ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,988 Commits 589 Branches 805 Tags
bfdeccc5bdb4c1585f216aed173e86a71ea1ca44
Commit Graph
2726 Commits
Author SHA1 Message Date
Evan Hunt e1dc78dd6e [v9_10_2_patch] address a possible policy update race 
4120.	[bug]		A bug in RPZ could cause the server to crash if
			policy zones were updated while recursion was
			pending for RPZ processing of an active query.
			[RT #39415]

(cherry picked from commit 7e6cf6fc6e)
(cherry picked from commit 04defaf799)
 2015-05-21 12:39:39 -07:00
Tinderbox User d5bad8c9b9 update copyright notice / whitespace 2015-02-10 23:45:50 +00:00
Evan Hunt 5d26333c87 [v9_10] silence RPZ log messages 
4050.	[cleanup]	Silence occasional spurious "duplicate query" log
			messages from RPZ. [RT #38510]
 2015-02-10 15:01:46 -08:00
Evan Hunt eb36da19e7 [v9_10] address valgrind warnings 
4059.	[bug]		Addressed valgrind warnings. [RT #38549]
 2015-02-10 14:03:27 -08:00
Evan Hunt f87d4ca084 [v9_10] 5011 fixes 
4056.	[bug]		Fixed several small bugs in automatic trust anchor
			management, including a memory leak and a possible
			loss of key state information. [RT #38458]
 2015-02-10 12:59:38 -08:00
Mukund Sivaraman 718b30d039 Fix a leak of query fetchlock (#38454) 
4052.	[bug]		Fix a leak of query fetchlock. [RT #38454]

(cherry picked from commit 4eefa351cc)
 2015-02-03 11:47:44 +05:30
Evan Hunt 2826029732 [v9_10] fixed library version reporting 
- forgot to include a CHANGES note
- disabled on windows (it fails to link)
 2015-01-22 11:18:37 -08:00
Evan Hunt 865621b742 [v9_10] fix 'total use' accounting 
4046.   [bug]           Accounting of "total use" in memory context
                        statistics was not correct. [RT #38370]
 2015-01-22 09:46:28 -08:00
Tinderbox User 3a0e7f5300 update copyright notice / whitespace 2015-01-21 23:45:50 +00:00
Tinderbox User b99f7bf9b7 Merge branch 'v9_10' of /proj/git/prod/bind9 into v9_10 2015-01-21 23:45:31 +00:00
Tinderbox User 3817256ab9 update copyright notice / whitespace 2015-01-20 23:47:01 +00:00
Evan Hunt a9034405a0 [v9_10] more windows VS14 compatibility work 
(completes change #3987)
 2015-01-20 15:46:00 -08:00
Evan Hunt 1ef4faabd5 [v9_10] clean up gcc -Wshadow warnings 
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
 2015-01-20 13:43:35 -08:00
Mukund Sivaraman 1721fb782c Close FILEs before overwriting NZF file (#38332) 
Based on a patch sent in by Tony Finch <dot@dotat.at>.
 2015-01-16 15:37:09 +05:30
Tinderbox User 71b009ae5a update copyright notice / whitespace 2015-01-10 23:45:50 +00:00
Mark Andrews 41460026bc 4032. [bug] Built-in "empty" zones did not correctly inherit the 
"allow-transfer" ACL from the options or view.
                        [RT #38310]

(cherry picked from commit 7952156995)
 2015-01-10 22:03:57 +11:00
Evan Hunt ffd802e3e6 [v9_10] backport gperftools 
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
 2015-01-10 00:17:46 -08:00
Tinderbox User 167beb6aa5 update copyright notice / whitespace 2015-01-08 23:45:50 +00:00
Mark Andrews b1e4b4c0c8 4031. [bug] named-checkconf -z failed to report a missing file 
with a hint zone. [RT #38294]

(cherry picked from commit d1f1f13c7f)
 2015-01-08 19:20:04 +11:00
Evan Hunt b0e9108311 [v9_10] adjust max-recursion-queries 
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]

(cherry picked from commit be7fba8019)
 2014-12-15 22:28:26 -08:00
Mark Andrews e5d902504f 4017. [testing] Add system test to check lookups to legacy servers 
with broken DNS behaviour. [RT #37965]
 2014-12-04 07:05:18 +11:00
Mark Andrews a06d773309 unchecked putnull 2014-11-25 15:24:38 +11:00
Mark Andrews 12326926c5 4011. [bug] master's list port and dscp inheritance was not 
properly implemented. [RT #37792]

(cherry picked from commit d040fa2f1c)
 2014-11-24 11:40:51 +11:00
Mark Andrews dc6882addd 4010. [cleanup] Clear the prefetchable state when initiating a prefetch. 
[RT #37399]

(cherry picked from commit 092d3b76db)
 2014-11-24 11:20:20 +11:00
Evan Hunt 6c049c57d9 [v9_10] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
 2014-11-19 18:26:46 -08:00
Evan Hunt b3aa528d7e [v9_10] add max-recursion-queries 
also fixes and documentation for max-recursion-depth

(cherry picked from commit c4f54e5bd1)
 2014-11-18 22:13:13 -08:00
Evan Hunt 6fd51d5088 [v9_10] limit recursion depth and iterative queries 
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
 2014-11-17 23:48:20 -08:00
Mark Andrews 45174975bc check returns from putstr and putnull 
(cherry picked from commit 18fa89b01e)
 2014-11-18 13:00:55 +11:00
Evan Hunt 8b7a37a594 [v9_10] geoip security fixes 
4003.	[security]	When geoip-directory was reconfigured during
			named run-time, the previously loaded GeoIP
			data could remain, potentially causing wrong
			ACLs to be used or wrong results to be served
			based on geolocation. [RT #37720]

4002.	[security]	Lookups in GeoIP databases that were not
			loaded could cause an assertion failure.
			[RT #37679]

4001.	[security]	The caching of GeoIP lookups did not always
			handle address families correctly, potentially
			resulting in an assertion failure. [RT #37672]
 2014-11-16 08:39:47 -08:00
Evan Hunt 5ffe6452e1 [v9_10] s/memcpy/memmove/ 2014-11-06 13:02:40 -08:00
Evan Hunt 56293cd148 [v9_10] fix nxrrset in nxdomain redirection 
4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
			from the redirect zone. [RT #37722]

(cherry picked from commit 3cc8c7d630)
 2014-11-04 23:53:54 -08:00
Mark Andrews b7103cc603 3968. [bug] Silence spurious log messages when using 'named -[46]'. 
[RT #37308]

(cherry picked from commit 6979ebf549)
 2014-10-03 08:06:25 +10:00
Mark Andrews 9fe54596cc 3966. [bug] Missing dns_db_closeversion call in receive_secure_db. 
[RT #35746]

(cherry picked from commit 9c0589bc8b)
 2014-10-03 07:51:45 +10:00
Mark Andrews 1b0646c2c8 3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112] 
(cherry picked from commit 6b6d6509f6)
 2014-09-27 12:30:34 +10:00
Tinderbox User 868bab4830 regen v9_10 2014-09-05 01:09:53 +00:00
Mark Andrews 3af6883bba conditional UNUSED(task) 2014-08-30 15:48:15 +10:00
Mark Andrews 5859a1e047 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879] 
(cherry picked from commit 1164997311)
 2014-08-26 15:02:13 +10:00
Evan Hunt cc908c1912 [v9_10] silence coverity 
(cherry picked from commit e7bc3d7d0815f795aef734ff6fe38cbf6d1ae4bf)
 2014-08-22 18:18:37 -07:00
Mark Andrews 32935449c8 3924. [bug] Improve 'rndc addzone' error reporting. RT #35187 
(cherry picked from commit d4859b0b2a)
 2014-08-22 16:19:07 +10:00
Mark Andrews 0597c5fd5e 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] 
(cherry picked from commit cef76ee5bd)
 2014-08-22 15:46:35 +10:00
Tinderbox User 81c00e3f87 update copyright notice 2014-08-18 23:45:46 +00:00
Mark Andrews 5f0d37cc28 3915 [bug] Address a assertion if a route event arrived while 
shutting down. [RT #36887]
 2014-08-18 13:16:28 +10:00
Mark Andrews 140ebff1cf 3908. [bug] rndc now differentiates between a zone in multiple 
views and a zone that doesn't exist at all. [RT #36691]

(cherry picked from commit c38341ec43)
 2014-08-02 14:43:57 +10:00
Tinderbox User 8cf1c91c10 update copyright notice 2014-07-31 23:45:48 +00:00
Mark Andrews ffd72eb9a0 3904. [func] Add the RPZ SOA to the additional section. [RT36507] 
(cherry picked from commit 3a55d43527)
 2014-07-31 10:53:20 +10:00
Tinderbox User dc4ffd8e06 update copyright notice 2014-06-19 23:45:51 +00:00
Evan Hunt 06ad948626 [v9_10] enable libseccomp system call filtering 
3851.	[func]		Allow libseccomp based system-call filtering
			on Linux; use "configure --enable-seccomp" to
			turn it on.  Thanks to Loganaden Velvindron for
			the contribution. [RT #35347]
 2014-06-19 15:48:28 -07:00
Mark Andrews 8a33c87731 3881. [bug] Address memory leak with UPDATE error handling. 
[RT #36303]

(cherry picked from commit f5bb5eb7f6)
 2014-06-18 11:25:20 +10:00
Evan Hunt a71b8efb04 [v9_10] update gitignore files; use rev-parse to get srcid 
(cherry picked from commit a4e76a630e)
 2014-06-17 13:49:44 -07:00
Evan Hunt d40f68e089 [v9_10] wrong dlopen filename caused segfault 
3878.	[bug]		Using the incorrect filename for a DLZ module
			caused a segmentation fault on startup. [RT #36286]

(cherry picked from commit c1d33c159b)
 2014-06-12 19:34:02 -07:00