ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
23,083 Commits 589 Branches 805 Tags
cc0a48a38173637f7a833e2da52bcfbcecb960b4
Commit Graph
9646 Commits
Author SHA1 Message Date
Mark Andrews cc0a48a381 4038. [bug] Add 'rpz' flag to node and use it to determine whether 
to call dns_rpz_delete.  This should prevent unbalanced
                        add / delete calls. [RT #36888
 2015-01-20 16:57:42 +11:00
Mark Andrews f8eb4e5bfd 4037. [bug] also-notify was ignoring the tsig key when checking 
for duplicates resulting in some expected notify
                        messages not being sent. [RT #38369]
 2015-01-20 16:42:56 +11:00
Evan Hunt 59c489552d [master] remove a potentially misleading log message 2015-01-19 20:15:01 -08:00
Tinderbox User b624001e36 update copyright notice / whitespace 2015-01-16 23:45:22 +00:00
Mukund Sivaraman b05a50c852 Make call to open a temporary file name safe during NZF creation (#38331) 
Based on a patch sent in by Tony Finch <dot@dotat.at>.

Also fix win32 implementation of isc_file_openunique() to use a random
filename instead of using the process id.
 2015-01-16 18:29:23 +05:30
Tinderbox User 2dd6ffb5cb update copyright notice / whitespace 2015-01-12 23:45:21 +00:00
Mukund Sivaraman 4716d844c4 Add missing symbols to libdns.def.in 2015-01-12 09:55:56 +05:30
Mukund Sivaraman a6f0e9c985 Add NTA persistence (#37087) 
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
 2015-01-12 09:07:48 +05:30
Tinderbox User f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Mark Andrews f4dda9cf28 4033. [bug] Missing out of memory check in request.c:req_send. 
[RT #38311]
 2015-01-11 09:24:33 +11:00
Evan Hunt 4b52ac401d [master] remove unhelpful comment, revise change note 
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
 2015-01-10 00:17:57 -08:00
Tinderbox User 63b0524b96 update copyright notice / whitespace 2015-01-08 23:45:22 +00:00
Mark Andrews d1f1f13c7f 4031. [bug] named-checkconf -z failed to report a missing file 
with a hint zone. [RT #38294]
 2015-01-08 19:19:12 +11:00
Tinderbox User b129f72d95 update copyright notice / whitespace 2015-01-07 23:45:22 +00:00
Evan Hunt f784ce7523 [master] add missing functions 2015-01-07 00:22:31 -08:00
Evan Hunt 74eb2f5cbc [master] rndc showzone / rndc delzone of non-added zones 
4030.	[func]		"rndc delzone" is now applicable to zones that were
			configured in named.conf, as well as zones that
			were added via "rndc addzone". (Note, however, that
			if named.conf is not also modified, the deleted zone
			will return when named is reloaded.) [RT #37887]

4029.	[func]		"rndc showzone" displays the current configuration
			of a specified zone. [RT #37887]
 2015-01-06 22:57:57 -08:00
Tinderbox User 651c5a50f4 update copyright notice / whitespace 2015-01-06 23:45:23 +00:00
Mark Andrews b0c18fffd3 4028. [bug] $GENERATE with a zero step was not being caught as a 
error.  A $GENERATE with a / but no step was not being
                        caught as a error. [RT #38262]
 2015-01-06 11:31:34 +11:00
Tinderbox User 055f6517b4 update copyright notice / whitespace 2014-12-19 23:45:22 +00:00
Mark Andrews d8f2dd46cb 4025. [port] bsdi: failed to build. [RT #38047] 2014-12-19 12:06:35 +11:00
Mark Andrews 1e0ed0c6f5 4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next, 
dns_rdata_opt_current, dns_rdata_txt_first,
                        dns_rdata_txt_next and dns_rdata_txt_current were
                        documented but not implemented.  These have now been
                        implemented.

                        dns_rdata_spf_first, dns_rdata_spf_next and
                        dns_rdata_spf_current were document but not
                        implemented.  The prototypes for these
                        functions have been removed. [RT #38068]

4023.   [bug]           win32: socket handling with explict ports and
                        invoking named with -4 was broken for some
                        configurations. [RT #38068]
 2014-12-19 11:35:07 +11:00
Mukund Sivaraman 47d837a499 Make named a singleton process [RT#37908] 
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
 2014-12-18 12:31:25 +05:30
Evan Hunt 9fcbc46062 [master] more missing entry points 2014-12-16 14:40:33 -08:00
Evan Hunt fc12d18471 [master] typos 2014-12-16 12:42:05 -08:00
Evan Hunt 25ee607cf5 [master] add more missing entry points 2014-12-16 12:09:09 -08:00
Mark Andrews eb690e00e7 add missing entry points 2014-12-17 00:27:17 +11:00
Mark Andrews 2efb444806 add missing entry points 2014-12-16 23:46:15 +11:00
Mark Andrews f5c22df82b win32 build 2014-12-16 23:36:44 +11:00
Evan Hunt be7fba8019 [master] adjust max-recursion-queries 
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]
 2014-12-15 22:28:06 -08:00
Mark Andrews 132410d33f add/sort 2014-12-16 14:49:17 +11:00
Mark Andrews 7799a5edea add missing entries 2014-12-16 14:41:25 +11:00
Mark Andrews 2e98ab2c9d remove non null check 2014-12-09 19:51:32 +11:00
Mark Andrews 017aa9aef6 4019. [func] If named is not configured to validate the answer 
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
 2014-12-05 17:47:26 +11:00
Mark Andrews ea3aa401bc 4015. [bug] Nameservers that are skipped due to them being 
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]
 2014-12-03 11:34:07 +11:00
Mark Andrews 6444de08d1 4014. [bug] When including a master file origin_changed was 
not being properly set leading to a potentially
                        spurious 'inherited owner' warning. [RT #37919]
 2014-12-03 09:42:30 +11:00
Francis Dupont 5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Francis Dupont fc63119c8b Hardened OpenSSL digest/HMAC calls [RT #37944] 2014-12-02 12:41:01 +01:00
Mark Andrews 401f7510d7 use the actual header 2014-11-28 19:17:26 +11:00
Mark Andrews 7554ff1619 add #define rdataset_clearprefetch rdataset_clearprefetch64 2014-11-25 12:06:23 +11:00
Tinderbox User 523ad879ce update copyright notice / whitespace 2014-11-24 23:53:16 +00:00
Mark Andrews 092d3b76db 4010. [cleanup] Clear the prefetchable state when initiating a prefetch. 
[RT #37399]
 2014-11-24 11:18:30 +11:00
Evan Hunt 92384667ff [master] delv +tcp 
4009.	[func]		delv: added a +tcp option. [RT #37855]
 2014-11-21 09:42:04 -08:00
Mark Andrews 70bceacc80 silence signed/unsigned warning 2014-11-21 20:28:17 +11:00
Evan Hunt 3e5b4176d8 [master] win32 build fix 2014-11-20 15:55:43 -08:00
Evan Hunt c6b699b58e [master] remove inadvertently-retained content from quota.h 2014-11-20 12:55:01 -08:00
Evan Hunt 05e448935c [master] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.
 2014-11-19 18:21:02 -08:00
Evan Hunt c4f54e5bd1 [master] add max-recursion-queries 
also fixes and documentation for max-recursion-depth
 2014-11-18 22:02:02 -08:00
Evan Hunt 3230429e17 [master] limit recursion depth and iterative queries 
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
 2014-11-17 23:24:44 -08:00
Evan Hunt c325ff9c79 [master] complete coverity fixes 2014-11-17 17:39:00 -08:00
Mark Andrews 4ac862fa96 only execute additional tests if create call succeeds 2014-11-18 12:19:37 +11:00