ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
6,298 Commits 589 Branches 805 Tags
d1d8cb0058e2784cd01090ed330f2bd78b9c0bbf
Commit Graph
3784 Commits
Author SHA1 Message Date
Andreas Gustafsson d1d8cb0058 pullup: 
dns_dnssec_verifymessage should make sure that it's verifying with the right
key (which should be the case anyway, but it never hurts to check).  Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
 2000-07-27 22:15:22 +00:00
Andreas Gustafsson 42ed03996d typo in error message 2000-07-27 21:47:19 +00:00
Andreas Gustafsson 941a52f8ef pullup: 
cd queries would cause the server to hang on exit.
 2000-07-27 21:42:14 +00:00
Andreas Gustafsson f1453f1f1e pullup: 
negative responses to cd queries should work now.
 2000-07-27 21:39:44 +00:00
Andreas Gustafsson 6dde69e9d7 pullup: 
349.   [bug]           Processing a query with the CD bit set now works
                        as expected.
 2000-07-27 21:27:03 +00:00
Brian Wellington d2c41814a4 pullup: 
Removed the code added in revision 1.57:

  "Store CNAMEs and their SIGs (if any) in their own name structure on
  the name list.  I.e. do not mix CNAMEs with non-CNAME data.  Do the
  same thing for DNAMEs."

because it caused DNSSEC validation of responses to ANY queries at
nodes with CNAME records to fail, and no one was able to figure out
why it was added in the first place.  As a beneficial side effect,
findname() now finds names even if they have attribute bits set
differently from the one being searched for.  This supersedes
the fix of revision 1.133.
 2000-07-27 17:18:46 +00:00
Andreas Gustafsson 59c54edd78 pullup: 
If the name is a dynamic name, free its memory
 2000-07-27 01:23:40 +00:00
Andreas Gustafsson 005175d224 pullup: 
If a message is built for one host, which isn't powered on, the tsig object
wasn't removed until the xfer object was deleted, so when the xfer tried the
second master, it asserted.
 2000-07-27 00:54:16 +00:00
Andreas Gustafsson 666c5e4b6b pullup: 
353.   [bug]           double incrememnt in lwrew/gethost.c:copytobuf().
                        (RT# 187)
 2000-07-27 00:11:38 +00:00
Brian Wellington 82a2479d02 pullup: 
339.   [bug]           DNSSEC validation of the response to an ANY
                        query at a name with a CNAME RR in a secure
                        zone triggered an assertion failure.
 2000-07-26 23:36:04 +00:00
cvs2git 5fd4b1c60c This commit was manufactured by cvs2git to create branch 'v9_0'. 2000-07-26 22:41:29 +00:00
Andreas Gustafsson 371827c1e0 added missing DNSSAFE license file 2000-07-26 22:41:28 +00:00
David Lawrence 976f44baa3 needed isc/string.h for memset() prototype 2000-07-26 22:36:34 +00:00
Andreas Gustafsson a44b1b277b pullup: 
Removed some debugging cruft.
Fixed handling of octal/hexadecimal numbers on input.
 2000-07-26 22:32:25 +00:00
David Lawrence 7b04a0e1df does not need stddef.h, tell emacs to use C mode on the file 2000-07-26 21:56:28 +00:00
David Lawrence 951c247f29 style lint 2000-07-26 21:44:34 +00:00
David Lawrence f6f4d7ee0f separate the ISC_R_NRESULTS macro from those that define result codes, for 
clarity
 2000-07-26 21:34:11 +00:00
David Lawrence 894a2f61c9 minor style issue -- missing periods at ends of sentences/phrasesin comments. 2000-07-26 21:32:57 +00:00
David Lawrence ef4010aae7 cross-reference error strings with their result.h macros 2000-07-26 21:31:52 +00:00
Michael Graff 6d016e34bf minor formatting issue -- kill trailing whitespace 2000-07-26 20:56:39 +00:00
Michael Graff bfab56849d Revamp memory stuff. 
Now, if you define ISC_MEM_TRACKLINES, and set isc_mem_debugging = 2 first
thing in main(), isc_mem_stats() will dump the file/line where any leaking
allocations were made.
 2000-07-26 19:06:20 +00:00
Michael Sawyer 761a1c3761 Add sanitizer and hide per-master key code behind sanitizing #ifdefs 2000-07-26 18:47:43 +00:00
Andreas Gustafsson a32738e3e4 352. [bug] Race condition in dns_client_t startup could cause 
an assertion failure.
 2000-07-26 17:39:12 +00:00
Andreas Gustafsson 97684ed87d new functions isc_task_getname() and isc_task_gettag(), 
to be used for debugging
 2000-07-26 17:11:14 +00:00
Andreas Gustafsson 3617357a44 pullup: 
When unsetting option strings pointer wasn't being NULLed.
 2000-07-26 16:32:50 +00:00
James Brister 6e1de1f55b When unsetting option strings pointer wasn't being NULLed. 2000-07-26 15:21:04 +00:00
Brian Wellington 5b0413f993 Call isc_log_wouldlog to potentially avoid extra work in validator_log. 2000-07-26 00:50:02 +00:00
Brian Wellington 53dc771403 The CD bit changes broke insecurity proofs. They work again. 2000-07-26 00:03:18 +00:00
Andreas Gustafsson 7497e313ef pullup: 
351.   [bug]           Constructing a response with rcode SERVFAIL to a TSIG
                        signed query could crash the server.
 2000-07-25 23:51:16 +00:00
Brian Wellington 6dc130c7c9 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG 
signed query could crash the server.
 2000-07-25 22:51:46 +00:00
Andreas Gustafsson e3c6d6f461 pullup: 
350.   [bug]           Also-notify lists specified in the global options
                        block were not correctly reference counted, causing
                        a memory leak.
 2000-07-25 22:47:39 +00:00
Andreas Gustafsson ec34015017 dns_c_view_getalsonotify() should attach the list 
like both the global and per-zone counterparts now do
 2000-07-25 22:38:29 +00:00
Brian Wellington 94ec6e9a1a whitespace fixes 2000-07-25 22:04:33 +00:00
Brian Wellington 69a761838b Support for the cd (checking disabled) bit. Also remove data from the 
cache if validation fails.
 2000-07-25 22:03:25 +00:00
Brian Wellington 7e0d7323d7 Detach from the iplist obtained from *_getalsonotify. 2000-07-25 20:26:11 +00:00
James Brister b28affc652 Added missing prototypes. 2000-07-25 20:17:52 +00:00
James Brister 07919f7bb8 Do a dns_c_iplist_attach first when returning the iplist from also-notify. 2000-07-25 20:16:00 +00:00
Michael Sawyer 8cfe1a4846 Typo correction in DNS_MAX/MIN_RETRY usage 
Don't #define mins/maxes if they are already defined. (per MG)
 2000-07-25 19:29:00 +00:00
James Brister d4ab9cd94f 348. [func] New named.conf boolean values 'glue-from-auth' and 
'glue-from-cache' now supported in view and global
			options statement.
 2000-07-25 17:55:43 +00:00
Brian Wellington 969f24b04c dns_dnssec_verifymessage should make sure that it's verifying with the right 
key (which should be the case anyway, but it never hurts to check).  Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
 2000-07-25 17:12:00 +00:00
Andreas Gustafsson 81b94e091c added new fetch option DNS_FETCHOPT_NOVALIDATE 2000-07-25 17:03:21 +00:00
Brian Wellington 60783293cc If a failed positive validation led us to try an insecurity proof, and the 
insecurity proof also failed, the validator event should normally contain
the error from the positive validation.
 2000-07-25 01:24:18 +00:00
Andreas Gustafsson 398bdb2710 in deleterdataset(), set the DNS_DBADD_FORCE flag 
when adding the deletion rdataset so that rdatasets can be deleted
regardless of their trust level
 2000-07-25 01:19:51 +00:00
Andreas Gustafsson 9037893f90 add() assumed dns_trust_authsecure is the highest trust level, 
but this is no longer the case.  Thus, the DNS_DBADD_FORCE option did not take effect
if the existing data was at level dns_trust_ultimate.  Since the DNS_DBADD_FORCE
option is currently used only with cached data, no actual harm has been done.
 2000-07-25 01:06:01 +00:00
Andreas Gustafsson 56f8b1c404 the "done" variable reintroduced in the previous revision 
was not initialized
 2000-07-24 23:55:19 +00:00
Andreas Gustafsson 516b9de0d9 eliminated needless code duplication between 
the yea_and_nay and notify_setting grammar rules
 2000-07-24 23:32:31 +00:00
Andreas Gustafsson ab332c0af6 pullup: 
The "Ensures" condition for dns_db_deleterdataset was obviously wrong.
 2000-07-24 23:23:16 +00:00
Brian Wellington 687d363dea The "Ensures" condition for dns_db_deleterdataset was obviously wrong. 2000-07-24 23:10:50 +00:00
Michael Graff ef653fbdb1 implement 'notify [ yes | no | explicit ]' 2000-07-24 22:59:44 +00:00
Andreas Gustafsson 6f12e3ca45 Restored the "done" variable removed in 1.150 and made 
the result code check after the loop deal with ISC_R_SUCCESS
instead.  The previous fix had the side effect of keeping multiple
answers to non-ANY queries, causing assertion failures in cache_name()
which is not prepared to deal with this situation
 2000-07-24 20:10:26 +00:00