ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,014 Commits 589 Branches 805 Tags
36efdc151e9656c5fd2851dfdec0fe9664b98bfc
Commit Graph
7865 Commits
Author SHA1 Message Date
Mark Andrews 5e0523fc23 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:46:23 +00:00
Mark Andrews 795f1f2db0 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 01:48:32 +00:00
Automatic Updater 932cc52623 update copyright notice 2010-10-18 23:46:34 +00:00
Mark Andrews 7d5a816e83 2966. [bug] isc_print_vsnprintf() failed to check if there was 
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
 2010-10-18 04:04:35 +00:00
Automatic Updater 6b4f4f8be4 update copyright notice 2010-09-29 23:46:31 +00:00
Mark Andrews fa4d117db2 2964. [bug] view->queryacl was being overloaded. Seperate the 
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
 2010-09-29 00:03:32 +00:00
Mark Andrews f1c2e9fc96 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:38:51 +00:00
Mark Andrews 279fa6e621 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:15:55 +00:00
Mark Andrews 311ba6bc1a isc_mem_isovermem 2010-09-03 04:38:11 +00:00
Mark Andrews 6039a662c1 9.6-ESV-R2 2010-09-03 03:15:25 +00:00
Mark Andrews 25d78ece28 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call. 
[RT #20877]
 2010-09-03 02:55:18 +00:00
Mark Andrews c44bb94bc8 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:25:22 +00:00
Automatic Updater 5d718a2f9c update copyright notice 2010-08-12 23:46:25 +00:00
Tatuya JINMEI 神明達哉 302cb51bc4 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 23:42:53 +00:00
Mark Andrews 7a2f2d9ba0 cvs rdiff -r1.2931.2.271 -r1.2931.2.272 bind9/CHANGES 
cvs rdiff -r1.166.34.3 -r1.166.34.4 bind9/bin/named/main.c
cvs rdiff -r1.313.20.18 -r1.313.20.19 bind9/bin/named/query.c
cvs rdiff -r1.80 -r1.80.12.1 bind9/bin/named/include/named/globals.h
cvs rdiff -r1.13 -r1.13.176.1 bind9/bin/tests/system/start.pl
cvs rdiff -r1.53.48.7 -r1.53.48.8 bind9/bin/tests/system/dnssec/tests.sh
cvs rdiff -r1.13 -r1.13.48.1 \
    bind9/bin/tests/system/dnssec/ns3/secure.example.db.in
cvs rdiff -r1.3 -r1.3.48.1 bind9/bin/tests/system/dnssec/ns7/named.conf
cvs rdiff -r0 -r1.2.4.2 bind9/bin/tests/system/dnssec/ns7/named.nosoa \
    bind9/bin/tests/system/dnssec/ns7/nosoa.secure.example.db
cvs rdiff -r1.164.12.21 -r1.164.12.22 bind9/lib/dns/validator.c
 2010-06-26 00:02:45 +00:00
Automatic Updater 4e1806d320 update copyright notice 2010-06-23 23:46:25 +00:00
Mark Andrews d0e0f26753 2921. [bug] The resolver could attempt to destroy a fetch context 
to soon.  [RT #19878]
 2010-06-23 01:51:30 +00:00
Automatic Updater e8bfdebfad update copyright notice 2010-06-04 23:49:23 +00:00
Mark Andrews f18a54a190 remove trailing comma 2010-06-04 00:17:01 +00:00
Mark Andrews 43a3530e26 silence compiler, explict coversion 2010-05-19 09:56:44 +00:00
Mark Andrews b24553b060 2900. [bug] The placeholder negative caching element was not 
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
 2010-05-19 06:56:01 +00:00
Automatic Updater 3541849eb2 update copyright notice 2010-05-14 23:48:44 +00:00
Mark Andrews cccda7f37e 2890. [bug] Handle the introduction of new trusted-keys and 
DS, DLV RRsets better. [RT #21097]
 2010-05-14 03:11:02 +00:00
Mark Andrews 1fc35fe236 9.6-ESV-R1 2010-05-10 03:01:18 +00:00
Mark Andrews 48d417b283 2876. [bug] Named could return SERVFAIL for negative responses 
from unsigned zones. [RT #21131]
 2010-04-21 04:25:51 +00:00
Mark Andrews a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Mark Andrews dbd13430ce 9.6.2 2010-02-18 03:40:09 +00:00
Automatic Updater 5eb1c53ca2 update copyright notice 2010-02-04 23:47:46 +00:00
Tatuya JINMEI 神明達哉 79ee58d29d backout diagnose assertion check accidentally committed with the previous 
commit.
 2010-02-04 23:41:14 +00:00
Tatuya JINMEI 神明達哉 d03e7dd277 2850. [bug] If isc_heap_insert() failed due to memory shortage 
the heap would have corrupted entries. [RT #20951]

9.8.0, 9.7.1(?), 9.6.2, 9.5.3
(what about 9.4-ESV?)
 2010-02-04 23:27:32 +00:00
Mark Andrews 01347cce29 2849. [bug] Don't treat errors from the xml2 library as fatal. 
[RT #20945]
 2010-02-04 01:10:32 +00:00
Automatic Updater 1b50f0d68e update copyright notice 2010-01-31 23:47:31 +00:00
Mark Andrews b4d6057cf0 2846. [bug] EOF on unix domain sockets was not being handled 
correctly. [RT #20731]
 2010-01-31 23:21:58 +00:00
Mark Andrews 1077e73992 silence compiler warning 2010-01-22 02:36:49 +00:00
Automatic Updater 9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Evan Hunt 905c946de0 add unresolved externals isc_sha{256,512}_invalidate 2010-01-15 21:53:59 +00:00
Evan Hunt 9b72b0258e prepare for 9.6.2rc1 release 2010-01-15 21:12:11 +00:00
Evan Hunt 3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms, 
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
 2010-01-15 19:38:54 +00:00
Automatic Updater d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont 6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater c91b60a119 update copyright notice 2010-01-07 23:47:36 +00:00
Evan Hunt 0f83518a99 2831. [security] Do not attempt to validate or cache 
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
 2010-01-07 17:49:01 +00:00
Automatic Updater ef413fafe5 update copyright notice 2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉 450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:34:30 +00:00
Evan Hunt c7c6605eb0 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:44:45 +00:00
Mark Andrews ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Evan Hunt 65bbefae47 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define 
[RT #20771]
 2009-12-24 00:34:59 +00:00
Mark Andrews 669b1ee4d8 2814. [func] Provide a definitive error message when a master 
zone is not loaded. [RT #20757]
 2009-12-21 04:32:42 +00:00
Mark Andrews b1c2fed160 dns_dnssec_selfsigns 2009-12-03 05:42:39 +00:00
Mark Andrews 8b7fa47bf2 2797. [bug] Don't decrement the dispatch manager's maxbuffers. 
[RT #20613]
 2009-12-02 23:26:28 +00:00