Commit Graph
6035 Commits
Author SHA1 Message Date
Mark Andrews bc6ec8a625 4060. [bug] dns_rdata_freestruct could be call on a uninitialised
structure when handling a error. [RT #38568]

(cherry picked from commit f4102ab13e)
2015-02-11 16:50:55 +11:00
Evan Hunt ca18699462 [v9_10] oops, win32 data exports work differently now 2015-02-10 17:27:42 -08:00
Evan Hunt 4f1e0dd70e [v9_10] export dns_zone_mkey_{month,day,hour} 2015-02-10 17:00:44 -08:00
Tinderbox User d5bad8c9b9 update copyright notice / whitespace 2015-02-10 23:45:50 +00:00
Evan Hunt df3ca0d7f3 [v9_10] prep 9.10.2rc2 2015-02-10 15:12:49 -08:00
Evan Hunt a7db54206c [v9_10] fix PRNG selection in dispatch.c
4058.	[bug]		UDP dispatches could use the wrong psuedorandom
			number generator context. [RT #38578]
2015-02-10 13:55:14 -08:00
Evan Hunt 83b613cbfb [v9_10] fix "initialize with revoked key" test 2015-02-10 13:40:39 -08:00
Evan Hunt f87d4ca084 [v9_10] 5011 fixes
4056.	[bug]		Fixed several small bugs in automatic trust anchor
			management, including a memory leak and a possible
			loss of key state information. [RT #38458]
2015-02-10 12:59:38 -08:00
Evan Hunt 6bd82ee4a5 [v9_10] avoid crash due to managed-key rollover
4053.	[security]	Revoking a managed trust anchor and supplying
			an untrusted replacement could cause named
			to crash with an assertion failure.
			(CVE-2015-1349) [RT #38344]
2015-02-03 18:25:58 -08:00
Tinderbox User 7c8189712b update copyright notice / whitespace 2015-01-30 23:45:46 +00:00
Mark Andrews 8c59d8f17a 4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
(cherry picked from commit e77ef50a57)
2015-01-30 21:49:23 +11:00
Tinderbox User 82b5996b64 update copyright notice / whitespace 2015-01-29 23:45:48 +00:00
Mark Andrews 1829b78a8d 4048. [bug] adb hash table was not being grown. [RT #38470]
(cherry picked from commit 4b36b9c1ff)
2015-01-29 11:51:25 +11:00
Evan Hunt 7389013151 [v9_10] bump mapapi (dns_rbtnode has changed) 2015-01-22 11:32:23 -08:00
Evan Hunt d17847d30d [v9_10] prep 9.10.2rc1 2015-01-22 10:35:49 -08:00
Evan Hunt 6cb3753654 [v9_10] silence warning 2015-01-22 09:07:57 -08:00
Mark Andrews 9b02bf01a1 4045. [bug] Skip to next master on dns_request_createvia4 failure.
[RT #25185]

(cherry picked from commit 875574f1e4)
2015-01-22 15:57:16 +11:00
Tinderbox User b99f7bf9b7 Merge branch 'v9_10' of /proj/git/prod/bind9 into v9_10 2015-01-21 23:45:31 +00:00
Mark Andrews fa5be051ae 4042. [bug] zone.c:iszonesecure was being called too late.
[RT #38371]

(cherry picked from commit 22e3e00ac9)
2015-01-21 13:19:19 +11:00
Tinderbox User 3817256ab9 update copyright notice / whitespace 2015-01-20 23:47:01 +00:00
Evan Hunt 1ef4faabd5 [v9_10] clean up gcc -Wshadow warnings
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
2015-01-20 13:43:35 -08:00
Mark Andrews f9ef9ca233 4038. [bug] Add 'rpz' flag to node and use it to determine whether
to call dns_rpz_delete.  This should prevent unbalanced
                        add / delete calls. [RT #36888

(cherry picked from commit cc0a48a381)
2015-01-20 16:58:15 +11:00
Mark Andrews 4b499125a9 4037. [bug] also-notify was ignoring the tsig key when checking
for duplicates resulting in some expected notify
                        messages not being sent. [RT #38369]

(cherry picked from commit f8eb4e5bfd)
2015-01-20 16:46:06 +11:00
Evan Hunt a7763db2e0 [v9_10] remove a potentially misleading log message 2015-01-19 20:15:24 -08:00
Tinderbox User 71b009ae5a update copyright notice / whitespace 2015-01-10 23:45:50 +00:00
Mark Andrews 38e0062bbd 4033. [bug] Missing out of memory check in request.c:req_send.
[RT #38311]

(cherry picked from commit f4dda9cf28)
2015-01-11 09:24:59 +11:00
Tinderbox User 167beb6aa5 update copyright notice / whitespace 2015-01-08 23:45:50 +00:00
Mark Andrews b1e4b4c0c8 4031. [bug] named-checkconf -z failed to report a missing file
with a hint zone. [RT #38294]

(cherry picked from commit d1f1f13c7f)
2015-01-08 19:20:04 +11:00
Tinderbox User 8a088ef1c8 update copyright notice / whitespace 2015-01-06 23:45:48 +00:00
Mark Andrews b7a7bc79ee 4028. [bug] $GENERATE with a zero step was not being caught as a
error.  A $GENERATE with a / but no step was not being
                        caught as a error. [RT #38262]

(cherry picked from commit b0c18fffd3)
2015-01-06 11:32:53 +11:00
Evan Hunt 9cad382ec7 [v9_10] corrections for win32/win64 builds 2014-12-29 11:29:28 -08:00
Tinderbox User 33eb74f112 update copyright notice / whitespace 2014-12-19 23:45:48 +00:00
Mark Andrews 14c7ef12e0 4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
dns_rdata_opt_current, dns_rdata_txt_first,
                        dns_rdata_txt_next and dns_rdata_txt_current were
                        documented but not implemented.  These have now been
                        implemented.

                        dns_rdata_spf_first, dns_rdata_spf_next and
                        dns_rdata_spf_current were document but not
                        implemented.  The prototypes for these
                        functions have been removed. [RT #38068]

4023.   [bug]           win32: socket handling with explict ports and
                        invoking named with -4 was broken for some
                        configurations. [RT #38068]

(cherry picked from commit 1e0ed0c6f5)
2014-12-19 11:37:26 +11:00
Evan Hunt 8a64e078d1 [v9_10] prep 9.10.2b1 2014-12-18 13:51:12 -08:00
Evan Hunt af5527c87b [v9_10] more missing entry points 2014-12-16 14:41:16 -08:00
Evan Hunt 6ac1d854a4 [v9_10] add more missing entry points 2014-12-16 12:41:20 -08:00
Mark Andrews e948a249e2 add missing entry points
(cherry picked from commit eb690e00e7)
2014-12-17 00:29:46 +11:00
Evan Hunt b0e9108311 [v9_10] adjust max-recursion-queries
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]

(cherry picked from commit be7fba8019)
2014-12-15 22:28:26 -08:00
Mark Andrews cbc8dc8d7a remove non null check
(cherry picked from commit 2e98ab2c9d)
2014-12-09 19:51:56 +11:00
Mark Andrews ac9781c7cd 4019. [func] If named is not configured to validate the answer
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
2014-12-05 18:04:26 +11:00
Mark Andrews b99cdea866 4015. [bug] Nameservers that are skipped due to them being
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]

(cherry picked from commit ea3aa401bc)
2014-12-03 11:42:16 +11:00
Mark Andrews d821a83c51 4014. [bug] When including a master file origin_changed was
not being properly set leading to a potentially
                        spurious 'inherited owner' warning. [RT #37919]

(cherry picked from commit 6444de08d1)
2014-12-03 09:45:06 +11:00
Mark Andrews 2d4d5c4cac use the actual header 2014-11-28 19:19:16 +11:00
Mark Andrews 6370a41ab5 add #define rdataset_clearprefetch rdataset_clearprefetch64
(cherry picked from commit 7554ff1619)
2014-11-25 12:06:43 +11:00
Tinderbox User 59aa4616e2 update copyright notice / whitespace 2014-11-24 23:53:24 +00:00
Mark Andrews dc6882addd 4010. [cleanup] Clear the prefetchable state when initiating a prefetch.
[RT #37399]

(cherry picked from commit 092d3b76db)
2014-11-24 11:20:20 +11:00
Evan Hunt 1d50ae782a [v9_10] win32 build fix 2014-11-20 15:56:16 -08:00
Evan Hunt 6c049c57d9 [v9_10] refactor max-recursion-queries
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
2014-11-19 18:26:46 -08:00
Evan Hunt b3aa528d7e [v9_10] add max-recursion-queries
also fixes and documentation for max-recursion-depth

(cherry picked from commit c4f54e5bd1)
2014-11-18 22:13:13 -08:00
Evan Hunt 6fd51d5088 [v9_10] limit recursion depth and iterative queries
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
2014-11-17 23:48:20 -08:00