Commit Graph

6262 Commits

Author SHA1 Message Date
Evan Hunt
4d8742e668 [v9_10] remove obsolete unit test 2016-03-22 17:46:16 -07:00
Tinderbox User
2a28287aa7 update copyright notice / whitespace 2016-03-22 23:45:30 +00:00
Mark Andrews
57564eff5f 4338. [bug] Reimplement change 4324 as it wasn't properly doing
all the required book keeping. [RT #41941]

(cherry picked from commit 558278974e)
2016-03-23 10:39:02 +11:00
Evan Hunt
c82e4d2379 [v9_10] fix mkeys TTL 0 issue
4337.	[bug]		The previous change exposed a latent flaw in
			key refresh queries for managed-keys when
			a cached DNSKEY had TTL 0. [RT #41986]
2016-03-22 12:13:25 -07:00
Tinderbox User
9861d0b5c6 update copyright notice / whitespace 2016-03-21 23:45:41 +00:00
Mark Andrews
b7e6ee04a7 4336. [bug] Don't emit records with zero ttl unless the records
were learnt with a zero ttl. [RT #41687]

(cherry picked from commit 0993cd5f22)
2016-03-21 13:24:55 +11:00
Mark Andrews
21c7ebce7d 4335. [bug] zone->view could be detached too early. [RT #41942]
(cherry picked from commit b8dcc13bc5)
2016-03-21 13:03:19 +11:00
Tinderbox User
2995f694f2 update copyright notice / whitespace 2016-03-11 23:45:45 +00:00
Mark Andrews
8a51afbac5 4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
2001:500:9f::42.

(cherry picked from commit 1add4a7939)
2016-03-11 20:41:26 +11:00
Mark Andrews
35fed7be8c 9.10.4b2 2016-03-11 12:36:06 +11:00
Mark Andrews
3578e664e3 4331. [func] When loading managed signed zones detect if the
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]

(cherry picked from commit 7c52595464)
2016-03-11 12:17:02 +11:00
Tinderbox User
48c13be6d9 update copyright notice / whitespace 2016-03-10 23:45:32 +00:00
Mark Andrews
9f8d166497 4330. [protocol] Identify the PAD option as "PAD" when printing out
a message.

(cherry picked from commit 33a4294f44)
2016-03-10 16:54:08 +11:00
Mark Andrews
37a931d774 silence compiler warning 2016-03-09 14:43:27 +11:00
Mark Andrews
632f984881 silence compiler warning
(cherry picked from commit 0e5c8a65a2)
2016-03-09 12:38:05 +11:00
Mark Andrews
13a95c3775 update copyrights 2016-03-08 16:20:10 +11:00
Mark Andrews
ff813ea134 add dns_name_isrfc1918 and dns_name_isula
(cherry picked from commit 56d1de40e4)
2016-03-08 12:00:39 +11:00
Mark Andrews
b712215fcb 9.10.4b1 2016-03-08 11:53:41 +11:00
Mark Andrews
274ea210b0 sync w/ 9.10.3-P4 2016-03-08 11:34:15 +11:00
Tinderbox User
b45473686c update copyright notice / whitespace 2016-03-07 23:45:44 +00:00
Mark Andrews
b8341f294c 4329. [func] Warn about a common misconfiguration when forwarding
RFC 1918 zones. [RT #41441]
2016-03-08 10:11:56 +11:00
Mukund Sivaraman
2a461f1348 Repack dns_rbtnode struct to gain some space (reduce packing holes) (#41854)
(cherry picked from commit 8dbf9ceb8c)
2016-03-07 16:16:32 +05:30
Mukund Sivaraman
19afa0cc8f Fix rbt_remove_empty unittest
(reviewed by Evan on Jabber)

(cherry picked from commit f5cb0dd58b)
2016-03-05 13:55:10 +05:30
Tinderbox User
736b0ac1c8 update copyright notice / whitespace 2016-03-04 23:45:45 +00:00
Mukund Sivaraman
09b9ffc029 Revert DEFAULT_NODE_LOCK_COUNT back to 7 (#40997) 2016-03-04 16:30:33 +05:30
Mukund Sivaraman
1cbbc0bde6 Include missing isc/print.h 2016-03-04 14:56:58 +05:30
Mukund Sivaraman
491a5a2a3c Check if threads support is available
(cherry picked from commit 2457a4b245)
2016-03-04 14:06:32 +05:30
Mukund Sivaraman
cb93542612 Use libisc thread functions
(cherry picked from commit 051197362b)
2016-03-04 14:00:26 +05:30
Mukund Sivaraman
d820e8ff8a Add dns_name_fromwire() benchmark
(cherry picked from commit 59328c7674)
2016-03-04 13:47:31 +05:30
Mukund Sivaraman
666fa20ef3 Log query and depth counters during fetches when querytrace is enabled (#41787)
(cherry picked from commit 275265ab27)
2016-03-04 13:26:33 +05:30
Mark Andrews
d489cf8fd7 4326. [protocol] Add support for AVC. [RT #41819
(cherry picked from commit 8398f00156)
2016-03-04 18:14:04 +11:00
Mukund Sivaraman
b15dde2889 Code cleanups (#41656)
(cherry picked from commit 9da98335c1)
2016-03-04 12:23:32 +05:30
Evan Hunt
db06cd726c [v9_10] recursively clean empty interior nodes when deleting database records
4324.	[bug]		When deleting records from a zone database, interior
			nodes could be left empty but not deleted, damaging
			search performance afterward. [RT #40997]

(cherry picked from commit 44c86318ed)
2016-03-03 21:15:21 -08:00
Mark Andrews
c08e4c3636 silence may be used when unset false positive
(cherry picked from commit c7aae79b62)
2016-02-29 11:25:08 +11:00
Mark Andrews
e87b18eb8f more sit -> cookie cleanups 2016-02-29 11:15:44 +11:00
Mark Andrews
499952eb45 Part 2 of:
4319.   [security]      Fix resolver assertion failure due to improper
                        DNAME handling when parsing fetch reply messages.
                        (CVE-2016-1286) [RT #41753]

(cherry picked from commit 2de89ee9de)
2016-02-29 07:17:31 +11:00
Mark Andrews
7cd300abd6 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]

(cherry picked from commit 455c0848f8)
2016-02-27 11:46:16 +11:00
Mark Andrews
f0eb27c402 4321. [bug] Zones using mapped files containing out-of-zone data
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]

(cherry picked from commit f9da4a8e54)
2016-02-24 11:25:04 +11:00
Mukund Sivaraman
456e1eadd2 Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753)
(cherry picked from commit 5995fec51c)
2016-02-22 12:24:15 +05:30
Mark Andrews
849e9d6dce 4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
(cherry picked from commit d372f426ca)
2016-02-12 12:34:49 +11:00
Mukund Sivaraman
6f3e21cd9b Remove nodechain from dns_rbt_addnode() (#41246)
(cherry picked from commit 9267cc8e83)
2016-02-08 15:40:20 +05:30
Mukund Sivaraman
400dd1020c Add tests for hash function, and comment dns_rbt_addnode() (#41179)
No CHANGES entry necessary.

(cherry picked from commit 614ce1b65f)
2016-02-08 14:53:24 +05:30
Mark Andrews
c0a2b2672f 4312. [bug] dig's unknown dns and edns flags (MBZ value) logging
was not consistent. [RT #41600]

(cherry picked from commit 8d00c5ab2c)
2016-02-02 14:19:41 +11:00
Tinderbox User
724704f65b update copyright notice / whitespace 2016-02-01 23:45:54 +00:00
Mukund Sivaraman
6e2e0f72b1 Use __built_expect() where available (#41411)
(cherry picked from commit d1dbf6b20f)
2016-02-01 09:07:12 +05:30
Evan Hunt
83289a39b0 [v9_10] removed /Gy- from VS project files
4302.	[port]		win32: fixed a build error in VS 2015. [RT #41426]
2016-01-27 15:29:53 -08:00
Tinderbox User
ecad80c2c4 update copyright notice / whitespace 2016-01-21 23:45:50 +00:00
Mark Andrews
9fa2a6f92f 4299. [bug] Check that exactly totallen bytes are read when
reading a RRset from raw files in both single read
                        and incremental modes. [RT #41402]

(cherry picked from commit 1d383fd4b2)
2016-01-21 15:33:41 +11:00
Mark Andrews
0be82a114d 4298. [bug] dns_rpz_add errors in loadzone were not being
propogated up the call stack. [RT #41425]

(cherry picked from commit 3ecc17d551)
2016-01-21 14:43:30 +11:00
Evan Hunt
847eacdf56 [v9_10] fix unchecked result
4295.	[bug]		An unchecked result in dns_message_pseudosectiontotext()
			could allow incorrect text formatting of EDNS EXPIRE
			options. [RT #41437]
2016-01-20 17:19:47 -08:00