Commit Graph

9470 Commits

Author SHA1 Message Date
Tinderbox User
cd80053809 update copyright notice / whitespace 2015-08-07 23:46:19 +00:00
Evan Hunt
0d83784a75 [v9_9] address buffer accounting error
4168.	[security]	A buffer accounting error could trigger an
			assertion failure when parsing certain malformed
			DNSSEC keys. (CVE-2015-5722) [RT #40212]

(cherry picked from commit ce9f893e21)
2015-08-07 13:22:40 -07:00
Mukund Sivaraman
4df82d6ab8 Remove missing symbols (Windows) 2015-07-31 20:33:06 +05:30
Mukund Sivaraman
5cfbc228ca Bump api versions for 9.9.8b1 2015-07-31 19:42:23 +05:30
Mukund Sivaraman
d6ef589b99 Fix win32 build (UNUSED is present later)
(cherry picked from commit 63dcc28d3e)
2015-07-31 15:01:20 +05:30
Mark Andrews
5dc3a1c3d3 4165. [bug] An failure to reset a value to NULL in tkey.c could
result in an assertion failure. (CVE-2015-5477)
                        [RT #40046]

(cherry picked from commit dbb064aa79)
2015-07-14 14:49:21 +10:00
Tinderbox User
cc1a709402 update copyright notice / whitespace 2015-07-13 23:46:09 +00:00
Mark Andrews
82b6caf613 4164. [bug] Don't rename slave files and journals on out of memory.
[RT #40033]

4163.   [bug]           Address compiler warnings. [RT #40024]

(cherry picked from commit 3a49d0ff10)
2015-07-13 09:49:09 +10:00
Mark Andrews
e0fd534cdd 4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
(cherry picked from commit 0bc743f9bc)
2015-07-10 18:44:16 +10:00
Tinderbox User
835eaef8e3 update copyright notice / whitespace 2015-07-09 23:46:11 +00:00
Evan Hunt
400f206788 [v9_9] fix build error with ISC_MEM_TRACKLINES=0 2015-07-09 14:24:29 -07:00
Evan Hunt
c1009e506a [v9_9] add missing functions 2015-07-09 00:04:25 -07:00
Evan Hunt
ea36796f82 [v9_9] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 23:00:58 -07:00
Tinderbox User
d23960eb33 update copyright notice / whitespace 2015-07-07 23:46:10 +00:00
Mark Andrews
bb53e1de90 remove extranious ) 2015-07-07 20:49:19 +10:00
Mark Andrews
8f40aae418 restore 9.9 style output 2015-07-07 18:09:06 +10:00
Mark Andrews
61299de7c3 unknown family is now a error 2015-07-07 17:55:15 +10:00
Mark Andrews
5e210b5fe5 4158. [protocol] Support the printing of EDNS COOKIE options.
[RT #39928]
2015-07-07 15:49:36 +10:00
Mark Andrews
f5386a21a8 4154. [bug] A OPT record should be included with the FORMERR
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Check that non significant ECS bits are zero on
                        receipt. [RT #39647]
2015-07-06 16:34:48 +10:00
Tinderbox User
2043cb5835 update copyright notice / whitespace 2015-07-03 23:46:09 +00:00
Mark Andrews
83028bc232 4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835] 2015-07-03 10:17:57 +10:00
Tinderbox User
c75c73b598 update copyright notice / whitespace 2015-07-01 23:46:06 +00:00
Mark Andrews
0a4dd766f6 4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
minimal fix.  [RT #39667]

(cherry picked from commit 753b27a7d3)
2015-07-01 11:52:17 +10:00
Mukund Sivaraman
fc0797977d Fix a bug printing zone names with '/' character in XML and JSON stats (#39873)
(cherry picked from commit 08f0129732)

Conflicts:
	bin/tests/system/statistics/clean.sh

(cherry picked from commit f69f188b90)

Conflicts:
	bin/named/statschannel.c
	bin/tests/system/statistics/clean.sh
	bin/tests/system/statistics/ns1/named.conf
	bin/tests/system/statistics/tests.sh

Conflicts:
	CHANGES
2015-06-30 14:45:13 +05:30
Tinderbox User
8780da5841 update copyright notice / whitespace 2015-06-29 23:46:07 +00:00
Mukund Sivaraman
ad0a9403c3 Fix race in getaddrinfo() in libirs (#39873)
(cherry picked from commit c44c77178e)
(cherry picked from commit 6141f501d9)

Conflicts:
	CHANGES
2015-06-29 19:51:23 +05:30
Mark Andrews
6f02a4e2a6 4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
was returning referrals rather than nodata responses
                        when the AAAA records were filtered.  [RT #39843]

(cherry picked from commit 4a61eae651)
2015-06-29 15:49:19 +10:00
Mark Andrews
1ef6de05cd 4146. [bug] Address reference leak that could prevent a clean
shutdown. [RT #37125]

(cherry picked from commit adbf81335b)
2015-06-25 18:36:58 +10:00
Mark Andrews
f02f4ce874 4145. [bug] Not all unassociated adb entries where being printed.
[RT #37125]

(cherry picked from commit 2f66e2dd81)
2015-06-25 18:28:14 +10:00
Mark Andrews
07ab217f7f 4143. [bug] serial-query-rate was not effective for notify.
[RT #39858]

(cherry picked from commit be4b9178f0)
2015-06-24 20:55:30 +10:00
Mukund Sivaraman
22f467116c Fix parsing of NZFs saved by rndc addzone with view specified (#39845)
(cherry picked from commit 0439bfedd9)

Conflicts:
	bin/named/server.c
	bin/tests/system/addzone/tests.sh

(cherry picked from commit 8134e7662e)

Conflicts:
	CHANGES
2015-06-23 15:01:26 +05:30
Mark Andrews
cef5a9fe72 don't use C++ keyword new; use (const char *) for output of strchr((const char *), char)
(cherry picked from commit d4422ec231)
2015-06-18 11:16:20 +10:00
Mark Andrews
60c101120e 4138. [bug] A uninitialized value in validator.c could result
in a assertion failure. (CVE-2015-4620) [RT #39795]

(cherry picked from commit a85c6b35af)
(cherry picked from commit f7d53a6f3b)
2015-06-17 09:18:27 +10:00
Mark Andrews
18dd646c3e update comment as per rt39703 2015-06-05 11:08:27 +10:00
Mark Andrews
a72248d413 silence coverity warnings
(cherry picked from commit e0fea0bf85)
2015-05-30 17:45:18 +10:00
Mark Andrews
c303b3a033 add INSIST to silence coverity
(cherry picked from commit 03089dd420)
2015-05-30 17:37:42 +10:00
Tinderbox User
2a71b08491 update copyright notice / whitespace 2015-05-28 23:46:13 +00:00
Mark Andrews
263cbd6fa1 4130. [bug] The compatability shim for *printf() misprinted some
large numbers. [RT #39586]

(cherry picked from commit 38c19e5779)
2015-05-29 07:25:31 +10:00
Mark Andrews
f86443709f fix typo 2015-05-28 18:35:01 +10:00
Mark Andrews
03d6a43845 fix merge error 2015-05-28 16:31:35 +10:00
Mark Andrews
4adbc24505 4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
(cherry picked from commit 8bb630c751)
2015-05-28 14:41:59 +10:00
Mark Andrews
8167dedf5e Handle git commit -mifdef BIND9 case 2015-05-28 14:07:56 +10:00
Mark Andrews
64b34aee39 4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
(cherry picked from commit e53e202ef3)
2015-05-28 13:26:19 +10:00
Tinderbox User
118ba5c7f3 update copyright notice / whitespace 2015-05-27 23:46:14 +00:00
Mark Andrews
f302a82da9 add dns_zone_cdscheck
(cherry picked from commit e7b7ede003)
2015-05-27 16:18:44 +10:00
Mark Andrews
f381cb86da 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
key as per RFC 7344, Section 4.1. [RT #37215]

(cherry picked from commit 598b502695)
2015-05-27 15:45:46 +10:00
Mark Andrews
a5df8b2945 use unsigned constants
(cherry picked from commit 5af7557757)
2015-05-24 12:54:40 +10:00
Tinderbox User
a644e40d6c update copyright notice / whitespace 2015-05-23 23:47:21 +00:00
Mark Andrews
50a4326d7b #undef before #define
(cherry picked from commit 503f0b324a)
2015-05-24 06:05:26 +10:00
Francis Dupont
c97747f92b finished print.h stuff 2015-05-23 16:29:54 +02:00