Evan Hunt
bfdeccc5bd
ensure rpz summary consistence during AXFR updates
...
4121. [bug] When updating a response-policy zone via AXFR,
summary data about other policy zones could fall
out of sync. Ultimately this could trigger an
assertion failure in rpz.c. [RT #39567 ]
(cherry picked from commit 19365b43e9433b64a548
2015-05-21 12:39:43 -07:00
Evan Hunt
e1dc78dd6e
[v9_10_2_patch] address a possible policy update race
...
4120. [bug] A bug in RPZ could cause the server to crash if
policy zones were updated while recursion was
pending for RPZ processing of an active query.
[RT #39415 ]
(cherry picked from commit 7e6cf6fc6e04defaf799
2015-05-21 12:39:39 -07:00
Evan Hunt
0ed7ac26f1
Fix a bug in RPZ that could cause unwanted recursion ( #39229 )
...
(cherry picked from commit b947e1a5215cbd509a3d
2015-05-21 12:38:54 -07:00
Evan Hunt
62d011a9ff
RPZ: Don't diff keys out of bounds, found via Valgrind ( #38559 )
...
(cherry picked from commit e58eb371a073639a33fa
2015-05-21 12:38:43 -07:00
Evan Hunt
f2009f0400
[v9_10] prep 9.10.2
2015-02-17 17:11:35 -08:00
Tinderbox User
85f71b64a8
update copyright notice / whitespace
2015-02-17 23:45:46 +00:00
Evan Hunt
a30b7ada90
[v9_10] silence warning
2015-02-17 11:37:18 -08:00
Mark Andrews
bc6ec8a625
4060. [bug] dns_rdata_freestruct could be call on a uninitialised
...
structure when handling a error. [RT #38568 ]
(cherry picked from commit f4102ab13e
2015-02-11 16:50:55 +11:00
Evan Hunt
ca18699462
[v9_10] oops, win32 data exports work differently now
2015-02-10 17:27:42 -08:00
Evan Hunt
4f1e0dd70e
[v9_10] export dns_zone_mkey_{month,day,hour}
2015-02-10 17:00:44 -08:00
Tinderbox User
d5bad8c9b9
update copyright notice / whitespace
2015-02-10 23:45:50 +00:00
Evan Hunt
df3ca0d7f3
[v9_10] prep 9.10.2rc2
2015-02-10 15:12:49 -08:00
Evan Hunt
a7db54206c
[v9_10] fix PRNG selection in dispatch.c
...
4058. [bug] UDP dispatches could use the wrong psuedorandom
number generator context. [RT #38578 ]
2015-02-10 13:55:14 -08:00
Evan Hunt
83b613cbfb
[v9_10] fix "initialize with revoked key" test
2015-02-10 13:40:39 -08:00
Evan Hunt
f87d4ca084
[v9_10] 5011 fixes
...
4056. [bug] Fixed several small bugs in automatic trust anchor
management, including a memory leak and a possible
loss of key state information. [RT #38458 ]
2015-02-10 12:59:38 -08:00
Evan Hunt
6bd82ee4a5
[v9_10] avoid crash due to managed-key rollover
...
4053. [security] Revoking a managed trust anchor and supplying
an untrusted replacement could cause named
to crash with an assertion failure.
(CVE-2015-1349) [RT #38344 ]
2015-02-03 18:25:58 -08:00
Tinderbox User
7c8189712b
update copyright notice / whitespace
2015-01-30 23:45:46 +00:00
Mark Andrews
8c59d8f17a
4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491 ]
...
(cherry picked from commit e77ef50a57
2015-01-30 21:49:23 +11:00
Tinderbox User
82b5996b64
update copyright notice / whitespace
2015-01-29 23:45:48 +00:00
Mark Andrews
1829b78a8d
4048. [bug] adb hash table was not being grown. [RT #38470 ]
...
(cherry picked from commit 4b36b9c1ff
2015-01-29 11:51:25 +11:00
Evan Hunt
7389013151
[v9_10] bump mapapi (dns_rbtnode has changed)
2015-01-22 11:32:23 -08:00
Evan Hunt
d17847d30d
[v9_10] prep 9.10.2rc1
2015-01-22 10:35:49 -08:00
Evan Hunt
6cb3753654
[v9_10] silence warning
2015-01-22 09:07:57 -08:00
Mark Andrews
9b02bf01a1
4045. [bug] Skip to next master on dns_request_createvia4 failure.
...
[RT #25185 ]
(cherry picked from commit 875574f1e4
2015-01-22 15:57:16 +11:00
Tinderbox User
b99f7bf9b7
Merge branch 'v9_10' of /proj/git/prod/bind9 into v9_10
2015-01-21 23:45:31 +00:00
Mark Andrews
fa5be051ae
4042. [bug] zone.c:iszonesecure was being called too late.
...
[RT #38371 ]
(cherry picked from commit 22e3e00ac9
2015-01-21 13:19:19 +11:00
Tinderbox User
3817256ab9
update copyright notice / whitespace
2015-01-20 23:47:01 +00:00
Evan Hunt
1ef4faabd5
[v9_10] clean up gcc -Wshadow warnings
...
4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381 ]
2015-01-20 13:43:35 -08:00
Mark Andrews
f9ef9ca233
4038. [bug] Add 'rpz' flag to node and use it to determine whether
...
to call dns_rpz_delete. This should prevent unbalanced
add / delete calls. [RT #36888
(cherry picked from commit cc0a48a381
2015-01-20 16:58:15 +11:00
Mark Andrews
4b499125a9
4037. [bug] also-notify was ignoring the tsig key when checking
...
for duplicates resulting in some expected notify
messages not being sent. [RT #38369 ]
(cherry picked from commit f8eb4e5bfd
2015-01-20 16:46:06 +11:00
Evan Hunt
a7763db2e0
[v9_10] remove a potentially misleading log message
2015-01-19 20:15:24 -08:00
Tinderbox User
71b009ae5a
update copyright notice / whitespace
2015-01-10 23:45:50 +00:00
Mark Andrews
38e0062bbd
4033. [bug] Missing out of memory check in request.c:req_send.
...
[RT #38311 ]
(cherry picked from commit f4dda9cf28
2015-01-11 09:24:59 +11:00
Tinderbox User
167beb6aa5
update copyright notice / whitespace
2015-01-08 23:45:50 +00:00
Mark Andrews
b1e4b4c0c8
4031. [bug] named-checkconf -z failed to report a missing file
...
with a hint zone. [RT #38294 ]
(cherry picked from commit d1f1f13c7f
2015-01-08 19:20:04 +11:00
Tinderbox User
8a088ef1c8
update copyright notice / whitespace
2015-01-06 23:45:48 +00:00
Mark Andrews
b7a7bc79ee
4028. [bug] $GENERATE with a zero step was not being caught as a
...
error. A $GENERATE with a / but no step was not being
caught as a error. [RT #38262 ]
(cherry picked from commit b0c18fffd3
2015-01-06 11:32:53 +11:00
Evan Hunt
9cad382ec7
[v9_10] corrections for win32/win64 builds
2014-12-29 11:29:28 -08:00
Tinderbox User
33eb74f112
update copyright notice / whitespace
2014-12-19 23:45:48 +00:00
Mark Andrews
14c7ef12e0
4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
...
dns_rdata_opt_current, dns_rdata_txt_first,
dns_rdata_txt_next and dns_rdata_txt_current were
documented but not implemented. These have now been
implemented.
dns_rdata_spf_first, dns_rdata_spf_next and
dns_rdata_spf_current were document but not
implemented. The prototypes for these
functions have been removed. [RT #38068 ]
4023. [bug] win32: socket handling with explict ports and
invoking named with -4 was broken for some
configurations. [RT #38068 ]
(cherry picked from commit 1e0ed0c6f5
2014-12-19 11:37:26 +11:00
Evan Hunt
8a64e078d1
[v9_10] prep 9.10.2b1
2014-12-18 13:51:12 -08:00
Evan Hunt
af5527c87b
[v9_10] more missing entry points
2014-12-16 14:41:16 -08:00
Evan Hunt
6ac1d854a4
[v9_10] add more missing entry points
2014-12-16 12:41:20 -08:00
Mark Andrews
e948a249e2
add missing entry points
...
(cherry picked from commit eb690e00e7
2014-12-17 00:29:46 +11:00
Evan Hunt
b0e9108311
[v9_10] adjust max-recursion-queries
...
4021. [bug] Adjust max-recursion-queries to accommodate
the need for more queries when the cache is
empty. [RT #38104 ]
(cherry picked from commit be7fba8019
2014-12-15 22:28:26 -08:00
Mark Andrews
cbc8dc8d7a
remove non null check
...
(cherry picked from commit 2e98ab2c9d
2014-12-09 19:51:56 +11:00
Mark Andrews
ac9781c7cd
4019. [func] If named is not configured to validate the answer
...
then allow fallback to plain DNS on timeout even
when we know the server supports EDNS. [RT #37978 ]
2014-12-05 18:04:26 +11:00
Mark Andrews
b99cdea866
4015. [bug] Nameservers that are skipped due to them being
...
CNAMEs were not being logged. They are now logged
to category 'cname' as per BIND 8. [RT #37935 ]
(cherry picked from commit ea3aa401bc
2014-12-03 11:42:16 +11:00
Mark Andrews
d821a83c51
4014. [bug] When including a master file origin_changed was
...
not being properly set leading to a potentially
spurious 'inherited owner' warning. [RT #37919 ]
(cherry picked from commit 6444de08d1
2014-12-03 09:45:06 +11:00
Mark Andrews
2d4d5c4cac
use the actual header
2014-11-28 19:19:16 +11:00
Evan Hunt
Tinderbox User
Mark Andrews