Commit Graph

3904 Commits

Author SHA1 Message Date
Evan Hunt
78ba74e63d remove spurious newlines in zone.c logging
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
2012-08-16 10:41:09 -07:00
Mark Andrews
1bbd36c4db 3364. [security] Named could die on specially crafted record.
[RT #30416]
2012-08-16 09:42:14 +10:00
Mark Andrews
b8493d3292 whitespace 2012-08-16 09:41:03 +10:00
Evan Hunt
85705b4b5a allow "forward" and "forwarders" in static-stub
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]
2012-08-15 13:08:15 -07:00
Evan Hunt
820fdd61dd properly range-check fields that do not allow 0
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
2012-08-13 22:39:42 -07:00
Evan Hunt
8f6d6d72e8 support '-' salt in rndc signing -nsec3param
3361.	[bug]		"rndc signing -nsec3param" didn't work correctly
			when salt was set to '-' (no salt). [RT #30099]
2012-08-13 22:24:36 -07:00
Mark Andrews
f06dad6860 3360. [bug] 'host -w' could die. [RT #18723] 2012-08-14 11:05:29 +10:00
Evan Hunt
3f755529ee address memory leak with bad tsig secret
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
2012-08-10 20:15:59 -07:00
Mark Andrews
5f25018640 placeholder 2012-08-05 01:07:08 +10:00
Mar Andrews
1eb871bb42 3357. [port] Add support for libxml2-2.8.x [RT #30440] 2012-08-02 01:49:50 +00:00
ckb
e7857b5ee0 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
2012-07-25 17:06:34 -05:00
Mark Andrews
3ce2018dfa 3355. [port] Use more portable awk in verify system test. 2012-07-25 12:59:45 +10:00
Evan Hunt
7d47fcaf50 fix change note 3348, bug not security 2012-07-23 13:01:15 -07:00
Mark Andrews
6eb6af6732 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:08:21 +10:00
Mark Andrews
c965b18690 3353. [bug] Use a single task for task exclusive operations.
[RT #29872]
2012-07-19 23:00:21 +10:00
Mark Andrews
ee2f98d5cf 3352. [bug] Ensure that learned server attributes timeout of the
adb cache. [RT #29856]
2012-07-18 14:16:37 +10:00
Mark Andrews
c963ca7542 3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
                        memory debugging flags are set. [RT #30243]
2012-07-18 10:02:32 +10:00
Mark Andrews
d0d892f449 3350. [bug] Memory read overrun in isc___mem_reallocate if
ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]
2012-07-18 09:50:52 +10:00
Mark Andrews
1a594d204a fix race in ISC_QUEUE_PUSH 2012-07-17 15:12:20 +10:00
ckb
106fbae9e5 corrected the RT# in the CHANGES file 2012-07-09 17:40:22 -05:00
ckb
3342b2720b corrected CHANGES (added rt #) 2012-07-09 13:20:33 -05:00
ckb
ad7fdba1ed 3348. [security] prevent RRSIG data from being cached if a negative
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well.
2012-07-09 12:51:11 -05:00
Evan Hunt
8d678e40f6 add RT # to change note 2012-07-05 17:22:48 -07:00
ckb
ca092ed9f2 added CHANGES note for
dnssec-settime: Issue a warning when writing a new private key file would cause a change in the permissions of the existing file.
2012-07-05 16:30:37 -05:00
Evan Hunt
cdd271b14a fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:01:48 -07:00
Evan Hunt
d64138e577 addressed possible race in ISC_QUEUE
3345.	[bug]		Addressed race condition when removing the last item
			or inserting the first item in an ISC_QUEUE.
			[RT #29539]
2012-07-02 09:37:17 -07:00
Mark Andrews
2bf80ddc75 added missing CHANGES 2012-06-28 17:37:27 +10:00
Mark Andrews
00c605a643 3343. [placeholder] 2012-06-27 10:02:22 +10:00
Mark Andrews
c41c261fc7 3342. [bug] Change #3314 broke saving of stub zones to disk
resulting in excessive cpu usage in some cases.
                        [RT #29952]
2012-06-27 09:21:09 +10:00
Mark Andrews
ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
2012-06-25 13:57:32 +10:00
ckb
3d1eaf18c7 added a CHANGES note 2012-06-20 15:38:28 -05:00
Mark Andrews
7865ea9545 3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228] 2012-06-14 15:44:20 +10:00
Mark Andrews
57f1d800f8 3338. [bug] Address race condition in units tests: asyncload_zone
and asyncload_zt. [RT #26100]
2012-06-14 15:13:44 +10:00
Mark Andrews
c298583db5 3337. [bug] Change #3294 broke support for the multiple keys
in controls. [RT #29694]
2012-06-13 16:25:42 +10:00
Mark Andrews
80fa3ef851 3336. [func] Maintain statistics for RRsets tagged as "stale".
[RT #29514]
2012-06-08 16:32:44 +10:00
Evan Hunt
04e5f9812c nslookup exit with error if unsuccessful
3335.	[func]		nslookup: return a nonzero exit code when unable
			to get an answer. [RT #29492]
2012-06-07 22:03:47 -07:00
Mark Andrews
f6c77d1bea spelling 2012-06-08 14:27:34 +10:00
Mark Andrews
9c0fa8d469 add # 2012-06-08 13:57:06 +10:00
Mark Andrews
109ebcc980 3334. [bug] Hold a zone table reference while performing a
asyncronous load of a zone. [RT #28326]
2012-06-08 13:52:13 +10:00
Mark Andrews
7310c0b1ee 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:34:33 +10:00
Mark Andrews
a0c1fa2a8f 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:51:11 +10:00
Mark Andrews
432defb06a fix change # 2012-06-01 23:53:33 +10:00
Mark Andrews
e928207c38 3331. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644]
2012-06-01 23:51:59 +10:00
Vernon Schryver
57a2236357 CHANGES for RT 26172 2012-06-01 00:12:34 +00:00
Evan Hunt
c78fb0ddee s/func/protocol/ for ECDSA 2012-05-17 15:53:32 -07:00
Evan Hunt
26833735d3 Handle RRSIG signer case consistently
3329.	[bug]		Handle RRSIG signer-name case consistently: We
			generate RRSIG records with the signer-name in
			lower case.  We accept them with any case, but if
			they fail to validate, we try again in lower case.
			[RT #27451]
2012-05-17 10:44:16 -07:00
Evan Hunt
01695063c6 fix check_data() usage
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
2012-05-16 23:12:57 -07:00
Evan Hunt
d878b8d87c merged filter-aaaa-on-v6 (ATT SoW)
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]
2012-05-14 11:50:00 -07:00
Evan Hunt
dd2a0a6d2d Merge statistics code (ATT SoW, rt24117)
This includes the following changes:

3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]
2012-05-14 10:06:05 -07:00
Mark Andrews
c438f1beb9 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:28:32 +10:00