Commit Graph

6873 Commits

Author SHA1 Message Date
Evan Hunt
0ada3802ea [master] awk portability fix 2014-11-17 12:22:18 -08:00
Evan Hunt
a0b4f6d952 [master] geoip security fixes
4003.	[security]	When geoip-directory was reconfigured during
			named run-time, the previously loaded GeoIP
			data could remain, potentially causing wrong
			ACLs to be used or wrong results to be served
			based on geolocation. [RT #37720]

4002.	[security]	Lookups in GeoIP databases that were not
			loaded could cause an assertion failure.
			[RT #37679]

4001.	[security]	The caching of GeoIP lookups did not always
			handle address families correctly, potentially
			resulting in an assertion failure. [RT #37672]
2014-11-16 08:43:22 -08:00
Mark Andrews
ed51a21730 fix ns_smf_add_message 2014-11-15 17:18:10 +11:00
Mark Andrews
eca6a76eda make inline 2014-11-15 17:03:21 +11:00
Evan Hunt
e32d354f75 [master] allow arbitrary-size rndc output
4005.	[func]		The buffer used for returning text from rndc
			commands is now dynamically resizable, allowing
			arbitrarily large amounts of text to be sent back
			to the client. (Prior to this change, it was
			possible for the output of "rndc tsig-list" to be
			truncated.) [RT #37731]
2014-11-14 15:58:54 -08:00
Evan Hunt
c4abb19716 [master] reference leak with AAAA glue but not A
4004.	[bug]		When delegations had AAAA glue but not A, a
			reference could be leaked causing an assertion
			failure on shutdown. [RT #37796]
2014-11-14 09:02:28 -08:00
Mukund Sivaraman
16c86a4980 Update .gitgnore files (ISC-Bugs #37773) 2014-11-11 11:47:02 +05:30
Tinderbox User
6d0a639bd0 update copyright notice 2014-11-06 23:45:21 +00:00
Evan Hunt
067c0c38e7 [master] s/mempcy/memmove/ 2014-11-06 13:01:59 -08:00
Tinderbox User
369963ad26 regen master 2014-11-06 01:05:06 +00:00
Evan Hunt
3cc8c7d630 [master] fix nxrrset in nxdomain redirection
4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
			from the redirect zone. [RT #37722]
2014-11-04 23:49:56 -08:00
Evan Hunt
ce96d4326c [master] new mkeys and nzf naming format
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
2014-11-04 19:43:27 -08:00
Mark Andrews
1feee79e1f 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:24:39 +11:00
Tinderbox User
def82e8de9 regen master 2014-10-31 01:04:53 +00:00
Tinderbox User
12b386e1a6 update copyright notice 2014-10-30 23:45:21 +00:00
Mark Andrews
f0a54842b1 3994. [func] Dig now supports setting the last unassigned DNS
header flag bit (dig +zflag). [RT #37421]
2014-10-31 10:16:00 +11:00
Mark Andrews
0f5144163c 3993. [func] Dig now supports EDNS negotiation by default.
(dig +[no]ednsnegotiation). [RT #37604]
2014-10-30 23:13:12 +11:00
Tinderbox User
a3ff24aaa5 regen master 2014-10-30 01:05:12 +00:00
Mark Andrews
f274cbeaed 3992. [func] DiG can now send queries without questions
(dig +header-only). [RT #37599]
2014-10-30 11:42:02 +11:00
Mark Andrews
00fb0253c9 3991. [func] Add the ability to buffer logging output by specifying
"buffered yes;" when defining a channel. [RT #26561]
2014-10-30 11:37:05 +11:00
Mark Andrews
a5c7cfbac4 3990. [testing] Add tests for unknown DNSSEC algorithm handling.
[RT #37541]
2014-10-30 11:05:26 +11:00
Tinderbox User
eaaf00efc0 regen master 2014-10-23 01:04:55 +00:00
Mark Andrews
cb6ec834f1 fix tag mis-match 2014-10-22 12:09:57 +11:00
Tinderbox User
6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Mark Andrews
4140a96f22 3987. [func] Allow the zone serial of a dynamically updatable
zone to be updated via rndc. [RT #37404]
2014-10-21 18:15:42 +11:00
Tinderbox User
78ec962d98 regen master 2014-10-21 01:04:47 +00:00
Mark Andrews
40b28f5402 3985. [doc] Describe how +ndots and +search interact in dig.
[RT #37529]
2014-10-21 08:05:21 +11:00
Evan Hunt
498b061031 [master] allow 1-week nta-lifetime/nta-recheck
3983.	[bug]		Change #3940 was incomplete: negative trust anchors
			could be set to last up to a week, but the
			"nta-lifetime" and "nta-recheck" options were
			still limted to one day. [RT #37522]
2014-10-20 13:40:17 -07:00
Evan Hunt
7cf2122e0d [master] change 3977 altered expected linecount from secroots 2014-10-18 16:50:32 -07:00
Mark Andrews
72775a79fe 3981. [bug] Cache DS/NXDOMAIN independently of other query types.
[RT #37467]
2014-10-18 13:09:09 +11:00
Evan Hunt
27174d90cc [master] fix spurious error in rndc secroots
3977.	[cleanup]	"rndc secroots" reported a "not found" error when
			there were no negative trust anchors set. [RT #37506]
2014-10-17 15:41:13 -07:00
Tinderbox User
6478b87fd2 regen master 2014-10-17 01:04:36 +00:00
Jeremy C. Reed
edad003e63 Remove the apostrophe 's from plural acronyms
This is to be consistent with our common usage of just using a
plural "s" without apostrophe.

This was brought up via discussion in ticket 37505.

I didn't have this reviewed.
2014-10-16 11:55:51 -05:00
Jeremy C. Reed
697bda73eb Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-10-16 11:01:26 -05:00
Jeremy C. Reed
22c1597937 fixes to manual from chucka
See ticket #37505
2014-10-16 11:00:13 -05:00
Mark Andrews
44ef2206d7 allow for the set of ttls to be empty 2014-10-16 14:46:44 +11:00
Mark Andrews
d9aaf7acce make test more robust in the face of server failures 2014-10-16 12:34:12 +11:00
Mark Andrews
79921aeec2 3975. [bug] Don't populate or use the bad cache for queries that
don't request or use recursion. [RT #37466]
2014-10-15 11:25:23 +11:00
Jeremy C. Reed
05d4b5a9fc [master] add -x to the usage output
(By the way, -d is also not in the usage nor in the manpage.)
2014-10-13 13:48:15 -07:00
Evan Hunt
1cbc394e7c [master] add redirect zone to checkconf -z test 2014-10-09 18:30:34 -07:00
Evan Hunt
ca0ee90361 [master] turn off servfail cache in masterformat test 2014-10-09 09:30:46 -07:00
Francis Dupont
1831311ac6 added hooks for gperftools CPU profiler [#37339] 2014-10-08 15:14:02 +02:00
Mark Andrews
c12c746e3a 3972. [bug] Fix host's usage statement. [RT #37397] 2014-10-07 01:09:49 +11:00
Mark Andrews
c81d56c03e 3971. [bug] Reduce the cascasding failures due to a bad $TTL line
in named-checkconf / named-checkzone. [RT #37138]
2014-10-05 08:29:34 +11:00
Mark Andrews
39fb5f2a5d verifying inline zones work with views requires crypto to be configured 2014-10-04 18:06:04 +10:00
Evan Hunt
12002ea49e [master] add delv system test
3969.	[test]		Added 'delv' system test. [RT #36901]
2014-10-02 22:37:20 -07:00
Tinderbox User
7a3f584cfc update copyright notice 2014-10-02 23:45:25 +00:00
Mark Andrews
6979ebf549 3968. [bug] Silence spurious log messages when using 'named -[46]'.
[RT #37308]
2014-10-03 08:05:56 +10:00
Mark Andrews
b24061719c 3967. [test] Add test for inlined signed zone in multiple views
with different DNSKEY sets. [RT #35759]
2014-10-03 07:59:44 +10:00
Mark Andrews
9c0589bc8b 3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
[RT #35746]
2014-10-03 07:50:09 +10:00