Mark Andrews
9671f6f0d4
typedef mode_t
2012-07-20 16:37:16 +10:00
Tinderbox User
b53430a3dd
update copyright notice
2012-07-19 23:45:41 +00:00
Mark Andrews
b67af36d3b
9.9.2b1
2012-07-20 00:15:13 +10:00
Mark Andrews
73dbdbaee7
3353. [bug] Use a single task for task exclusive operations.
...
[RT #29872 ]
2012-07-19 23:03:07 +10:00
Tinderbox User
fe975902c0
update copyright notice
2012-07-18 23:45:43 +00:00
Mark Andrews
c9f946b5a8
3352. [bug] Ensure that learned server attributes timeout of the
...
adb cache. [RT #29856 ]
2012-07-18 14:17:47 +10:00
Mark Andrews
c3940405bf
3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
...
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
memory debugging flags are set. [RT #30243 ]
2012-07-18 10:03:34 +10:00
Mark Andrews
f96a219857
3350. [bug] Memory read overrun in isc___mem_reallocate if
...
ISC_MEM_DEBUGCTX memory debugging flag is set.
[RT #30240 ]
2012-07-18 09:52:07 +10:00
Mark Andrews
a98a24b2c4
fix race in ISC_QUEUE_PUSH
2012-07-17 15:15:56 +10:00
ckb
6235fc5a0e
3348. [security] prevent RRSIG data from being cached if a negative
...
record matching the covering type exists at a higher
trust level. Such data already can't be retrieved from
the cache since change 3218 -- this prevents it
being inserted into the cache as well. [RT #26809 ]
2012-07-09 13:23:35 -05:00
Evan Hunt
b5bfcabdc0
warn when changing mode on .private files
...
3347. [bug] dnssec-settime: Issue a warning when writing a new
private key file would cause a change in the
permissions of the existing file. [RT #27724 ]
2012-07-05 18:03:57 -07:00
Evan Hunt
576df86934
fix bad-cache assert
...
3346. [security] Bad-cache data could be used before it was
initialized, causing an assert. [RT #30025 ]
2012-07-02 10:02:23 -07:00
Evan Hunt
6c388d263b
addressed possible race in ISC_QUEUE
...
3345. [bug] Addressed race condition when removing the last item
or inserting the first item in an ISC_QUEUE.
[RT #29539 ]
2012-07-02 09:38:18 -07:00
Tinderbox User
03565e899d
update copyright notice
2012-06-29 23:45:45 +00:00
Mark Andrews
cb421b69c3
reverse bad copyright update
2012-06-29 11:41:43 +10:00
Tinderbox User
cd24b114bf
update copyright notice
2012-06-29 01:22:07 +00:00
Tinderbox User
9418237f65
update copyright notice
2012-06-26 23:45:42 +00:00
Mark Andrews
68565715ec
3342. [bug] Change #3314 broke saving of stub zones to disk
...
resulting in excessive cpu usage in some cases.
[RT #29952 ]
2012-06-27 09:23:01 +10:00
Tinderbox User
d3bb7b6b7b
update copyright notice
2012-06-25 23:45:45 +00:00
Mark Andrews
7c25aaf620
3341. [func] New "dnssec-verify" command checks a signed zone
...
to ensure correctness of signatures and of NSEC/NSEC3
chains. [RT #23673 ]
2012-06-25 14:57:32 +10:00
Mark Andrews
cbd62d92ec
silence compiler warning by using offsetof to get structure element offsets
2012-06-25 12:02:51 +10:00
Mark Andrews
07dd05676e
remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);'
2012-06-21 14:29:30 +10:00
Tinderbox User
bf8c2431d5
update copyright notice
2012-06-20 23:46:27 +00:00
Mark Andrews
acebc2457c
3339. [func] Allow the maximum supported rsa exponent size to be
...
specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-20 21:34:24 +10:00
Mark Andrews
ca48cdf0ac
3338. [bug] Address race condition in units tests: asyncload_zone
...
and asyncload_zt. [RT #26100 ]
2012-06-14 15:15:57 +10:00
Mark Andrews
c7818fb0be
3337. [bug] Change #3294 broke support for the multiple keys
...
in controls. [RT #29694 ]
2012-06-13 16:30:46 +10:00
Mark Andrews
ed622b2381
3334. [bug] Hold a zone table reference while performing a
...
asyncronous load of a zone. [RT #28326 ]
2012-06-08 13:55:11 +10:00
Mark Andrews
4db66665f5
3333. [bug] Setting resolver-query-timeout too low can cause
...
named to not recover if it looses connectivity.
[RT #29623 ]
2012-06-08 12:38:48 +10:00
Mark Andrews
5f348a21be
3332. [bug] Re-use cached DS rrsets if possible. [RT 29446]
2012-06-07 12:57:33 +10:00
Tinderbox User
de16ff6d04
update copyright notice
2012-06-01 23:45:51 +00:00
Evan Hunt
73319305bf
security fix
...
3331. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644 ]
2012-06-01 09:47:28 -07:00
Vernon Schryver
f05089ea5c
For rt26172:
...
Add
- optional "recursive-only yes|no" to the response-policy statement
- optional max-policy-ttl to limit the lies that "recursive-only no"
can introduce into resolvers' caches
- test that queries with RD=0 are not rewritten by default
- performance smoke test
Change encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
Fix rt26180 assert botch in zone_findrdataset() in this branch
as well.
Fix missing signatures on NOERROR results despite RPZ hits
when there are signatures and the client asks for DNSSEC,
2012-06-01 01:03:43 +00:00
Mark Andrews
8a08f06cb2
silence warnings from clang
2012-05-30 11:54:27 +10:00
Mark Andrews
e6e3680d46
= -> ==
2012-05-18 17:12:47 +10:00
Tinderbox User
a2093c07a5
update copyright notice
2012-05-17 23:45:48 +00:00
Evan Hunt
2813f4f965
fix check_data() usage
...
3328. [bug] Fixed inconsistent data checking in dst_parse.c.
[RT #29401 ]
2012-05-17 16:16:49 -07:00
Evan Hunt
8b1b819ae4
add ECDSA support
...
3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918 ]
2012-05-17 15:52:07 -07:00
Evan Hunt
e39b4d8054
Handle RRSIG signer case consistently
...
3329. [bug] Handle RRSIG signer-name case consistently: We
generate RRSIG records with the signer-name in
lower case. We accept them with any case, but if
they fail to validate, we try again in lower case.
[RT #27451 ]
2012-05-17 10:59:07 -07:00
Mark Andrews
f5e44458b8
3318. [tuning] Reduce the amount of work performed while holding a
...
bucket lock when finshed with a fetch context.
[RT #29239 ]
2012-05-10 08:39:51 +10:00
Mark Andrews
8decf831dc
9.9.1
2012-04-27 13:53:28 +10:00
Mark Andrews
1189f64314
TRUE -> ISC_TRUE
2012-04-26 15:07:53 +10:00
Mark Andrews
038364699c
3314. [bug] The masters list could be updated while refesh_callback
...
and stub_callback were using it. [RT #26732 ]
2012-04-26 13:01:04 +10:00
Mark Andrews
07ef11a326
3313. [protocol] Add TLSA record type. [RT #28989 ]
2012-04-26 12:36:53 +10:00
Mark Andrews
b58a55c2d9
3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
...
[RT #27631 ]
2012-04-26 11:45:14 +10:00
Mark Andrews
b41cfce325
3311. [bug] Abort the zone dump if zone->db is NULL in
...
zone.c:zone_gotwritehandle. [RT #29028 ]
2012-04-26 11:26:11 +10:00
Tinderbox User
d124119c13
update copyright notice
2012-04-25 23:45:37 +00:00
Evan Hunt
825bebde58
increase table size for mutex profiling
2012-04-24 16:52:40 -07:00
Evan Hunt
2535471704
fctx_finddone: call fctx_destroy within the bucket lock
...
Conflicts:
CHANGES
2012-04-24 14:57:19 -07:00
Tinderbox User
92fcedb783
update copyright notice
2012-04-12 23:45:42 +00:00
Mark Andrews
7a5ab270d3
3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
...
[RT #28956 ]
2012-04-13 08:37:30 +10:00