Commit Graph

6680 Commits

Author SHA1 Message Date
Evan Hunt
a1021b8945 [v9_9] spurious spaces in named-checkconf -p
4205.	[bug]		'named-checkconf -p' could include unwanted spaces
			when printing tuples with unset optional fields.
			[RT #40731]
2015-09-14 08:53:25 -07:00
Tinderbox User
24f3539e13 update copyright notice / whitespace 2015-09-11 23:46:29 +00:00
Mark Andrews
0ee0aafa30 4204. [bug] 'dig +trace' failed to lookup the correct type if
the initial root ns query was retried. [RT #40296]
`

(cherry picked from commit 295a711b72)
2015-09-12 09:08:18 +10:00
Mark Andrews
3f08efe54a 4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
[RT #40545] [RT #40547] [RT #40561] [RT #40563]

(cherry picked from commit f7ec0518c3270bd72887b23a209b83437e7a1473)
2015-09-11 17:32:43 +10:00
Mark Andrews
33eddc9bc0 4201. [func] The default preferred-glue is now the address record
type of the transport the query was received
                        over.  [RT #40468]

(cherry picked from commit a0ef8211d3)
2015-09-11 13:28:31 +10:00
Mark Andrews
0cfc7d124d 4200. [cleanup] win32: update BINDinstall to be BIND release
independent. [RT #38915]

(cherry picked from commit 3fa134363f)
2015-09-11 12:45:32 +10:00
Tinderbox User
86634ce4c2 update copyright notice / whitespace 2015-09-10 23:47:14 +00:00
Mark Andrews
5b15652954 4199. [protocol] Add support for NINFO, RKEY, TA.
[RT #40545] [RT #40547] [RT #40563]

(cherry picked from commit 3dd63ba00f)
2015-09-10 18:12:32 +10:00
Mark Andrews
c6501326e7 4199. [protocol] Add support for NINFO, RKEY. [RT #40547] [RT #40563]
(cherry picked from commit 63874956de)
2015-09-10 17:08:48 +10:00
Mark Andrews
d4e6bcf663 4199. [protocol] Add support for RKEY. [RT #40563]
(cherry picked from commit 8b29fc0b7a)
2015-09-10 16:33:00 +10:00
Mark Andrews
7a20b1cfc4 address race condition rt40242
(cherry picked from commit 5be3128599)
2015-09-09 18:12:28 +10:00
Mark Andrews
428fd64aea 4194. [bug] named-checkconf -p failed to properly print a port
range.  [RT #40634]

(cherry picked from commit fbd9aaa58c)
2015-09-09 16:50:31 +10:00
Mark Andrews
c3563b72ca *.vcxproj.in should use CRLF as EOL 2015-08-27 22:00:44 +00:00
Tinderbox User
5ad0557d5b update copyright notice / whitespace 2015-08-25 23:46:19 +00:00
Mark Andrews
7d0a5cd8c9 4192. [bug] The default rrset-order of random was not always being
applied. [RT #40456]

(cherry picked from commit 9b956d342e)
2015-08-25 14:53:04 +10:00
Mark Andrews
79f23b271e 4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
as per RFC 6763. [RT #37889]

(cherry picked from commit 5855fd79e3)
2015-08-25 14:46:41 +10:00
Mark Andrews
f921bb1806 check isc_buffer_allocate result 2015-08-23 19:43:25 +10:00
Tinderbox User
13d451f810 update copyright notice / whitespace 2015-08-22 23:46:11 +00:00
Mark Andrews
fea8a9d56b 4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
valid with check-names.  <forest> still needs to be
                        LDH. [RT #40399]

(cherry picked from commit dc3912f3ca)
2015-08-22 15:28:16 +10:00
Mark Andrews
0986b57c10 ignore xmlstats 2015-08-20 14:01:18 +10:00
Mark Andrews
0698d8b473 check for libxml2 2015-08-18 22:05:15 +10:00
Mark Andrews
d610c75100 9.9 doesn't have isc_buffer_reserve 2015-08-18 19:41:35 +10:00
Evan Hunt
ab4fc879d4 [v9_9] improve wire_test.c for large messages 2015-08-17 22:45:15 -07:00
Evan Hunt
05d0d33cb8 [v9_9] timing safe memory comparisons
4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
			code. Also, the timing-safe comparison functions have
			been renamed to avoid possible confusion with
			memcmp(). [RT #40148]

(cherry picked from commit 420a43c8d8)
2015-08-17 18:31:11 -07:00
Mark Andrews
d4f07f0f01 use grep/awk rather than xmllint 2015-08-18 10:22:50 +10:00
Evan Hunt
b479d0f857 [v9_9] win32: vs2015 compliance 2015-08-17 11:37:00 -07:00
Tinderbox User
f37017d0f4 update copyright notice / whitespace 2015-08-16 23:46:35 +00:00
Mark Andrews
a8ac264163 address use after free error
(cherry picked from commit 6458ad3ab2)
2015-08-16 20:30:10 +10:00
Tinderbox User
c8b1b9141e update copyright notice / whitespace 2015-08-14 23:46:19 +00:00
Mukund Sivaraman
0ada9e238a Fix assertion failure in parsing UNSPEC(103) RR from text (#40274)
(cherry picked from commit 984d2bb9e5)
(cherry picked from commit 9a88ab054b)
2015-08-14 13:35:11 +05:30
Mukund Sivaraman
ee7ee1c4f7 Fix assertion failure in parsing NSAP records from text
(cherry picked from commit 474921d733)
(cherry picked from commit 9250173510)
2015-08-14 13:15:25 +05:30
Mark Andrews
1b52fc8df0 4176. [bug] Address race issues with lwresd. [RT #40284]
(cherry picked from commit 563878539a)
2015-08-14 15:48:22 +10:00
Tinderbox User
26846a23ab update copyright notice / whitespace 2015-08-12 23:46:15 +00:00
Evan Hunt
1605488758 [v9_9] handle time units in dnssec-coverage -r
4174.	[bug]		"dnssec-coverage -r" didn't handle time unit
			suffixes correctly. [RT #38444]
2015-08-12 12:21:20 -07:00
Mark Andrews
b009c5c389 4173. [bug] dig +sigchase was not properly matching the trusted
key. [RT #40188]

(cherry picked from commit efb028b6c8)
2015-08-12 19:12:24 +10:00
Mark Andrews
d9ce8a0667 4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
[RT #40265]

(cherry picked from commit 151f1bcd5e)
2015-08-12 19:06:41 +10:00
Evan Hunt
171d830be4 [v9_9] use dns_message_totext() in wire_data 2015-08-10 20:51:51 -07:00
Evan Hunt
6a7a54bca0 [v9_9] use libdns functions to convert rcode and opcode to text 2015-08-10 20:29:01 -07:00
Mark Andrews
c8c6367023 address len being shadowed
(cherry picked from commit f260e3a188)
2015-08-11 13:00:29 +10:00
Tinderbox User
376a0b66a9 update copyright notice / whitespace 2015-08-10 23:46:11 +00:00
Evan Hunt
3b56383dde [v9_9] add a "wire_test -d" option to read raw binary data
4169.	[test]		Added a 'wire_test -d' option to read input as
			raw binary data, for use as a fuzzing harness.
			[RT #40312]
2015-08-10 14:45:05 -07:00
Evan Hunt
eca0e613de [v9_9] fix an awk portability issue 2015-08-03 14:22:15 -07:00
Tinderbox User
1c74d995a4 update copyright notice / whitespace 2015-08-02 23:46:06 +00:00
Evan Hunt
f73bed07b5 [v9_9] reduce code duplication 2015-08-02 12:21:14 -07:00
Tinderbox User
aa1535671f regen v9_9 2015-07-10 01:12:20 +00:00
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 23:00:58 -07:00
Mark Andrews
1ffb96f3dd add comment about +trace and @server
(cherry picked from commit 2561b2dd84)
2015-07-09 12:12:38 +10:00
Mark Andrews
2f01090351 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:56:48 +10:00
Tinderbox User
d23960eb33 update copyright notice / whitespace 2015-07-07 23:46:10 +00:00