Commit Graph

2603 Commits

Author SHA1 Message Date
Evan Hunt
62cce60a15 [master] better error message when exceeding RPZ zone limit
3726.	[cleanup]	Clarified the error message when attempting
			to configure more than 32 response-policy zones.
			[RT #35283]
2014-02-06 15:26:54 -08:00
Evan Hunt
48def18179 [master] silence coverity warnings
- remove dead code in server.c
- initialize a struct tm.c
2014-01-31 09:34:37 -08:00
Evan Hunt
d0803df331 [master] fixed geoip in blackhole ACLs
3722.	[bug]		Using geoip ACLs in a blackhole statement
			could cause a segfault. [RT #35272]
2014-01-30 17:03:32 -08:00
Tinderbox User
fbe600459d update copyright notice 2014-01-23 23:46:17 +00:00
Evan Hunt
83f69fcd6e [master] fix a problem with libgeoip 1.5 and higher
3715.	[bug]		The region and city databases could fail to
			initialize when using some versions of libGeoIP,
			causing assertion failures when named was
			configured to use them. [RT #35427]
2014-01-23 12:46:02 -08:00
Mark Andrews
db519a99ce remove src files not available for 'make depend' 2014-01-22 10:49:18 +11:00
Evan Hunt
e45d0508c3 [master] skip unnecesary also-notify data
3713.	[bug]		Save memory by not storing "also-notify" addresses
			in zone objects that are configured not to send
			notify requests. [RT #35195]
2014-01-20 15:53:51 -08:00
Tinderbox User
dd1ce8b524 regen master 2014-01-17 01:05:10 +00:00
Mark Andrews
db8938c993 3710. [bug] Address double dns_zone_detach when switching to
using automatic empty zones from regular zones.
                        [RT #35177]
2014-01-17 10:04:16 +11:00
Mark Andrews
e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Tinderbox User
6ea2385360 regen master 2014-01-16 01:05:38 +00:00
Evan Hunt
ba751492fc [master] native PKCS#11 support
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
2014-01-14 15:40:56 -08:00
Mark Andrews
fef19ce621 fix for pre C99 compiler 2014-01-13 17:07:52 +11:00
Tinderbox User
2cf1d5b098 update copyright notice 2014-01-12 23:46:23 +00:00
Mark Andrews
fb756ba304 3703. [func] Prefetch about to expire records if they are queried
for, see prefetch option for details. [RT #35041]
2014-01-12 21:29:15 +11:00
Tinderbox User
7a50e338b5 regen 2014-01-10 20:22:53 +00:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt
1bb2f53b9f [master] fix win32 build problems 2014-01-10 10:58:06 -08:00
Evan Hunt
57a46f4b19 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 19:05:46 -08:00
Evan Hunt
789252d55f [master] stats improvements
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
2014-01-09 18:46:25 -08:00
Tinderbox User
431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt
080977753e [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-08 18:28:49 -08:00
Tinderbox User
b29285b88f regen master 2014-01-09 01:05:03 +00:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
2014-01-08 16:39:05 -08:00
Tinderbox User
869a7fe8e0 update copyright notice 2014-01-08 23:46:09 +00:00
Evan Hunt
2f0c7f1de7 [master] removed reference to "auto-dnssec create" 2014-01-08 11:33:25 -08:00
Mark Andrews
fa467e60c5 3693. [security] memcpy was incorrectly called with overlapping
ranges resulting in malformed names being generated
                        on some platforms.  This could cause INSIST failures
                        when serving NSEC3 signed zones.  [RT #35120]
2013-12-20 10:58:32 +11:00
Evan Hunt
445a354e63 [master] fix 'rndc refresh' in inline-signing zones
3685.	[bug]		"rndc refresh" didn't work correctly with slave
			zones using inline-signing. [RT #35105]
2013-12-11 12:59:04 -08:00
Mark Andrews
99c3e8e09c cleanup 2013-12-10 09:31:38 +11:00
Mark Andrews
06a0b00bb6 use snprintf; check the result of putstr 2013-12-10 08:55:26 +11:00
Mark Andrews
2bdfb330af update copyrights 2013-12-05 15:04:53 +11:00
Tinderbox User
5465b124f1 update copyright notice 2013-12-04 23:46:51 +00:00
Evan Hunt
bee9a28af0 [master] clearer "not found" message for rndc commands
3683.	[cleanup]	Add a more detailed "not found" message to rndc
			commands which specify a zone name. [RT #35059]
2013-12-04 12:47:56 -08:00
Mark Andrews
545b8a7295 remove redundent assignment 2013-12-04 16:12:43 +11:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
2013-12-04 12:47:23 +11:00
Evan Hunt
2c2be89824 [master] buffer could overflow in rndc zonestatus
3680.	[bug]		Ensure buffer space is available in "rndc zonestatus".
			[RT #35084]
2013-12-02 15:38:24 -08:00
Mark Andrews
225146b2c8 3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026] 2013-11-18 11:22:59 +11:00
Evan Hunt
434bfc3dfa [master] "in-view" zone option
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
2013-11-13 20:35:40 -08:00
Mark Andrews
9800974419 fix dereference before null check warning 2013-11-14 12:31:25 +11:00
Tinderbox User
3b7b634d56 update copyright notice 2013-11-12 23:46:31 +00:00
Mark Andrews
eb5e0b8dec 3670. [bug] Address read after free in server side of
lwres_getrrsetbyname. [RT #29075]
2013-11-12 15:00:03 +11:00
Mark Andrews
7433a204d3 3658. [port] linux: Address platform specific compilation issue
when libcap-devel is installed. [RT #34838]
2013-09-26 15:26:43 +10:00
Mark Andrews
c9ee72cb3a 3656. [bug] Treat a all zero netmask as invalid when generating
the localnets acl. [RT #34687]
2013-09-26 07:40:34 +10:00
Mark Andrews
00043fc284 3653. [func] Create delegations for all "children" of empty zones
except "forward first". [RT #34826]
2013-09-25 09:40:21 +10:00
Mark Andrews
9a7f89279e remove unnecessary assignment 2013-09-22 23:21:54 +10:00
Mark Andrews
9fa2a0deed 3652. [bug] Address bug with rpz-drop policy. [RT #34816] 2013-09-21 17:27:43 +10:00
Tinderbox User
bcbb556868 update copyright notice 2013-09-19 23:46:20 +00:00
Evan Hunt
c7965f84c2 [master] comment nzf files
3649.	[cleanup]	Include a comment in .nzf files, giving the name of
			the associated view. [RT #34765]
2013-09-19 15:37:09 -07:00
Mark Andrews
5bdb12d2c6 assignment not read 2013-09-09 14:05:04 +10:00
Mark Andrews
cb69994ff8 3645. [protocol] Use case sensitive compression when responding to
queries. [RT #34737]
2013-09-05 12:22:34 +10:00