Commit Graph

22483 Commits

Author SHA1 Message Date
Tinderbox User
cd80053809 update copyright notice / whitespace 2015-08-07 23:46:19 +00:00
Tinderbox User
78deb16548 newcopyrights 2015-08-07 23:30:12 +00:00
Evan Hunt
0d83784a75 [v9_9] address buffer accounting error
4168.	[security]	A buffer accounting error could trigger an
			assertion failure when parsing certain malformed
			DNSSEC keys. (CVE-2015-5722) [RT #40212]

(cherry picked from commit ce9f893e21)
2015-08-07 13:22:40 -07:00
Tinderbox User
c0fef5552a regen v9_9 2015-08-07 01:15:03 +00:00
Evan Hunt
7a4e4c17a3 [v9_9] remove spurious "None" 2015-08-06 14:17:05 -07:00
Evan Hunt
f30ac9e0f1 [v9_9] revert incorrect 'correction' 2015-08-05 12:15:44 -07:00
Evan Hunt
eca0e613de [v9_9] fix an awk portability issue v9.9.8b1 2015-08-03 14:22:15 -07:00
Evan Hunt
de476c9f4d [v9_9] add fetchlimit to README 2015-08-03 12:54:01 -07:00
Tinderbox User
1c74d995a4 update copyright notice / whitespace 2015-08-02 23:46:06 +00:00
Tinderbox User
068d11cce4 newcopyrights 2015-08-02 23:30:14 +00:00
Evan Hunt
f73bed07b5 [v9_9] reduce code duplication 2015-08-02 12:21:14 -07:00
Tinderbox User
0cd1091ce6 regen v9_9 2015-08-01 01:16:11 +00:00
Tinderbox User
6278caf810 update copyright notice / whitespace 2015-07-31 23:46:18 +00:00
Tinderbox User
486fe7c856 newcopyrights 2015-07-31 23:30:13 +00:00
Evan Hunt
77a4a1bf02 [v9_9] use 7 character short hash for srcid 2015-07-31 14:11:08 -07:00
Evan Hunt
c61fd79b0a [v9_9] corrected relnotes -- assertion in name.c not message.c 2015-07-31 12:03:49 -07:00
Mukund Sivaraman
4df82d6ab8 Remove missing symbols (Windows) 2015-07-31 20:33:06 +05:30
Mukund Sivaraman
5cfbc228ca Bump api versions for 9.9.8b1 2015-07-31 19:42:23 +05:30
Tinderbox User
7e8a691744 regenerate 2015-07-31 14:02:36 +00:00
Tinderbox User
e846218545 regen v9_9 2015-07-31 13:31:50 +00:00
Mukund Sivaraman
bb641f8e3a Bump version to 9.9.8b1 and update CHANGES 2015-07-31 18:57:34 +05:30
Mukund Sivaraman
d6ef589b99 Fix win32 build (UNUSED is present later)
(cherry picked from commit 63dcc28d3e)
2015-07-31 15:01:20 +05:30
Tinderbox User
06325cd2e2 regen v9_9 2015-07-24 01:12:20 +00:00
Mark Andrews
9115ff0255 whitespace 2015-07-23 19:52:25 +10:00
Tinderbox User
ff710362d9 regen v9_9 2015-07-21 01:12:42 +00:00
Evan Hunt
9ff2198baf [v9_9] add missing doc section on max-recursion-{depth,queries} 2015-07-20 15:30:26 -07:00
Tinderbox User
059561425f regen v9_9 2015-07-15 01:12:12 +00:00
Mark Andrews
3fa6d28ea3 add CVE-2015-5477 2015-07-15 08:01:11 +10:00
Mark Andrews
21a25c7db0 change tag to security
(cherry picked from commit 13c55f6a60)
2015-07-15 07:31:11 +10:00
Evan Hunt
b15d0b7839 [v9_9] spelling 2015-07-14 00:38:02 -07:00
Mark Andrews
5dc3a1c3d3 4165. [bug] An failure to reset a value to NULL in tkey.c could
result in an assertion failure. (CVE-2015-5477)
                        [RT #40046]

(cherry picked from commit dbb064aa79)
2015-07-14 14:49:21 +10:00
Tinderbox User
cc1a709402 update copyright notice / whitespace 2015-07-13 23:46:09 +00:00
Tinderbox User
667eacc86b newcopyrights 2015-07-13 23:30:13 +00:00
Mark Andrews
82b6caf613 4164. [bug] Don't rename slave files and journals on out of memory.
[RT #40033]

4163.   [bug]           Address compiler warnings. [RT #40024]

(cherry picked from commit 3a49d0ff10)
2015-07-13 09:49:09 +10:00
Mark Andrews
e0fd534cdd 4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
(cherry picked from commit 0bc743f9bc)
2015-07-10 18:44:16 +10:00
Tinderbox User
aa1535671f regen v9_9 2015-07-10 01:12:20 +00:00
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Tinderbox User
dd9c682869 newcopyrights 2015-07-09 23:31:19 +00:00
Evan Hunt
400f206788 [v9_9] fix build error with ISC_MEM_TRACKLINES=0 2015-07-09 14:24:29 -07:00
Evan Hunt
c1009e506a [v9_9] add missing functions 2015-07-09 00:04:25 -07:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 23:00:58 -07:00
Mark Andrews
1ffb96f3dd add comment about +trace and @server
(cherry picked from commit 2561b2dd84)
2015-07-09 12:12:38 +10:00
Tinderbox User
363cc9876a regen v9_9 2015-07-08 01:12:11 +00:00
Mark Andrews
2f01090351 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:56:48 +10:00
Tinderbox User
d23960eb33 update copyright notice / whitespace 2015-07-07 23:46:10 +00:00
Tinderbox User
d552198cc6 newcopyrights 2015-07-07 23:30:12 +00:00
Mark Andrews
bb53e1de90 remove extranious ) 2015-07-07 20:49:19 +10:00
Mark Andrews
8f40aae418 restore 9.9 style output 2015-07-07 18:09:06 +10:00
Mark Andrews
61299de7c3 unknown family is now a error 2015-07-07 17:55:15 +10:00
Mark Andrews
5e137ea841 add EXPIRE 2015-07-07 15:52:34 +10:00