Commit Graph

4801 Commits

Author SHA1 Message Date
Evan Hunt
58a91f8111 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:45:59 +00:00
Mark Andrews
b7147009da 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:34:22 +00:00
Francis Dupont
1b6423ff8c Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:44:00 +00:00
Automatic Updater
b82a8a428c update copyright notice 2011-02-28 01:18:47 +00:00
Evan Hunt
218d0d146a 3043. [test] Merged in the NetBSD ATF test framework (currently
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
2011-02-26 05:46:59 +00:00
Mark Andrews
21deff3df5 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 12:48:21 +00:00
Mark Andrews
810779bf8d 2036. [bug] Check built-in zone arguments to see if the zone
is re-usable or not. [RT #21914]
2011-02-22 04:33:49 +00:00
Automatic Updater
49e7dc2ad1 update copyright notice 2011-02-21 23:45:49 +00:00
Mark Andrews
f7eb0ef71f 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
[RT #22521]
2011-02-21 07:12:50 +00:00
Mark Andrews
8ecd249a9e 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:04:54 +00:00
Mark Andrews
08bf17fabb 3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:55:13 +00:00
Mark Andrews
9d7c7023e6 3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:46:14 +00:00
Automatic Updater
81890674ce update copyright notice 2011-02-19 23:45:47 +00:00
Evan Hunt
678d543786 Fixed an error in change 3023, ensuring that journal file isn't
removed after IXFR.  No CHANGES note.
2011-02-19 01:26:48 +00:00
Evan Hunt
08c0b5f032 3025. [bug] Fixed a possible deadlock due to zone resigning.
[RT #22964]
2011-02-19 00:44:13 +00:00
Automatic Updater
4618f6f8e8 update copyright notice 2011-02-18 23:45:48 +00:00
Evan Hunt
7dd81b570d 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
2011-02-18 21:34:41 +00:00
Automatic Updater
bf7327383b update copyright notice 2011-02-07 12:15:09 +00:00
Mark Andrews
7a2c642272 3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. RT #23120]
2011-02-07 00:18:39 +00:00
Mark Andrews
350f45bed8 9.6.3 2011-01-30 06:39:08 +00:00
Automatic Updater
92306578c0 update copyright notice 2011-01-27 23:45:47 +00:00
Mark Andrews
1be3bd3c8f 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:29:47 +00:00
Mark Andrews
dbb2c2bb65 9.6.3rc1 2011-01-14 00:52:40 +00:00
Automatic Updater
166b841b92 update copyright notice 2011-01-13 04:48:23 +00:00
Mark Andrews
b41db83139 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 02:14:46 +00:00
Mark Andrews
0219620a50 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 02:06:13 +00:00
Mark Andrews
d8bf1487c7 2995. [bug] The Kerberos realm was not being correctly extracted
from the signer's identity. [RT #22770]
2010-12-22 02:37:55 +00:00
Automatic Updater
27ee4b8ca4 update copyright notice 2010-12-14 23:46:09 +00:00
Mark Andrews
8c5ba02091 2984. [bug] Don't run MX checks when the target of the MX record
is ".".  [RT #22645]
2010-12-14 00:48:23 +00:00
Mark Andrews
57628d8c51 dst_key_attach 2010-12-09 07:55:34 +00:00
Mark Andrews
f3786154f8 9.6.3b1 2010-12-09 07:29:04 +00:00
Mark Andrews
12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:12:55 +00:00
Mark Andrews
4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG
key.  [RT #3415]
2010-12-02 23:40:28 +00:00
Mark Andrews
bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
wrong lock which could lead to server deadlock.
                        [RT #22614]
2010-12-02 05:09:58 +00:00
Automatic Updater
fff1bf76bd update copyright notice 2010-11-17 23:45:46 +00:00
Evan Hunt
886b4dfbb5 2971. [bug] Fixed a bug that caused journal files not to be
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
2010-11-17 00:36:27 +00:00
Mark Andrews
7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:35:03 +00:00
Mark Andrews
c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 02:23:44 +00:00
Automatic Updater
c828f12404 update copyright notice 2010-09-24 08:30:28 +00:00
Mark Andrews
ff826c2844 2964. [bug] view->queryacl was being overloaded. Seperate the
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
2010-09-24 08:09:08 +00:00
Automatic Updater
ce26def095 update copyright notice 2010-09-15 12:37:35 +00:00
Mark Andrews
6fd0466e76 2957. [bug] entropy_get() and entropy_getpseudo() failed to match
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
2010-09-15 03:26:09 +00:00
Mark Andrews
4616a212ab 9.6.3b1 2010-09-10 07:41:42 +00:00
Mark Andrews
7b2f8a1909 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:37:05 +00:00
Mark Andrews
5122ec7d9e 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 01:12:24 +00:00
Mark Andrews
004d763170 2950. [bug] named failed to perform a SOA up to date check when
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
2010-09-06 04:49:19 +00:00
Mark Andrews
f2d91bd3e5 2941. [bug] sdb and sdlz (dlz's zone database) failed to support
DNAME at the zone apex.  [RT #21610]
2010-08-16 05:22:12 +00:00
Mark Andrews
3a3a245419 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:21:39 +00:00
Automatic Updater
429ff72b69 update copyright notice 2010-08-11 23:45:49 +00:00
Tatuya JINMEI 神明達哉
85b94d05c0 2937. [bug] Worked around an apparent race condition in over
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
2010-08-11 23:04:21 +00:00