Commit Graph

7868 Commits

Author SHA1 Message Date
Mark Andrews
231b76cdd4 2972. [bug] win32: address windows socket errors. [RT #21906] 2010-11-18 00:40:44 +00:00
Automatic Updater
3da57cdb40 update copyright notice 2010-11-17 23:46:16 +00:00
Evan Hunt
6b3ff3908e 2971. [bug] Fixed a bug that caused journal files not to be
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
2010-11-17 00:34:23 +00:00
Mark Andrews
5e0523fc23 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:46:23 +00:00
Mark Andrews
795f1f2db0 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:48:32 +00:00
Automatic Updater
932cc52623 update copyright notice 2010-10-18 23:46:34 +00:00
Mark Andrews
7d5a816e83 2966. [bug] isc_print_vsnprintf() failed to check if there was
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
2010-10-18 04:04:35 +00:00
Automatic Updater
6b4f4f8be4 update copyright notice 2010-09-29 23:46:31 +00:00
Mark Andrews
fa4d117db2 2964. [bug] view->queryacl was being overloaded. Seperate the
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
2010-09-29 00:03:32 +00:00
Mark Andrews
f1c2e9fc96 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:38:51 +00:00
Mark Andrews
279fa6e621 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 01:15:55 +00:00
Mark Andrews
311ba6bc1a isc_mem_isovermem 2010-09-03 04:38:11 +00:00
Mark Andrews
6039a662c1 9.6-ESV-R2 2010-09-03 03:15:25 +00:00
Mark Andrews
25d78ece28 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
[RT #20877]
2010-09-03 02:55:18 +00:00
Mark Andrews
c44bb94bc8 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:25:22 +00:00
Automatic Updater
5d718a2f9c update copyright notice 2010-08-12 23:46:25 +00:00
Tatuya JINMEI 神明達哉
302cb51bc4 2937. [bug] Worked around an apparent race condition in over
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
2010-08-11 23:42:53 +00:00
Mark Andrews
7a2f2d9ba0 cvs rdiff -r1.2931.2.271 -r1.2931.2.272 bind9/CHANGES
cvs rdiff -r1.166.34.3 -r1.166.34.4 bind9/bin/named/main.c
cvs rdiff -r1.313.20.18 -r1.313.20.19 bind9/bin/named/query.c
cvs rdiff -r1.80 -r1.80.12.1 bind9/bin/named/include/named/globals.h
cvs rdiff -r1.13 -r1.13.176.1 bind9/bin/tests/system/start.pl
cvs rdiff -r1.53.48.7 -r1.53.48.8 bind9/bin/tests/system/dnssec/tests.sh
cvs rdiff -r1.13 -r1.13.48.1 \
    bind9/bin/tests/system/dnssec/ns3/secure.example.db.in
cvs rdiff -r1.3 -r1.3.48.1 bind9/bin/tests/system/dnssec/ns7/named.conf
cvs rdiff -r0 -r1.2.4.2 bind9/bin/tests/system/dnssec/ns7/named.nosoa \
    bind9/bin/tests/system/dnssec/ns7/nosoa.secure.example.db
cvs rdiff -r1.164.12.21 -r1.164.12.22 bind9/lib/dns/validator.c
2010-06-26 00:02:45 +00:00
Automatic Updater
4e1806d320 update copyright notice 2010-06-23 23:46:25 +00:00
Mark Andrews
d0e0f26753 2921. [bug] The resolver could attempt to destroy a fetch context
to soon.  [RT #19878]
2010-06-23 01:51:30 +00:00
Automatic Updater
e8bfdebfad update copyright notice 2010-06-04 23:49:23 +00:00
Mark Andrews
f18a54a190 remove trailing comma 2010-06-04 00:17:01 +00:00
Mark Andrews
43a3530e26 silence compiler, explict coversion 2010-05-19 09:56:44 +00:00
Mark Andrews
b24553b060 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:56:01 +00:00
Automatic Updater
3541849eb2 update copyright notice 2010-05-14 23:48:44 +00:00
Mark Andrews
cccda7f37e 2890. [bug] Handle the introduction of new trusted-keys and
DS, DLV RRsets better. [RT #21097]
2010-05-14 03:11:02 +00:00
Mark Andrews
1fc35fe236 9.6-ESV-R1 2010-05-10 03:01:18 +00:00
Mark Andrews
48d417b283 2876. [bug] Named could return SERVFAIL for negative responses
from unsigned zones. [RT #21131]
2010-04-21 04:25:51 +00:00
Mark Andrews
a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Mark Andrews
dbd13430ce 9.6.2 2010-02-18 03:40:09 +00:00
Automatic Updater
5eb1c53ca2 update copyright notice 2010-02-04 23:47:46 +00:00
Tatuya JINMEI 神明達哉
79ee58d29d backout diagnose assertion check accidentally committed with the previous
commit.
2010-02-04 23:41:14 +00:00
Tatuya JINMEI 神明達哉
d03e7dd277 2850. [bug] If isc_heap_insert() failed due to memory shortage
the heap would have corrupted entries. [RT #20951]

9.8.0, 9.7.1(?), 9.6.2, 9.5.3
(what about 9.4-ESV?)
2010-02-04 23:27:32 +00:00
Mark Andrews
01347cce29 2849. [bug] Don't treat errors from the xml2 library as fatal.
[RT #20945]
2010-02-04 01:10:32 +00:00
Automatic Updater
1b50f0d68e update copyright notice 2010-01-31 23:47:31 +00:00
Mark Andrews
b4d6057cf0 2846. [bug] EOF on unix domain sockets was not being handled
correctly. [RT #20731]
2010-01-31 23:21:58 +00:00
Mark Andrews
1077e73992 silence compiler warning 2010-01-22 02:36:49 +00:00
Automatic Updater
9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Evan Hunt
905c946de0 add unresolved externals isc_sha{256,512}_invalidate 2010-01-15 21:53:59 +00:00
Evan Hunt
9b72b0258e prepare for 9.6.2rc1 release 2010-01-15 21:12:11 +00:00
Evan Hunt
3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater
c91b60a119 update copyright notice 2010-01-07 23:47:36 +00:00
Evan Hunt
0f83518a99 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 17:49:01 +00:00
Automatic Updater
ef413fafe5 update copyright notice 2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
Evan Hunt
c7c6605eb0 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:44:45 +00:00
Mark Andrews
ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Evan Hunt
65bbefae47 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define
[RT #20771]
2009-12-24 00:34:59 +00:00