Commit Graph

472 Commits

Author SHA1 Message Date
Evan Hunt
84a718fb80 [v9_8] fix dns_resolver_destroyfetch race
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]

(cherry picked from commit 7f5bdf7f40)
(cherry picked from commit 314b626e20)
2014-02-18 23:32:47 -08:00
Tinderbox User
4bd05ab557 update copyright notice 2014-01-09 23:45:31 +00:00
Evan Hunt
d19bf3def7 [v9_8] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]

(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
(cherry picked from commit 9b950c70f1a6406c0f3dff604822329d06fc4837)
2014-01-08 16:40:19 -08:00
Evan Hunt
087c966374 [v9_8] fix insecure delegation across static-stub zones
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]

(cherry picked from commit 9b895f30f1)
(cherry picked from commit 0c0ce5f9a4)
2013-12-12 22:26:18 -08:00
Mark Andrews
7c0b7f6847 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]

(cherry picked from commit c3c8823fed)

Conflicts:
	CHANGES
	bin/check/win32/checktool.dsp.in
	bin/dnssec/win32/dnssectool.dsp.in
	bin/dnssec/win32/importkey.dsp.in
	bin/dnssec/win32/importkey.mak.in
	bin/named/geoip.c
	bin/named/include/named/geoip.h
	bin/tools/win32/rrchecker.dsp.in
	bin/tools/win32/rrchecker.mak.in
	config.h.win32
	lib/dns/geoip.c
	lib/dns/master.c
	lib/dns/win32/libdns.dsp.in
	lib/dns/win32/libdns.mak.in
	lib/isc/mem.c
	lib/isc/stats.c
	lib/isc/win32/file.c
	lib/isc/win32/libisc.def.in
	lib/isc/win32/libisc.mak.in
	lib/isc/win32/stdio.c
	lib/isccc/cc.c
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/makeversion.pl
	win32utils/setpk11provider.pl
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt

Conflicts:
	bin/dnssec/win32/verify.dsp.in
	bin/dnssec/win32/verify.mak.in
	bin/named/server.c
	bin/python/dnssec-checkds.py.in
	bin/python/dnssec-coverage.py.in
	lib/dns/nsec.c
	lib/dns/nsec3.c
	lib/dns/win32/libdns.mak.in
	lib/dns/zone.c
	lib/isc/win32/libisc.mak.in
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt
2013-12-04 14:08:17 +11:00
Mark Andrews
9deedfa18a missing FCTXTRACE2 macro RT#34914
(cherry picked from commit 0bfc15fe59)
2013-10-21 15:52:35 +11:00
Mark Andrews
6e69f3af23 add comment
(cherry picked from commit f45818b82a)
2013-07-26 10:26:13 +10:00
Evan Hunt
00c887b62f [v9_8] assertion failure in resolver.c
3584.	[security]	Caching data from an incompletely signed zone could
			trigger an assertion failure in resolver.c [RT #33690]
(cherry picked from commit 276457f7a3)
2013-06-04 11:23:26 -07:00
Mark Andrews
6227ab7137 3548. [bug] The NSID request code in resolver.c was broken
resulting in invalid EDNS options being sent.
                        [RT #33153]
(cherry picked from commit 4adf97c32f)

Conflicts:
	lib/dns/include/dns/message.h
	lib/dns/message.c
2013-04-08 16:45:14 +10:00
Mark Andrews
5323a5ebc3 3541. [bug] The parts if libdns was not being properly initialized
in when built in libexport mode. [RT #33028]
2013-04-03 17:28:30 +11:00
Mark Andrews
7502975522 3487. [bug] Change 3444 was not complete. There was a additional
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
2013-02-16 07:47:11 +11:00
Tinderbox User
855dfec81c update copyright notice 2013-01-10 23:45:31 +00:00
Mark Andrews
9ad7445961 3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]
2013-01-10 22:17:59 +11:00
Mark Andrews
9720bc060e silence signed/unsigned warning; rename log -> fctx_log 2012-12-19 12:40:53 +11:00
Tinderbox User
1195f0f7da update copyright notice 2012-12-18 23:45:23 +00:00
Mark Andrews
db77850ece 3443. [bug] The NOQNAME proof was not being returned from cached
insecure responses. [RT #21409]

Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/include/dns/nsec.h
2012-12-19 10:15:14 +11:00
Tinderbox User
9d25ad680f update copyright notice 2012-11-21 23:45:21 +00:00
ckb
2128f57ccf 3422. [bug] Added a clear error message for when the SOA does not
match the referral. [RT #31281]
2012-11-21 16:51:16 -06:00
Mark Andrews
b1aaa160ba 3391. [bug] DNSKEY that encountered a CNAME failed. [RT #31262] 2012-10-06 14:57:03 +10:00
Evan Hunt
89ef143e3f fix coverity issues
3388.	[bug]		Fixed several Coverity warnings. [RT #30996]
2012-10-02 23:50:20 -07:00
Mark Andrews
b4ba813a62 3376. [bug] Lack of EDNS support was being recorded without a
successful response. [RT #30811]
2012-09-14 11:02:24 +10:00
Evan Hunt
42b8ca8347 fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:03:46 -07:00
Mark Andrews
bdedbcd9d0 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:45:19 +10:00
Mark Andrews
72c1a6b333 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:43:18 +10:00
Evan Hunt
b276df716d fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 14:59:50 -07:00
Tinderbox User
91f0609aae regen v9_8 2012-03-07 01:54:34 +00:00
Automatic Updater
18ddc00419 update copyright notice 2012-02-14 23:46:30 +00:00
Mark Andrews
29d3240787 extend:
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
2012-02-14 00:25:41 +00:00
Mark Andrews
c395f7e0ff 3241. [bug] Address race conditions in the resolver code.
[RT #26889]
2011-12-07 23:10:20 +00:00
Evan Hunt
90d46d8ed1 missed a line 2011-12-05 17:27:42 +00:00
Evan Hunt
731e98287f Back out change #3182 and respin 2011-12-05 16:58:08 +00:00
Evan Hunt
f13b21bda2 3221. [bug] Fixed a potential coredump on shutdown due to
referencing fetch context after it's been freed.
			[RT #26720]
2011-11-23 22:53:13 +00:00
Evan Hunt
e38598d199 3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478] 2011-11-15 21:45:30 +00:00
Mark Andrews
3a4082ef2c 3192. [bug] A query structure could be used after being freed.
[RT #22208]
2011-11-02 23:44:53 +00:00
Automatic Updater
3f5b58b3fa update copyright notice 2011-10-27 23:45:57 +00:00
Scott Mann
a48afa63d7 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:26:12 +00:00
Mark Andrews
143ea455e7 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
                        [RT #25380]
2011-10-12 00:24:31 +00:00
Evan Hunt
5d0d5c6641 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 23:02:43 +00:00
Mark Andrews
ac6edf67d5 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:47:09 +00:00
Michael Graff
d5038d6782 catch two unused function params, followup to RT#23310 2011-02-18 23:41:51 +00:00
Michael Graff
0a95e19684 pull up rt23310 to v9_8 2011-02-18 23:04:04 +00:00
Mark Andrews
8e7e8fdec5 DEFAULT_QUERY_TIMEOUT 30 2011-02-08 22:56:53 +00:00
Automatic Updater
ddbe4c63e4 update copyright notice 2011-02-03 12:17:50 +00:00
Mark Andrews
ea09a134fd 3011. [func] Change the default query timeout from 30 seconds
to 10.  Allow setting this in named.conf using the new
                        'resolver-query-timeout' option, which specifies a max
                        time in seconds.  0 means 'default' and anything longer
                        than 30 will be silently set to 30. [RT #22852]
2011-02-03 05:50:08 +00:00
Automatic Updater
b720af4cd4 update copyright notice 2011-01-27 23:47:21 +00:00
Mark Andrews
1fba20bd0b 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:24:49 +00:00
Mark Andrews
506a2177bf 2961. [bug] Be still more selective about the non-authoritative
answers we apply change 2748 to. [RT #22074]
2010-09-15 12:21:27 +00:00
Evan Hunt
86dcc40058 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:57 +00:00
Mark Andrews
ff5864ef42 2928. [bug] Be more selective about the non-authoritative
answer we apply change 2748 to. [RT #21594]
2010-07-04 00:48:57 +00:00
Automatic Updater
b8d4e96e95 update copyright notice 2010-06-23 23:46:58 +00:00