Commit Graph
2565 Commits
Author SHA1 Message Date
Andreas Gustafsson 09ffa2eb6f pullup:
428.   [bug]           rbtdb.c:find_closest_nxt() erroneously returned
                        DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
                        (e.g. glue).  This could cause SERVFAILs when
                        generating negative responses in a secure zone.
2000-09-12 19:14:20 +00:00
Michael Graff da6d3492c1 Pullup for Andreas:
Log Message:
 435.   [bug]           dns_zone_dump() overwrote existing zone files
                        rather than writing to a temporary file and
                        renaming.  This could lead to empty or partial
                        zone files being left around in certain error
                        conditions involving the initial transfer of a
                        slave zone, interfering with subsequent server
                        startup. [RT #282]
2000-09-11 19:27:52 +00:00
Andreas Gustafsson 77d0347a26 pullup:
442.   [bug]           TSIG signed messages that did not match any view
                        crashed the server. [RT #290]
2000-09-11 17:56:07 +00:00
Andreas Gustafsson fea1d23d75 pullup:
427.   [bug]           Avoid going into an infinite loop when the validator
                        gets a negative response to a key query where the
                        records are signed by the missing key.
(Pulled up despite the fact that I don't fully understand how the
fix works; I expect Brian to explain it when he comes back from Europe
and/or by adding comments)
2000-09-11 17:04:58 +00:00
Andreas Gustafsson 3eb5fc76b6 pullup: log message about strange socket error at ISC_LOG_ERROR level 2000-09-08 22:16:49 +00:00
Michael Graff 99a0688bec pullup for Andreas: TCP receives should never be retried 2000-09-08 22:09:13 +00:00
Andreas Gustafsson 4415c7ee95 pullup:
429.   [bug]           The space reserved for a TSIG record in a response
                        was 2 bytes too short, leading to message
                        generation failures.
2000-09-07 22:39:03 +00:00
Andreas Gustafsson 0e1409741d pullup:
425.   [bug]           Warn about the auth-nxdomain default value change
                        if there is no auth-nxdomain statement in the
                        config file. [RT #287]
2000-09-07 19:32:15 +00:00
Andreas Gustafsson 60882aac53 pullup:
426.   [bug]           Attempting to generate an oversized RSA key could
                        cause dnssec-keygen to dump core.
2000-09-07 19:29:05 +00:00
Andreas Gustafsson f320a691da pullup:
424.   [bug]           notify_createmessage() could trigger an assertion failure
                        when creating the notify message failed, e.g. due to
                        corrupt zones with multiple SOA records. [RT #279]
2000-09-07 16:55:33 +00:00
Michael Graff 3293d43a2a pullup for Andreas: The certificate type PKIX was misspelled as SKIX. 2000-09-05 22:14:12 +00:00
Brian Wellington e26e4f3891 pullup:
418.   [bug]           At debug levels >= 10, getting an unexpected
                        socket receive error would crash the server
                        while trying to log the error message.
2000-09-02 00:00:16 +00:00
Brian Wellington ac7dae4829 pullup:
416.   [bug]           Slave zones with no master file tried to use a
                        NULL pointer for a journal file name when they
                        received an IXFR.
2000-09-01 01:06:08 +00:00
Andreas Gustafsson a9cc55ad42 pullup:
413.   [bug]           notify could attempt to use the zone database after
                        it had been unloaded. (RT#267)
2000-08-31 16:40:19 +00:00
Andreas Gustafsson 210bb1d8aa pullup:
411.   [bug]           A typo in the HS A code caused an assertion failure.
2000-08-28 18:54:58 +00:00
Andreas Gustafsson 28db5307aa pullup:
408.   [bug]           stub zones could leak memory and refernce counts if
                        all the masters were unreachable.
2000-08-25 17:30:39 +00:00
Andreas Gustafsson b7b1281932 pullup:
404.   [bug]           The request library didn't completely work with IPv6.
2000-08-25 00:46:36 +00:00
Brian Wellington 317a9d3589 pullup:
330.   [func]          New function isc_log_wouldlog().

(note: #330 is out of place in CHANGES, because it's new in rc4, but if
it was in the place that 330 is supposed to go, no one would see it.  So,
leave it at the top)
2000-08-22 01:45:28 +00:00
Andreas Gustafsson 99b73a6332 pullup:
401.   [bug]           Treat undefined acls as errors, rather than
                        warning and then later throwing an assertion.
                        [RT #252]
2000-08-22 00:46:22 +00:00
Andreas Gustafsson d748f57152 pullup:
400.   [bug]           SIG(0) signing and verifying was done incorrectly.
                        [RT #249]
2000-08-21 23:17:29 +00:00
Brian Wellington f0e489625d pullup:
399.   [bug]           When reloading the server with a config file
                        containing a syntax error, it could catch an
                        assertion failure trying to perform zone
                        maintenance on, or sending notifies from,
                        tentatively created zones whose views were
                        never fully configured and lacked an address
                        database and request manager.
2000-08-21 20:51:47 +00:00
Brian Wellington 669d753a8d pullup:
previous change did not compile
2000-08-18 22:47:39 +00:00
Brian Wellington 77b6955ae3 pullup:
dns_cache_setcleaninginterval() could try to access
timer after it had been freed
2000-08-18 21:53:46 +00:00
Andreas Gustafsson 00a4362d82 pullup:
_tostruct had a few typos.
2000-08-15 01:06:46 +00:00
Andreas Gustafsson 7a10da9a0a pullup:
383.   [func]          When writing a master file, print the SOA and NS
                        records (and their SIGs) before other records.
2000-08-15 00:29:48 +00:00
Brian Wellington c1fe411013 pullup:
389.	[bug]		Attempting to send a reqeust over IPv6 using
			dns_request_create() on a system without IPv6
			support caused an assertion failure [RT #235].
2000-08-14 19:52:20 +00:00
Brian Wellington 3b636356e0 pullup:
The acl name was being assigned to NULL before it could be freed.
2000-08-11 02:38:17 +00:00
Brian Wellington a4925f8d78 pullup:
386.   [bug]           Missing strdup() of ACL name caused random
                        ACL matching failures [RT #228].
2000-08-11 02:13:02 +00:00
Andreas Gustafsson ccb10045dd pullup:
372.   [bug]           Deal with Microsoft DNS servers appending two bytes of
                        garbage to zone transfer requests.
2000-08-07 22:07:09 +00:00
Andreas Gustafsson a000b33913 reverted previous pullup until issues with the
dst_region_computeid() changes it depends on have been resolved
2000-08-07 19:25:27 +00:00
Andreas Gustafsson 615d506e49 pullup:
Print the key id when DNS_STYLEFLAG_COMMENT is passed to _totext()
2000-08-07 16:46:38 +00:00
Andreas Gustafsson 8ebca98e5e pullup:
document that dns_journal_rollforward can return ISC_R_RANGE
2000-08-06 22:11:47 +00:00
Andreas Gustafsson a8ae3afb56 pullup:
370.   [bug]           The error message for roll forward failures was
                        overly terse.
2000-08-06 22:07:25 +00:00
Andreas Gustafsson 80a51f5504 357. [bug] The zone file parser crashed if the argument
to  was a quoted string.
2000-08-02 21:22:27 +00:00
Andreas Gustafsson 9c325e682f pullup:
tsig.c:136: warning: unused variable `tmp\' -- removed
2000-08-01 15:06:22 +00:00
Andreas Gustafsson a41f5e8e14 pullup:
Sending a TSIG signed query with a TSIG algorithm that's not
HMAC-MD5.SIG-ALG.REG.INT shouldn't crash the server.  Also, the description
of dns_tsigkey_create was wrong in at least one place, and the function
incorrectly returned an undocumented result.
2000-07-28 23:39:23 +00:00
Andreas Gustafsson 2cfc66fe05 pullup:
The server would crash if a response contained both a CNAME and records of
the query type
2000-07-28 22:45:52 +00:00
Andreas Gustafsson e465eb9e2b pullup:
Allow zones with no NS records to be loaded and/or transferred in.  Log
an error if the zone is loaded, but continue anyway.
(RT #205)
2000-07-28 22:24:47 +00:00
Andreas Gustafsson 99b58e7cbf pullup:
Having a non-noerror value inn the tsig error field should always return
DNS_R_TSIGERRORSET in dns_tsig_verify.  Change the result text to reflect
this.
2000-07-28 19:41:16 +00:00
Andreas Gustafsson 9320acde61 pullup:
tsig keys were not properly ref counted
2000-07-28 05:37:34 +00:00
Andreas Gustafsson 99b3a7a8e7 pullup:
Removed some cruft and a crash.
2000-07-28 00:13:40 +00:00
Andreas Gustafsson 61d131c2ed pullup:
don't copy a name structure, copy a pointer.
2000-07-28 00:05:42 +00:00
Andreas Gustafsson 459eb2fc8a pullup:
here's no real difference between the sring and dring parameters, so
call them ring1 and ring2 instead.  Also remove a bogus assertion.
2000-07-28 00:00:23 +00:00
Andreas Gustafsson 65877a9cd2 pullup:
Store tsig keys in an rbt, not a list.
2000-07-27 23:57:35 +00:00
Andreas Gustafsson ab77763643 pullup:
Don't require that tsig keys must be on a keyring.  Also some other cleanup.
2000-07-27 23:45:53 +00:00
Andreas Gustafsson b2573bd026 pullup:
tsig keys were not properly ref counted
2000-07-27 22:56:38 +00:00
Andreas Gustafsson 939e6e8fa7 pullup: multiple validator bug fixes 2000-07-27 22:50:02 +00:00
Andreas Gustafsson d1d8cb0058 pullup:
dns_dnssec_verifymessage should make sure that it's verifying with the right
key (which should be the case anyway, but it never hurts to check).  Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
2000-07-27 22:15:22 +00:00
Andreas Gustafsson 42ed03996d typo in error message 2000-07-27 21:47:19 +00:00
Andreas Gustafsson 941a52f8ef pullup:
cd queries would cause the server to hang on exit.
2000-07-27 21:42:14 +00:00