Commit Graph
314 Commits
Author SHA1 Message Date
Mark Andrews bf5d3ae42a 2350. [port] win32: IPv6 support. [RT #17797] 2008-04-28 05:35:45 +00:00
Automatic Updater 6452b4fe60 update copyright notice 2008-01-17 23:45:28 +00:00
Automatic Updater 5cf7059f70 update copyright notice 2008-01-02 23:45:33 +00:00
Mark Andrews f27d63b090 remove test"#define inline" 2008-01-02 06:09:51 +00:00
Mark Andrews 0448ed5d25 2238. [bug] It was possible to trigger a REQUIRE when a
validation was cancelled. [RT #17106]
2007-09-14 06:08:25 +00:00
Automatic Updater 10eef33fc6 update copyright notice 2007-08-28 07:19:18 +00:00
Mark Andrews 81067e90d6 2221. [bug] Set the event result code to reflect the actual
record returned to caller when a cache update is
                        rejected due to a more credible answer existing.
                        [RT #17017]
2007-08-28 02:29:07 +00:00
Mark Andrews fe9c7901d5 2197. [bug] Add INSIST to catch negative responses which are
not setting the event result code appropriately.
                        [RT #16909]
2007-06-18 02:47:26 +00:00
Mark Andrews 2d40085857 2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:51:29 +00:00
Mark Andrews 4ecb0e3647 2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
[RT #16619]
2007-02-26 01:14:05 +00:00
Mark Andrews 815fada52d update copyright notice 2007-01-08 02:45:03 +00:00
Mark Andrews fcc4a3dd25 2126. [bug] Serialise validation of type ANY responses. [RT #16555] 2007-01-08 01:37:34 +00:00
Mark Andrews 52c39ec75e 2124. [bug] It was possible to dereference a freed fetch
context. [RT #16584]
2007-01-08 00:44:25 +00:00
Mark Andrews f5d326fb23 2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
which could lead to validation failures.  named didn't
                        handle negative DS responses that were in the process
                        of being validated.  Check CNAME bit before accepting
                        NODATA proof. To be able to ignore a child NSEC there
                        must be SOA (and NS) set in the bitmap. [RT #16399]
2006-12-07 06:50:38 +00:00
Mark Andrews bade6ec7e4 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:57:11 +00:00
Mark Andrews bf7497ab01 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:21:08 +00:00
Mark Andrews fa6c90ade6 1966. [bug] Don't set CD when we have fallen back to plain DNS.
[RT #15727]
2006-01-06 00:47:31 +00:00
Mark Andrews f21dcfa98d 1941. [bug] ncache_adderesult() should set eresult even if no
rdataset is passed to it. [RT #15642]

1939.   [bug]           The resolver could dereference a null pointer after
                        validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
2006-01-05 05:38:47 +00:00
Mark Andrews a93ccce87d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:26:56 +00:00
Mark Andrews 8019162f81 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2006-01-04 03:43:20 +00:00
Mark Andrews 95d974159f update copyright notice 2006-01-04 00:37:22 +00:00
Mark Andrews 7afc8854ef 1946. [bug] resume_dslookup() could trigger a REQUIRE failure
when using forwarders. [RT #15549]
2006-01-03 07:23:52 +00:00
Mark Andrews 5a5d7187e5 1930. [port] HPUX: ia64 support. [RT #15473]
1929.   [port]          FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
2005-10-14 01:38:51 +00:00
Mark Andrews 7fce88dfa8 1919. [bug] dig's +sigchase code overhauled. [RT #14933]
1918.   [bug]           The DLV code has been re-worked to make no longer
                        query order sensitive. [RT #14933]
2005-08-25 01:54:34 +00:00
Mark Andrews f49bde9e35 1895. [bug] fctx_create() could return success even though it
failed. [RT #14993]
2005-07-04 23:18:31 +00:00
Mark Andrews f067c92dc1 1807. [bug] When forwarding (forward only) set the active domain
from the forward zone name. [RT #13526]
2005-03-16 03:51:08 +00:00
Mark Andrews b999d4b195 1802. [bug] Handle connection resets better. [RT #11280] 2005-03-15 01:41:11 +00:00
Mark Andrews bd59b0b193 1806. [bug] The resolver returned the wrong result when a CNAME /
DNAME was encountered when fetching glue from a
                        secure namespace. [RT #13501]

1805.   [bug]           Pending status was not being cleared when DLV was
                        active. [RT #13501]
2005-02-08 23:59:45 +00:00
Mark Andrews 8123a59155 update copyright notice 2005-01-20 00:00:13 +00:00
Mark Andrews d22279b6cd 1800. [bug] Changes #1719 allowed a INSIST to be triggered.
[RT #13428]
2005-01-19 23:38:14 +00:00
Mark Andrews 91766f1d92 1773. [bug] Fast retry on host / net unreachable. [RT #13153] 2004-12-03 02:09:33 +00:00
Mark Andrews c18218935f 1754. [bug] We wern't always attempting to query the parent
server for the DS records at the zone cut.
                        [RT #12774]
2004-11-10 21:57:35 +00:00
Mark Andrews cb210a330f 1760. [bug] Host / net unreachable was not penalising rtt
estimates. [RT #12970]
2004-11-10 21:48:01 +00:00
Mark Andrews af3411965a 1749. [bug] 'check-names response ignore;' failed to ignore.
[RT #12866]
2004-10-21 01:53:53 +00:00
Mark Andrews bf1bb3c1fe 1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
negative response. [RT #12506]

1719.   [bug]           named was not correctly caching a RFC 2308 Type 1
                        negative response. [RT #12506]

1718.   [bug]           nsupdate was not handling RFC 2308 Type 3 negative
                        responses when looking for the zone / master server.
                        [RT #12506]
2004-09-16 02:12:19 +00:00
Mark Andrews 9ab0d979a0 1704. [port] lwres needed a snprintf() implementation for
platforms without snprintf().  Add missing
                        "#include <isc/print.h>". [RT #12321]
2004-08-28 06:27:23 +00:00
Mark Andrews 2f595bfb3e 1695. [bug] DS records when forwarding require special handling.
[RT #12133]
2004-08-10 00:40:41 +00:00
Rob Austein 9318629613 1685. [bug] Change #1679 loop tests weren't quite right. 2004-07-02 21:48:27 +00:00
Mark Andrews 64b02b79ee change #1679 still left case where address could not be tried.
fix loop termination condition to ensure that all finds are tried.
2004-06-27 01:29:51 +00:00
Mark Andrews 7c2c98f560 1679. [bug] When there was a single nameserver with multiple
addresses for a zone not all addresses were tried.
                        [RT #11706]
2004-06-25 04:41:24 +00:00
Mark Andrews 0d3a13fc3a 1647. [bug] It was possible trigger a INSIST when chasing a DS
record that required walking back over a empty node.
                        [RT #11445]
2004-06-07 03:24:57 +00:00
Mark Andrews c95fa7d1d8 1606. [bug] DVL insecurity proof was failing.
1605.   [func]          New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 05:06:42 +00:00
Mark Andrews 22cf6188e5 silence compiler warning 2004-04-19 23:41:33 +00:00
Mark Andrews 69b34284dc 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews 46278b601d hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:10:41 +00:00
Mark Andrews 058e675526 remove extranous semi-colons 2004-03-16 03:18:02 +00:00
Mark Andrews 511621255e 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.

1527.  [cleanup]       Reduce the number of gettimeofday() calls without
                       losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews cbdd3a318b update lib copyrights 2004-03-06 08:15:48 +00:00
Mark Andrews 694b001677 1586. [func] "check-names" is now implemented. 2004-02-27 21:45:34 +00:00