Commit Graph

5594 Commits

Author SHA1 Message Date
Evan Hunt
21a7fde6ba [master] handle servfail at DLZ zone apex
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]
2013-03-11 15:54:03 -07:00
Tinderbox User
b7e6fc2a4c update copyright notice 2013-03-08 23:47:06 +00:00
Mark Andrews
aababae795 3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249] 2013-03-08 21:12:42 +11:00
Mark Andrews
3a0da183bb 3520. [bug] 'mctx' was not being referenced counted in some places
where it should have been.  [RT #32794]
2013-03-08 14:38:03 +11:00
Mark Andrews
af21fc6644 3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
so that all dns_rrl_rtype_t enum values fit regardless
                        of whether it is teated as signed or unsigned by
                        the compiler. [RT #32792]
2013-03-07 18:44:45 +11:00
Evan Hunt
929eed35ac [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-03-06 18:10:17 -08:00
Evan Hunt
61ddb38c2b [master] remove leftover debugging printf 2013-03-06 18:09:05 -08:00
Mark Andrews
e7b9603ead 3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777] 2013-03-07 07:13:38 +11:00
Mark Andrews
f3350b6718 silence compiler warnings 2013-03-05 23:41:22 +11:00
Mark Andrews
e69e6105b2 #ifdef HAVE_GEOIP 2013-03-01 16:11:16 +11:00
Mark Andrews
8e5fce1f9c update copyrights 2013-03-01 10:39:29 +11:00
Evan Hunt
f61b05a6a5 [master] address warnings building exportlibs 2013-02-28 15:22:44 -08:00
Mark Andrews
8a896bc645 fix configure.in to remove warnings when running autoconf
only compile geoip.o when requested.
    silence compiler warnings
2013-03-01 09:58:32 +11:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
2013-02-28 09:29:12 -08:00
Mark Andrews
fa23a7b8e9 silence locking false positive by puttling lock/unlock in same routine 2013-02-28 14:00:39 +11:00
Mark Andrews
b34b328287 explicitly ignore error returns 2013-02-28 13:44:14 +11:00
Mark Andrews
3426bd337d check the returns from isc_task_beginexclusive 2013-02-28 13:14:52 +11:00
Evan Hunt
501941f0b6 [master] add geoip support
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
2013-02-27 17:19:39 -08:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
2013-02-27 11:53:58 -08:00
Evan Hunt
dbe761ac41 [master] better rrl shutdown bug fix 2013-02-26 23:39:38 -08:00
Evan Hunt
ae0fb42535 [master] back out previous rrl.c change
Not the right fix; use ISC_LIST_INITANDAPPEND instead.
2013-02-26 22:41:14 -08:00
Evan Hunt
68357e5241 [master] avoid double-free in rrl
- RRL could assert when freeing qname
 - also, changed test addresses from 192.168/16 to 192.0/16
2013-02-26 19:15:11 -08:00
Mark Andrews
609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00
Mark Andrews
30b7c81c13 3500. [port] Support NAPTR regular expression validation on
all platforms.  [RT #32688]
2013-02-27 08:59:04 +11:00
Evan Hunt
e0c4f1f5cc [master] silence RRL warnings 2013-02-26 00:03:49 -08:00
Tinderbox User
f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt
37418116d5 [master] handle failures from dns_rpz_add()
- I noticed a problem after merge, vjs supplied a fix, I have
    reviewed it, no ticket number.
2013-02-25 14:38:08 -08:00
Evan Hunt
dcf426e9b5 [master] corrected typos & unintialized variable 2013-02-25 13:23:42 -08:00
Evan Hunt
94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's)
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
2013-02-25 12:46:51 -08:00
Evan Hunt
55e5c51e66 [master] DNS RRL
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
2013-02-25 12:45:56 -08:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
df925e6c66 [master] add zone memory context pools
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]
2013-02-20 21:39:05 -08:00
Tinderbox User
9d8985bea9 update copyright notice 2013-02-18 23:45:58 +00:00
Mark Andrews
740e7340c5 3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
dns_dlzcreate() failed to properly initialize
                        dlzdb.link.  When cloning a rdataset do not copy
                        the link contents.  [RT #32651]

Squashed commit of the following:

commit c36c49cbdaeec8b2506dffadbffa543283702fa2
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:24:57 2013 +1100

    don't copy the link when cloning a rdataset

commit 9fef5827edcc925075832dcce900eeca9057456d
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:23:25 2013 +1100

    initialise the dlzdb link; don't return a stale pointer on error

commit a13c584732eae2dde48920a73886b54f1fe6b030
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:21:59 2013 +1100

    turn on ISC_LIST_CHECKINIT
2013-02-19 07:28:24 +11:00
Mark Andrews
3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User
32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00
Mark Andrews
c9297d3759 3487. [bug] Change 3444 was not complete. There was a additional
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
2013-02-16 07:45:43 +11:00
Evan Hunt
0b8bd3a4ae [master] address TKEY bugs
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:59:46 2013 -0800

    [rt32506] don't dump key if dump is unimplemented

commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:42:25 2013 -0800

    [rt32506] make sure LRU needs adjusting before adjusting it

commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 12:28:28 2013 -0800

    [rt32506] demonstrate bugs in tkey test
2013-02-15 10:19:50 -08:00
Mark Andrews
7e9ccec638 3485. [cleanup] Only compile openssl_gostlink.c if we support GOST. 2013-02-12 13:03:34 +11:00
Tinderbox User
4486374631 update copyright notice 2013-02-08 23:45:50 +00:00
Evan Hunt
b748b5e2c2 [master] fix cache/ADB stats in new stats schema
new stats that were added for 9.10 (changes 3319-3326) were not
    all updated when the new statistics schema was merged (change 3418).

3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]
2013-02-08 14:53:14 -08:00
Evan Hunt
9dac1de625 [master] silence logging noise
3480.	[bug]		Silence logging noise when setting up zone
			statistics. [RT #32525]
2013-02-02 13:59:49 -08:00
Tinderbox User
17131a9459 update copyright notice 2013-01-25 23:45:56 +00:00
Mark Andrews
9c9b75c435 3479. [bug] Address potential memory leaks in gssapi support
code. [RT #32405]
2013-01-25 12:23:38 +11:00
Evan Hunt
c9611b4573 [master] change "fast" to "map"
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
2013-01-24 14:20:48 -08:00
Evan Hunt
ffff5d6792 [master] fix dns_request_createvia assert
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
2013-01-23 15:39:05 -08:00
Evan Hunt
a0a1003895 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-22 16:13:09 -08:00
Evan Hunt
214836c184 [master] dump masterfile after successful xfrin
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
2013-01-22 15:49:50 -08:00
Tinderbox User
b95504f9a7 update copyright notice 2013-01-22 23:45:48 +00:00
Evan Hunt
cbd1fa092e [master] DLZ fixes
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
2013-01-22 15:13:08 -08:00