Commit Graph

299 Commits

Author SHA1 Message Date
Mark Andrews
bf7497ab01 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:21:08 +00:00
Mark Andrews
fa6c90ade6 1966. [bug] Don't set CD when we have fallen back to plain DNS.
[RT #15727]
2006-01-06 00:47:31 +00:00
Mark Andrews
f21dcfa98d 1941. [bug] ncache_adderesult() should set eresult even if no
rdataset is passed to it. [RT #15642]

1939.   [bug]           The resolver could dereference a null pointer after
                        validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
2006-01-05 05:38:47 +00:00
Mark Andrews
a93ccce87d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:26:56 +00:00
Mark Andrews
8019162f81 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2006-01-04 03:43:20 +00:00
Mark Andrews
95d974159f update copyright notice 2006-01-04 00:37:22 +00:00
Mark Andrews
7afc8854ef 1946. [bug] resume_dslookup() could trigger a REQUIRE failure
when using forwarders. [RT #15549]
2006-01-03 07:23:52 +00:00
Mark Andrews
5a5d7187e5 1930. [port] HPUX: ia64 support. [RT #15473]
1929.   [port]          FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
2005-10-14 01:38:51 +00:00
Mark Andrews
7fce88dfa8 1919. [bug] dig's +sigchase code overhauled. [RT #14933]
1918.   [bug]           The DLV code has been re-worked to make no longer
                        query order sensitive. [RT #14933]
2005-08-25 01:54:34 +00:00
Mark Andrews
f49bde9e35 1895. [bug] fctx_create() could return success even though it
failed. [RT #14993]
2005-07-04 23:18:31 +00:00
Mark Andrews
f067c92dc1 1807. [bug] When forwarding (forward only) set the active domain
from the forward zone name. [RT #13526]
2005-03-16 03:51:08 +00:00
Mark Andrews
b999d4b195 1802. [bug] Handle connection resets better. [RT #11280] 2005-03-15 01:41:11 +00:00
Mark Andrews
bd59b0b193 1806. [bug] The resolver returned the wrong result when a CNAME /
DNAME was encountered when fetching glue from a
                        secure namespace. [RT #13501]

1805.   [bug]           Pending status was not being cleared when DLV was
                        active. [RT #13501]
2005-02-08 23:59:45 +00:00
Mark Andrews
8123a59155 update copyright notice 2005-01-20 00:00:13 +00:00
Mark Andrews
d22279b6cd 1800. [bug] Changes #1719 allowed a INSIST to be triggered.
[RT #13428]
2005-01-19 23:38:14 +00:00
Mark Andrews
91766f1d92 1773. [bug] Fast retry on host / net unreachable. [RT #13153] 2004-12-03 02:09:33 +00:00
Mark Andrews
c18218935f 1754. [bug] We wern't always attempting to query the parent
server for the DS records at the zone cut.
                        [RT #12774]
2004-11-10 21:57:35 +00:00
Mark Andrews
cb210a330f 1760. [bug] Host / net unreachable was not penalising rtt
estimates. [RT #12970]
2004-11-10 21:48:01 +00:00
Mark Andrews
af3411965a 1749. [bug] 'check-names response ignore;' failed to ignore.
[RT #12866]
2004-10-21 01:53:53 +00:00
Mark Andrews
bf1bb3c1fe 1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
negative response. [RT #12506]

1719.   [bug]           named was not correctly caching a RFC 2308 Type 1
                        negative response. [RT #12506]

1718.   [bug]           nsupdate was not handling RFC 2308 Type 3 negative
                        responses when looking for the zone / master server.
                        [RT #12506]
2004-09-16 02:12:19 +00:00
Mark Andrews
9ab0d979a0 1704. [port] lwres needed a snprintf() implementation for
platforms without snprintf().  Add missing
                        "#include <isc/print.h>". [RT #12321]
2004-08-28 06:27:23 +00:00
Mark Andrews
2f595bfb3e 1695. [bug] DS records when forwarding require special handling.
[RT #12133]
2004-08-10 00:40:41 +00:00
Rob Austein
9318629613 1685. [bug] Change #1679 loop tests weren't quite right. 2004-07-02 21:48:27 +00:00
Mark Andrews
64b02b79ee change #1679 still left case where address could not be tried.
fix loop termination condition to ensure that all finds are tried.
2004-06-27 01:29:51 +00:00
Mark Andrews
7c2c98f560 1679. [bug] When there was a single nameserver with multiple
addresses for a zone not all addresses were tried.
                        [RT #11706]
2004-06-25 04:41:24 +00:00
Mark Andrews
0d3a13fc3a 1647. [bug] It was possible trigger a INSIST when chasing a DS
record that required walking back over a empty node.
                        [RT #11445]
2004-06-07 03:24:57 +00:00
Mark Andrews
c95fa7d1d8 1606. [bug] DVL insecurity proof was failing.
1605.   [func]          New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 05:06:42 +00:00
Mark Andrews
22cf6188e5 silence compiler warning 2004-04-19 23:41:33 +00:00
Mark Andrews
69b34284dc 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews
46278b601d hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:10:41 +00:00
Mark Andrews
058e675526 remove extranous semi-colons 2004-03-16 03:18:02 +00:00
Mark Andrews
511621255e 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.

1527.  [cleanup]       Reduce the number of gettimeofday() calls without
                       losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
cbdd3a318b update lib copyrights 2004-03-06 08:15:48 +00:00
Mark Andrews
694b001677 1586. [func] "check-names" is now implemented. 2004-02-27 21:45:34 +00:00
Mark Andrews
a834f52f53 1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
[RT #10346]
2004-02-20 00:50:51 +00:00
Mark Andrews
e8961b719e #include <isc/string.h> 2004-02-02 04:42:13 +00:00
Mark Andrews
fef10e2071 1534. [bug] Race condition when priming cache. [RT# 9940] 2004-01-05 08:02:17 +00:00
Mark Andrews
bb6473e31f 1546. [bug] We were rejecting valid secure CNAME to negative
answers.
2004-01-05 05:46:03 +00:00
Mark Andrews
69acffbb19 sync with HEAD 2003-10-14 03:48:11 +00:00
Mark Andrews
41f3bf915b 1512. [bug] Extend the delegation-only logging to return query
type, class and responding nameserver.
2003-09-22 00:43:29 +00:00
Mark Andrews
11ba97bb12 1511. [bug] delegation-only was generating false positives
on negative answers from subzones.
2003-09-22 00:41:11 +00:00
Mark Andrews
d6d893e17b 1509. [bug] Hint zones should accept delegation-only. Forward
zone should not accept delegation-only.

1508.   [bug]           Don't apply delegation-only checks to answers from
                        forwarders.

1507.   [bug]           Handle BIND 8 style returns to NS queries to parents
                        when making delegation-only checks.

1506.   [bug]           Wrong return type for dns_view_isdelegationonly().

1505.   [bug]           Uninitialised rdataset in sdb. [RT #8750]

1504.   [func]          New zone type "delegation-only".
2003-09-19 06:20:55 +00:00
Mark Andrews
57b54234cd sizeof style 2003-09-11 00:18:18 +00:00
Mark Andrews
dd8e7329b1 pullup:
1458.   [cleanup]       sprintf() -> snprintf().
2003-08-27 07:22:41 +00:00
Mark Andrews
1c2bf5f1cb 1446. [func] Implemented undocumented alternate transfer sources
from BIND 8.  See use-alt-transfer-source,
                        alt-transfer-source-v4 and alt-transfer-source-v6.
2003-08-27 02:13:50 +00:00
Mark Andrews
19548853e9 1432. [func] The advertised EDNS UDP buffer size can now be set
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
4154634631 1412. [func] You can now specify servers to be tried if a nameserver
has IPv6 address and you only support IPv4 or the
                        reverse. See dual-stack-servers.
2003-08-26 03:24:14 +00:00
Mark Andrews
388672fb80 pullup misc. changes 2003-08-25 05:49:57 +00:00
Mark Andrews
c3fedc9282 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
2003-08-25 04:16:27 +00:00