Mark Andrews
bf5d3ae42a
2350. [port] win32: IPv6 support. [RT #17797 ]
2008-04-28 05:35:45 +00:00
Automatic Updater
6452b4fe60
update copyright notice
2008-01-17 23:45:28 +00:00
Automatic Updater
5cf7059f70
update copyright notice
2008-01-02 23:45:33 +00:00
Mark Andrews
f27d63b090
remove test"#define inline"
2008-01-02 06:09:51 +00:00
Mark Andrews
0448ed5d25
2238. [bug] It was possible to trigger a REQUIRE when a
...
validation was cancelled. [RT #17106 ]
2007-09-14 06:08:25 +00:00
Automatic Updater
10eef33fc6
update copyright notice
2007-08-28 07:19:18 +00:00
Mark Andrews
81067e90d6
2221. [bug] Set the event result code to reflect the actual
...
record returned to caller when a cache update is
rejected due to a more credible answer existing.
[RT #17017 ]
2007-08-28 02:29:07 +00:00
Mark Andrews
fe9c7901d5
2197. [bug] Add INSIST to catch negative responses which are
...
not setting the event result code appropriately.
[RT #16909 ]
2007-06-18 02:47:26 +00:00
Mark Andrews
2d40085857
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
...
resolver.c:validated() and resolver.c:cache_name().
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
event leaks. [RT #16685 ]
2007-03-06 00:51:29 +00:00
Mark Andrews
4ecb0e3647
2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
...
[RT #16619 ]
2007-02-26 01:14:05 +00:00
Mark Andrews
815fada52d
update copyright notice
2007-01-08 02:45:03 +00:00
Mark Andrews
fcc4a3dd25
2126. [bug] Serialise validation of type ANY responses. [RT #16555 ]
2007-01-08 01:37:34 +00:00
Mark Andrews
52c39ec75e
2124. [bug] It was possible to dereference a freed fetch
...
context. [RT #16584 ]
2007-01-08 00:44:25 +00:00
Mark Andrews
f5d326fb23
2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
...
which could lead to validation failures. named didn't
handle negative DS responses that were in the process
of being validated. Check CNAME bit before accepting
NODATA proof. To be able to ignore a child NSEC there
must be SOA (and NS) set in the bitmap. [RT #16399 ]
2006-12-07 06:50:38 +00:00
Mark Andrews
bade6ec7e4
2066. [security] Handle SIG queries gracefully. [RT #16300 ]
2006-08-31 03:57:11 +00:00
Mark Andrews
bf7497ab01
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739 ]
2006-01-06 01:21:08 +00:00
Mark Andrews
fa6c90ade6
1966. [bug] Don't set CD when we have fallen back to plain DNS.
...
[RT #15727 ]
2006-01-06 00:47:31 +00:00
Mark Andrews
f21dcfa98d
1941. [bug] ncache_adderesult() should set eresult even if no
...
rdataset is passed to it. [RT #15642 ]
1939. [bug] The resolver could dereference a null pointer after
validation if all the queries have timed out.
[RT #15528 ]
1938. [bug] The validator was not correctly handling unsecure
negative responses at or below a SEP. [RT #15528 ]
2006-01-05 05:38:47 +00:00
Mark Andrews
a93ccce87d
1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
...
a TCP socket. This prevents the source address being
set for TCP connections. [RT #15628 ]
2006-01-04 04:26:56 +00:00
Mark Andrews
8019162f81
1940. [bug] Fixed a number of error conditions reported by
...
Coverity.
2006-01-04 03:43:20 +00:00
Mark Andrews
95d974159f
update copyright notice
2006-01-04 00:37:22 +00:00
Mark Andrews
7afc8854ef
1946. [bug] resume_dslookup() could trigger a REQUIRE failure
...
when using forwarders. [RT #15549 ]
2006-01-03 07:23:52 +00:00
Mark Andrews
5a5d7187e5
1930. [port] HPUX: ia64 support. [RT #15473 ]
...
1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
2005-10-14 01:38:51 +00:00
Mark Andrews
7fce88dfa8
1919. [bug] dig's +sigchase code overhauled. [RT #14933 ]
...
1918. [bug] The DLV code has been re-worked to make no longer
query order sensitive. [RT #14933 ]
2005-08-25 01:54:34 +00:00
Mark Andrews
f49bde9e35
1895. [bug] fctx_create() could return success even though it
...
failed. [RT #14993 ]
2005-07-04 23:18:31 +00:00
Mark Andrews
f067c92dc1
1807. [bug] When forwarding (forward only) set the active domain
...
from the forward zone name. [RT #13526 ]
2005-03-16 03:51:08 +00:00
Mark Andrews
b999d4b195
1802. [bug] Handle connection resets better. [RT #11280 ]
2005-03-15 01:41:11 +00:00
Mark Andrews
bd59b0b193
1806. [bug] The resolver returned the wrong result when a CNAME /
...
DNAME was encountered when fetching glue from a
secure namespace. [RT #13501 ]
1805. [bug] Pending status was not being cleared when DLV was
active. [RT #13501 ]
2005-02-08 23:59:45 +00:00
Mark Andrews
8123a59155
update copyright notice
2005-01-20 00:00:13 +00:00
Mark Andrews
d22279b6cd
1800. [bug] Changes #1719 allowed a INSIST to be triggered.
...
[RT #13428 ]
2005-01-19 23:38:14 +00:00
Mark Andrews
91766f1d92
1773. [bug] Fast retry on host / net unreachable. [RT #13153 ]
2004-12-03 02:09:33 +00:00
Mark Andrews
c18218935f
1754. [bug] We wern't always attempting to query the parent
...
server for the DS records at the zone cut.
[RT #12774 ]
2004-11-10 21:57:35 +00:00
Mark Andrews
cb210a330f
1760. [bug] Host / net unreachable was not penalising rtt
...
estimates. [RT #12970 ]
2004-11-10 21:48:01 +00:00
Mark Andrews
af3411965a
1749. [bug] 'check-names response ignore;' failed to ignore.
...
[RT #12866 ]
2004-10-21 01:53:53 +00:00
Mark Andrews
bf1bb3c1fe
1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
...
negative response. [RT #12506 ]
1719. [bug] named was not correctly caching a RFC 2308 Type 1
negative response. [RT #12506 ]
1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
responses when looking for the zone / master server.
[RT #12506 ]
2004-09-16 02:12:19 +00:00
Mark Andrews
9ab0d979a0
1704. [port] lwres needed a snprintf() implementation for
...
platforms without snprintf(). Add missing
"#include <isc/print.h>". [RT #12321 ]
2004-08-28 06:27:23 +00:00
Mark Andrews
2f595bfb3e
1695. [bug] DS records when forwarding require special handling.
...
[RT #12133 ]
2004-08-10 00:40:41 +00:00
Rob Austein
9318629613
1685. [bug] Change #1679 loop tests weren't quite right.
2004-07-02 21:48:27 +00:00
Mark Andrews
64b02b79ee
change #1679 still left case where address could not be tried.
...
fix loop termination condition to ensure that all finds are tried.
2004-06-27 01:29:51 +00:00
Mark Andrews
7c2c98f560
1679. [bug] When there was a single nameserver with multiple
...
addresses for a zone not all addresses were tried.
[RT #11706 ]
2004-06-25 04:41:24 +00:00
Mark Andrews
0d3a13fc3a
1647. [bug] It was possible trigger a INSIST when chasing a DS
...
record that required walking back over a empty node.
[RT #11445 ]
2004-06-07 03:24:57 +00:00
Mark Andrews
c95fa7d1d8
1606. [bug] DVL insecurity proof was failing.
...
1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 05:06:42 +00:00
Mark Andrews
22cf6188e5
silence compiler warning
2004-04-19 23:41:33 +00:00
Mark Andrews
69b34284dc
1600. [bug] Duplicate zone pre-load checks were not case
...
insensitive.
1599. [bug] Fix memory leak on error path when checking named.conf.
1598. [func] Specify that certain parts of the namespace must
be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews
46278b601d
hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR.
2004-04-15 02:10:41 +00:00
Mark Andrews
058e675526
remove extranous semi-colons
2004-03-16 03:18:02 +00:00
Mark Andrews
511621255e
1528. [cleanup] Simplify some dns_name_ functions based on the
...
deprecation of bitstring labels.
1527. [cleanup] Reduce the number of gettimeofday() calls without
losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews
a821d5fa3d
DNSSEC bis merge from HEAD:
...
1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
1565. [bug] CD flag should be copied to outgoing queries unless
the query is under a secure entry point in which case
CD should be set.
1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
algorithm. Such child zones are treated as unsigned.
1557. [func] Implement missing DNSSEC tests for
* NOQNAME proof with wildcard answers.
* NOWILDARD proof with NXDOMAIN.
Cache and return NOQNAME with wildcard answers.
1541. [func] NSEC now uses new bitmap format.
1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
cbdd3a318b
update lib copyrights
2004-03-06 08:15:48 +00:00
Mark Andrews
694b001677
1586. [func] "check-names" is now implemented.
2004-02-27 21:45:34 +00:00