37288 address memory leak with bad tsig secret
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
2012-08-10 20:27:08 -07:00
Mar Andrews
fd6c279aac 3357. [port] Add support for libxml2-2.8.x [RT #30440] 2012-08-02 01:53:52 +00:00
ckb
682f157902 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
2012-07-25 17:32:14 -05:00
Evan Hunt
f78b5ea128 fix change note 3348, bug not security 2012-07-23 13:00:27 -07:00
Evan Hunt
0b36ba206e prep 9.7.7b1 2012-07-23 12:56:58 -07:00
Mark Andrews
b34a14edc6 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:40:53 +10:00
Mark Andrews
571e22543a 3352. [bug] Ensure that learned server attributes timeout of the
adb cache. [RT #29856]
2012-07-18 14:19:13 +10:00
Mark Andrews
45a82933fa 3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
                        memory debugging flags are set. [RT #30243]
2012-07-18 10:04:16 +10:00
Mark Andrews
71032bebe7 3350. [bug] Memory read overrun in isc___mem_reallocate if
ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]
2012-07-18 09:53:50 +10:00
ckb
540a7fd3ae 3348. [security] prevent RRSIG data from being cached if a negative
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well. [RT #26809]
2012-07-09 13:26:24 -05:00
Evan Hunt
364ecf0e5d warn when changing mode on .private files
3347.	[bug]		dnssec-settime: Issue a warning when writing a new
			private key file would cause a change in the
			permissions of the existing file. [RT #27724]
2012-07-05 18:05:12 -07:00
Evan Hunt
4e33277893 fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:04:31 -07:00
Mark Andrews
ace3dd051b 3342. [bug] Change #3314 broke saving of stub zones to disk
resulting in excessive cpu usage in some cases.
                        [RT #29952]
2012-06-27 09:33:33 +10:00
Mark Andrews
4cd6dee154 3337. [bug] Change #3294 broke support for the multiple keys
in controls. [RT #29694]
2012-06-13 16:55:37 +10:00
Evan Hunt
ab58a069b3 nslookup exit with error if unsuccessful
3335.	[func]		nslookup: return a nonzero exit code when unable
			to get an answer. [RT #29492]
2012-06-07 22:09:24 -07:00
Mark Andrews
ebaac2c8a9 add # 2012-06-08 13:58:26 +10:00
Mark Andrews
f792aba03b 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:59:03 +10:00
Evan Hunt
a93d8a7764 security fix
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
			rdataslabs. [RT #29644]
2012-06-01 09:56:56 -07:00
Evan Hunt
fdfd260c4e fix check_data() usage
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
2012-05-17 16:24:55 -07:00
Evan Hunt
78269d150c Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 11:21:33 -07:00
Mark Andrews
6451a2bd14 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:45:15 +10:00
Mark Andrews
50a07c343c 9.7.6 2012-04-27 17:50:32 +10:00
Mark Andrews
8030fbee3f 3197. [bug] Don't try to log the filename and line number when
the config parser can't open a file. [RT #22263]
2012-04-27 17:30:51 +10:00
Mark Andrews
4719e6364f 3232. [bug] Zero zone->curmaster before return in
dns_zone_setmasterswithkeys(). [RT #26732]
2012-04-27 17:01:49 +10:00
Mark Andrews
8e94cc841f 3314. [bug] The masters list could be updated while refesh_callback
and stub_callback were using it. [RT #26732]
2012-04-26 14:03:54 +10:00
Mark Andrews
c22f2e4093 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:39:14 +10:00
Mark Andrews
dc570048ad 3311. [bug] Abort the zone dump if zone->db is NULL in
zone.c:zone_gotwritehandle. [RT #29028]
2012-04-26 11:30:31 +10:00
Evan Hunt
6c6d0c3ef7 increase table size for mutex profiling 2012-04-24 16:53:12 -07:00
Evan Hunt
ed89ac0465 fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 15:03:11 -07:00
Mark Andrews
c4cdad183b 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
[RT #28956]
2012-04-13 08:41:58 +10:00
Mark Andrews
5ce3bf669f 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:22:17 +10:00
Mark Andrews
2d713a2aa0 3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571] 2012-04-11 10:50:48 +10:00
Mark Andrews
a6be3a184f 3302. [bug] dns_dnssec_findmatchingkeys could fail to find
keys if the zone name contained character that
                        required special mappings. [RT #28600]
2012-03-30 12:08:41 +11:00
Mark Andrews
14bfdd5145 3301. [contrib] Update queryperf to build on darwin. Add -R flag
for non-recursive queries. [RT #28565]
2012-03-29 10:33:52 +11:00