ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
23,355 Commits 589 Branches 805 Tags
3fe33590315cd5ab2af1f1b49e5ac36c9c195991
Commit Graph

118 Commits

Author SHA1 Message Date
Tinderbox User
e52e476295 update copyright notice / whitespace 2016-07-14 23:54:00 +00:00
Mark Andrews
456d497196 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED 
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
 2016-07-14 15:08:36 +10:00
Mark Andrews
372bc0c02e 4265. [bug] Address unchecked isc_mem_get calls. [RT #41187] 
(cherry picked from commit 8e73941f33)
 2015-11-30 10:30:11 +11:00
Mark Andrews
84cfddb9d3 4175. [bug] TKEY with GSS-API keys needed bigger buffers. 
[RT #40333]

(cherry picked from commit 9dc5ef7f24)
 2015-08-14 08:25:59 +10:00
Mark Andrews
5dc3a1c3d3 4165. [bug] An failure to reset a value to NULL in tkey.c could 
result in an assertion failure. (CVE-2015-5477)
                        [RT #40046]

(cherry picked from commit dbb064aa79)
 2015-07-14 14:49:21 +10:00
Francis Dupont
5627414c1e added print.h includes 2015-05-23 15:40:05 +02:00
Mark Andrews
1c33552240 4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759] 
(cherry picked from commit 29d52c001f)
(cherry picked from commit a55c3151b2)
 2015-03-03 16:52:02 +11:00
Mark Andrews
31cdad2c40 4060. [bug] dns_rdata_freestruct could be call on a uninitialised 
structure when handling a error. [RT #38568]

(cherry picked from commit f4102ab13e)
 2015-02-11 16:51:25 +11:00
Tinderbox User
9cbd625449 update copyright notice / whitespace 2015-01-20 23:47:26 +00:00
Evan Hunt
57f015bd2a [v9_9] clean up gcc -Wshadow warnings 
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
 2015-01-20 14:55:41 -08:00
Tinderbox User
864ca7ce33 update copyright notice 2014-01-09 23:45:53 +00:00
Evan Hunt
8c7ce6d3e6 [v9_9] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]

(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
 2014-01-08 16:38:56 -08:00
Tinderbox User
0042c4ef10 update copyright notice 2013-02-18 23:45:42 +00:00
Mark Andrews
8ac4a05471 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:08 +11:00
Mark Andrews
46fbcf04a0 3300. [bug] Named could die if gssapi was enabled in named.conf 
but was not compiled in. [RT #28338]
 2012-03-29 09:52:44 +11:00
Tinderbox User
5abefae88a update copyright notice 2012-03-10 23:45:42 +00:00
Evan Hunt
c9481a4625 set $Id$ 2012-03-07 08:18:58 -08:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd 3005. [port] Solaris: Work around the lack of 
gsskrb5_register_acceptor_identity() by setting
			the KRB5_KTNAME environment variable to the
			contents of tkey-gssapi-keytab.  Also fixed
			test errors on MacOSX.  [RT #22853]
 2011-01-08 00:33:12 +00:00
Automatic Updater
941c0792f2 update copyright notice 2010-12-18 23:47:11 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed 
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
 2010-12-18 01:56:23 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 00:54:34 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Automatic Updater
1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00
Evan Hunt
bf9b852c3e 2929. [bug] Improved handling of GSS security contexts: 
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
 2010-07-09 05:13:15 +00:00
Automatic Updater
d7201de09b update copyright notice 2009-09-02 23:48:03 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00
Mark Andrews
887ef2682c 2352. [bug] Various GSS_API fixups. [RT #17729] 2008-04-03 00:45:23 +00:00
Automatic Updater
2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Automatic Updater
1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews
dc19dcbc23 2283. [bug] TSIG keys were not attaching to the memory 
context.  TSIG keys should use the rings
                        memory context rather than the clients memory
                        context. [RT #17377]
 2008-01-02 04:24:59 +00:00
Automatic Updater
70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
21c7ecb9f0 better mcxt handling. remove buffer handling layer violation 2006-12-05 21:59:12 +00:00
Mark Andrews
377231eb95 update copyright notice 2006-12-05 00:13:48 +00:00
Mark Andrews
289ae548d5 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 01:54:53 +00:00
Mark Andrews
2674e1a455 1940. [bug] Fixed a number of error conditions reported by 
Coverity.
 2005-11-30 03:33:49 +00:00
Mark Andrews
e8e62bb782 1884. [bug] process_dhtkey() was using the wrong memory context 
to free some memory. [RT #14890]
 2005-06-10 06:58:27 +00:00
Mark Andrews
69fe9aaafd update copyright notice 2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews
23fdb6a5a3 1654. [bug] isc_result_totext() contained array bounds read 
error.

1653.   [func]          Add key type checking to dst_key_fromfilename(),
                        DST_TYPE_KEY should be used to read TSIG, TKEY and
                        SIG(0) keys.

1652.   [bug]           TKEY still uses KEY.
 2004-06-11 00:27:06 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Andreas Gustafsson
5d727330e4 brace style 2001-12-03 19:44:08 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding 
standards; add exceptions to the coding standards for cases where this is
not desirable
 2001-11-30 01:59:49 +00:00
Brian Wellington
173a45b43c fix assertion in tkey code [RT #1866] 2001-10-09 17:26:33 +00:00
Andreas Gustafsson
76c8294c81 format string bugs and improved format string checking [RT #1578] 2001-08-08 22:54:55 +00:00
Brian Wellington
01535cfb3a removed erroneous UNUSED macro 2001-06-08 19:16:15 +00:00
Brian Wellington
9af6e1c548 Don't die when trying to delete a nonexistent key [RT #1392] 2001-06-08 18:29:31 +00:00