Evan Hunt
6a7a54bca0
[v9_9] use libdns functions to convert rcode and opcode to text
2015-08-10 20:29:01 -07:00
Mark Andrews
c8c6367023
address len being shadowed
...
(cherry picked from commit f260e3a188 )
2015-08-11 13:00:29 +10:00
Tinderbox User
376a0b66a9
update copyright notice / whitespace
2015-08-10 23:46:11 +00:00
Tinderbox User
493aedaa32
newcopyrights
2015-08-10 23:30:19 +00:00
Evan Hunt
3b56383dde
[v9_9] add a "wire_test -d" option to read raw binary data
...
4169. [test] Added a 'wire_test -d' option to read input as
raw binary data, for use as a fuzzing harness.
[RT #40312 ]
2015-08-10 14:45:05 -07:00
Tinderbox User
2efa02bae5
regen v9_9
2015-08-08 01:17:32 +00:00
Tinderbox User
cd80053809
update copyright notice / whitespace
2015-08-07 23:46:19 +00:00
Tinderbox User
78deb16548
newcopyrights
2015-08-07 23:30:12 +00:00
Evan Hunt
0d83784a75
[v9_9] address buffer accounting error
...
4168. [security] A buffer accounting error could trigger an
assertion failure when parsing certain malformed
DNSSEC keys. (CVE-2015-5722) [RT #40212 ]
(cherry picked from commit ce9f893e21 )
2015-08-07 13:22:40 -07:00
Tinderbox User
c0fef5552a
regen v9_9
2015-08-07 01:15:03 +00:00
Evan Hunt
7a4e4c17a3
[v9_9] remove spurious "None"
2015-08-06 14:17:05 -07:00
Evan Hunt
f30ac9e0f1
[v9_9] revert incorrect 'correction'
2015-08-05 12:15:44 -07:00
Evan Hunt
eca0e613de
[v9_9] fix an awk portability issue
v9.9.8b1
2015-08-03 14:22:15 -07:00
Evan Hunt
de476c9f4d
[v9_9] add fetchlimit to README
2015-08-03 12:54:01 -07:00
Tinderbox User
1c74d995a4
update copyright notice / whitespace
2015-08-02 23:46:06 +00:00
Tinderbox User
068d11cce4
newcopyrights
2015-08-02 23:30:14 +00:00
Evan Hunt
f73bed07b5
[v9_9] reduce code duplication
2015-08-02 12:21:14 -07:00
Tinderbox User
0cd1091ce6
regen v9_9
2015-08-01 01:16:11 +00:00
Tinderbox User
6278caf810
update copyright notice / whitespace
2015-07-31 23:46:18 +00:00
Tinderbox User
486fe7c856
newcopyrights
2015-07-31 23:30:13 +00:00
Evan Hunt
77a4a1bf02
[v9_9] use 7 character short hash for srcid
2015-07-31 14:11:08 -07:00
Evan Hunt
c61fd79b0a
[v9_9] corrected relnotes -- assertion in name.c not message.c
2015-07-31 12:03:49 -07:00
Mukund Sivaraman
4df82d6ab8
Remove missing symbols (Windows)
2015-07-31 20:33:06 +05:30
Mukund Sivaraman
5cfbc228ca
Bump api versions for 9.9.8b1
2015-07-31 19:42:23 +05:30
Tinderbox User
7e8a691744
regenerate
2015-07-31 14:02:36 +00:00
Tinderbox User
e846218545
regen v9_9
2015-07-31 13:31:50 +00:00
Mukund Sivaraman
bb641f8e3a
Bump version to 9.9.8b1 and update CHANGES
2015-07-31 18:57:34 +05:30
Mukund Sivaraman
d6ef589b99
Fix win32 build (UNUSED is present later)
...
(cherry picked from commit 63dcc28d3e )
2015-07-31 15:01:20 +05:30
Tinderbox User
06325cd2e2
regen v9_9
2015-07-24 01:12:20 +00:00
Mark Andrews
9115ff0255
whitespace
2015-07-23 19:52:25 +10:00
Tinderbox User
ff710362d9
regen v9_9
2015-07-21 01:12:42 +00:00
Evan Hunt
9ff2198baf
[v9_9] add missing doc section on max-recursion-{depth,queries}
2015-07-20 15:30:26 -07:00
Tinderbox User
059561425f
regen v9_9
2015-07-15 01:12:12 +00:00
Mark Andrews
3fa6d28ea3
add CVE-2015-5477
2015-07-15 08:01:11 +10:00
Mark Andrews
21a25c7db0
change tag to security
...
(cherry picked from commit 13c55f6a60 )
2015-07-15 07:31:11 +10:00
Evan Hunt
b15d0b7839
[v9_9] spelling
2015-07-14 00:38:02 -07:00
Mark Andrews
5dc3a1c3d3
4165. [bug] An failure to reset a value to NULL in tkey.c could
...
result in an assertion failure. (CVE-2015-5477)
[RT #40046 ]
(cherry picked from commit dbb064aa79 )
2015-07-14 14:49:21 +10:00
Tinderbox User
cc1a709402
update copyright notice / whitespace
2015-07-13 23:46:09 +00:00
Tinderbox User
667eacc86b
newcopyrights
2015-07-13 23:30:13 +00:00
Mark Andrews
82b6caf613
4164. [bug] Don't rename slave files and journals on out of memory.
...
[RT #40033 ]
4163. [bug] Address compiler warnings. [RT #40024 ]
(cherry picked from commit 3a49d0ff10 )
2015-07-13 09:49:09 +10:00
Mark Andrews
e0fd534cdd
4162. [bug] httpdmgr->flags was not being initialized. [RT #40017 ]
...
(cherry picked from commit 0bc743f9bc )
2015-07-10 18:44:16 +10:00
Tinderbox User
aa1535671f
regen v9_9
2015-07-10 01:12:20 +00:00
Tinderbox User
835eaef8e3
update copyright notice / whitespace
2015-07-09 23:46:11 +00:00
Tinderbox User
dd9c682869
newcopyrights
2015-07-09 23:31:19 +00:00
Evan Hunt
400f206788
[v9_9] fix build error with ISC_MEM_TRACKLINES=0
2015-07-09 14:24:29 -07:00
Evan Hunt
c1009e506a
[v9_9] add missing functions
2015-07-09 00:04:25 -07:00
Evan Hunt
ea36796f82
[v9_9] DDoS mitigation features
...
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
These options are not available by default;
use "configure --enable-fetchlimit" (or
--enable-developer) to include them in the build.
See the ARM for details of these options. [RT #37125 ]
2015-07-08 23:00:58 -07:00
Mark Andrews
1ffb96f3dd
add comment about +trace and @server
...
(cherry picked from commit 2561b2dd84 )
2015-07-09 12:12:38 +10:00
Tinderbox User
363cc9876a
regen v9_9
2015-07-08 01:12:11 +00:00
Mark Andrews
2f01090351
4159. [cleanup] Alphabetize dig's help output. [RT #39966 ]
2015-07-08 09:56:48 +10:00