ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,988 Commits 589 Branches 805 Tags
bfdeccc5bdb4c1585f216aed173e86a71ea1ca44
Commit Graph
76 Commits
Author SHA1 Message Date
Tinderbox User d5bad8c9b9 update copyright notice / whitespace 2015-02-10 23:45:50 +00:00
Evan Hunt f87d4ca084 [v9_10] 5011 fixes 
4056.	[bug]		Fixed several small bugs in automatic trust anchor
			management, including a memory leak and a possible
			loss of key state information. [RT #38458]
 2015-02-10 12:59:38 -08:00
Mark Andrews f4889a7491 cast to (unsigned long) to silence format warning 
(cherry picked from commit d2a50c9ba8)
 2015-02-05 07:50:44 +11:00
Tinderbox User 1bf1157d72 update copyright notice / whitespace 2015-01-22 23:45:54 +00:00
Evan Hunt 865621b742 [v9_10] fix 'total use' accounting 
4046.   [bug]           Accounting of "total use" in memory context
                        statistics was not correct. [RT #38370]
 2015-01-22 09:46:28 -08:00
Tinderbox User 3817256ab9 update copyright notice / whitespace 2015-01-20 23:47:01 +00:00
Evan Hunt 1ef4faabd5 [v9_10] clean up gcc -Wshadow warnings 
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
 2015-01-20 13:43:35 -08:00
Evan Hunt 6c049c57d9 [v9_10] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.

(cherry picked from commit 05e448935c)
 2014-11-19 18:26:46 -08:00
Mark Andrews b2b3882c5c 3998. [bug] isc_radix_search was returning matches that were 
to precise. [RT #37680]

(cherry picked from commit b976c39c07)
 2014-11-04 12:40:41 +11:00
Mark Andrews 4394594398 3898. [bug] To small a buffer in tohexstr() calls in test code. 
[RT #36598]

(cherry picked from commit 6a6838f973)
 2014-07-22 11:26:50 +10:00
Tinderbox User d47d4e9acf update copyright notice 2014-07-15 23:45:43 +00:00
Mark Andrews e1bbda10c5 3894. [bug] Buffers in isc_print_vsnprintf were not properly 
initialized leading to potential overflows when
                        printing out quad values. [RT #36505]

(cherry picked from commit 71ec6d0940)
 2014-07-15 22:54:15 +10:00
Tinderbox User cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Evan Hunt 98922b2b2b [master] merge several interdependent fixes 
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
 2014-02-26 19:00:05 -08:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Evan Hunt dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Evan Hunt 90b513b2a0 [master] another build fix for pkcs11+atf+libtool 2014-01-15 12:07:04 -08:00
Evan Hunt ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Evan Hunt 903247531a [master] portable replacement for timegm() 2014-01-10 19:22:02 -08:00
Mark Andrews a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Mark Andrews fd0f3e7cd8 add unit test for isc_time_parsehttptimestamp 2014-01-11 00:30:41 +11:00
Tinderbox User 431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt e851ea8260 [master] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
 2014-01-08 16:39:05 -08:00
Mark Andrews 0a47bc90af 3668. [bug] Fix cast in lex.c which could see 0xff treated as eof. 
[RT #34993]
 2013-11-11 10:49:28 +11:00
Evan Hunt 5b7abbef51 [master] added isc_safe_memcmp() 
3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]
 2013-07-09 11:47:16 -07:00
Tinderbox User 5924e4ace0 update copyright notice 2013-06-10 23:46:19 +00:00
Evan Hunt e59937c728 [rt33746] use CRC64 for map file error detection 
3591.	[func]		Use CRC-64 to detect map file corruption at load
			time. [RT #33746]
 2013-06-10 14:19:22 -07:00
Mark Andrews 45b727f651 silence coverity warnings 2013-04-11 17:07:50 +10:00
Mark Andrews 22b5363195 printf -> fprintf 2013-03-26 16:40:14 +11:00
Tinderbox User 313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Evan Hunt cd594861c2 [master] add missing include 2013-03-22 14:50:22 -07:00
Evan Hunt 67adc03ef8 [master] add DSCP support 
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
 2013-03-22 14:05:33 -07:00
Mark Andrews 36b3ac4dce add <isc/util.h> 2013-02-27 16:14:44 +11:00
Mark Andrews fdc5f1702e silence compiler warnings 2013-02-27 15:57:46 +11:00
Mark Andrews 609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00
Mark Andrews 30b7c81c13 3500. [port] Support NAPTR regular expression validation on 
all platforms.  [RT #32688]
 2013-02-27 08:59:04 +11:00
Tinderbox User 573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt df925e6c66 [master] add zone memory context pools 
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]
 2013-02-20 21:39:05 -08:00
Tinderbox User e38affadb3 update copyright notice 2013-02-05 23:45:50 +00:00
Mark Andrews 7d517b64d5 explict cast to (char *) from (void *) to silence compiler warning in %s checking 2013-02-05 14:24:32 +11:00
Tinderbox User d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User 024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Evan Hunt 47c5b8af92 [master] silence coverity warnings 
3401.	[bug]		Addressed Coverity warnings. [RT #31484]
 2012-10-23 22:04:06 -07:00
Mark Andrews 611dc88768 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 14:20:45 +10:00
Mark Andrews 96f1aa2458 add missing extern qualiers 2012-09-17 18:37:24 +10:00
Tinderbox User 14725aff16 update copyright notice 2012-09-12 23:46:13 +00:00
ckb 179d8f4cc8 3374. [bug] isc_parse_uint32 failed to return a range error on 
systems with 64 bit longs [RT #30232]
 2012-09-12 15:08:19 -05:00
Mark Andrews 8e0a15f42f 3370. [bug] Address use after free while shutting down. [RT #30241] 2012-08-22 19:19:30 +10:00