ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
19,369 Commits 589 Branches 805 Tags
d9b107aefa552ddbafa6e4e39d4ceb08e23fa607
Commit Graph

1976 Commits

Author SHA1 Message Date
Tatuya JINMEI 神明達哉
59721b321d 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)

Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
  because it's disabled by default for 9.4.  This is not a problem of this
  patch - the test was broken for 9.4 when it was first introduced.  Another
  reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
   promotion as 9.4 doesn't include this bug fix.
 2009-12-30 08:55:48 +00:00
Mark Andrews
b4bd8d0662 772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-25 04:50:25 +00:00
Automatic Updater
1c52929b3c update copyright notice 2009-09-24 23:46:07 +00:00
Tatuya JINMEI 神明達哉
aaa2233e76 2525. [experimental] New logging category "query-errors" to provide detailed 
internal information about query failures, especially
			about server failures.  (backported as a special
			exception to the general policy) [RT #19027]
 2009-09-24 21:38:52 +00:00
Mark Andrews
55b1dda9d8 2640. [security] A specially crafted update packet will cause named 
to exit. [RT #20000]
 2009-07-28 15:57:26 +00:00
Automatic Updater
b353313567 update copyright notice 2009-07-11 23:46:06 +00:00
Mark Andrews
32a1ab66b9 2920. [bug] Delay thawing the zone until the reload of it has 
completed successfully.  [RT #19750]
 2009-07-11 04:30:50 +00:00
Automatic Updater
631cd8160f regen 2009-07-11 01:31:50 +00:00
Automatic Updater
f4e7a7a1f7 update copyright notice 2009-06-23 23:46:03 +00:00
Mark Andrews
bc780408cb 2615. [port] win32: 'named -v' should automatically be executed 
in the foreground. [RT #19844]
 2009-06-23 07:49:14 +00:00
Mark Andrews
99f0cd7dc1 2591. [bug] named could die when processing a update in 
removed_orphaned_ds(). [RT #19507]
 2009-04-30 07:02:57 +00:00
Mark Andrews
8870ad9e86 2583. [port] netbsd: provide a control to not add the compile 
date to the version string, -DNO_VERSION_DATE.
 2009-04-03 20:17:59 +00:00
Mark Andrews
6b344e0d2e 2568. [bug] Report when the write to indicate a otherwise 
successful start fails. [RT #19360]
 2009-03-02 03:06:25 +00:00
Automatic Updater
3741358929 update copyright notice 2009-02-16 23:46:03 +00:00
Mark Andrews
675cdfa1c4 2556. [cleanup] PCI compliance: 
* new libisc log module file
                        * isc_dir_chroot() now also changes the working
                          directory to "/".
                        * additional INSISTs
                        * additional logging when files can't be removed.
 2009-02-16 02:12:58 +00:00
Mark Andrews
695dbe1ce2 2551. [bug] Potential Reference leak on return. [RT #19341] 2009-02-15 23:08:14 +00:00
Mark Andrews
41efe04c19 2539. [security] Update the interaction between recursion, allow-query, 
allow-query-cache and allow-recursion.  [RT #19198]
 2009-01-30 04:24:29 +00:00
Automatic Updater
dec709c2aa regen 2009-01-23 01:30:39 +00:00
Automatic Updater
b457a2593e update copyright notice 2009-01-22 23:46:01 +00:00
Mark Andrews
b20752b889 Add missing commas 2009-01-22 02:09:14 +00:00
Automatic Updater
2a6997e72c update copyright notice 2009-01-19 23:46:17 +00:00
Mark Andrews
0f4ec602dd spelling 2009-01-19 00:36:29 +00:00
Automatic Updater
f262c709c5 update copyright notice 2009-01-09 23:45:59 +00:00
Tatuya JINMEI 神明達哉
3f807f4ca8 2527. [bug] named could reuse cache on reload with 
enabling/disabling validation. [RT #19119]
 2009-01-09 22:50:58 +00:00
Automatic Updater
9a2ebc4415 update copyright notice 2009-01-05 23:46:21 +00:00
Tatuya JINMEI 神明達哉
42c20e9207 trivial comment cleanups (RT#19118) 2009-01-05 23:22:26 +00:00
Tatuya JINMEI 神明達哉
2ee516cda8 comment update 2008-12-25 02:03:26 +00:00
Tatuya JINMEI 神明達哉
35961b63b5 2516. [bug] glue sort for responses was performed even when not 
needed. [RT #19039]
 2008-12-16 02:21:19 +00:00
Mark Andrews
6aadea52df 2503. [port] linux: improve compatibility with Linux Standard 
Base. [RT #18793]
 2008-12-01 04:03:18 +00:00
Automatic Updater
d53d756c84 update copyright notice 2008-11-20 23:46:03 +00:00
Mark Andrews
a696315d19 2485. [bug] Change update's the handling of obscured RRSIG 
records.  Not all orphand DS records were being
                        removed. [RT #18828]
 2008-11-20 01:24:16 +00:00
Mark Andrews
7b9b9b6c30 2479. [bug] xfrout:covers was not properly initalized. [RT #18801] 2008-11-20 00:54:45 +00:00
Mark Andrews
e6ce0e2567 2478. [bug] 'addresses' could be used uninitalized in 
configure_forward(). [RT 18800]
 2008-11-20 00:50:57 +00:00
Automatic Updater
4772f94e52 update copyright notice 2008-10-24 01:43:17 +00:00
Mark Andrews
1a48ee7d8d 2473. [port] linux: raise the limit on open files to the possible 
maximum value before spawning threads; 'files'
                        specified in named.conf doesn't seem to work with
                        threads as expected. [RT #18784]
 2008-10-24 01:28:08 +00:00
Mark Andrews
761cc767e2 2472. [port] linux: check the number of available cpu's before 
calling chroot as it depends on "/proc". [RT #16923]
 2008-10-24 01:14:35 +00:00
Automatic Updater
f2b2190a5a regen 2008-10-17 01:29:23 +00:00
Automatic Updater
71736c0b55 update copyright notice 2008-10-16 23:46:00 +00:00
Mark Andrews
8231c8c143 term -> option 2008-10-16 23:12:38 +00:00
Mark Andrews
4e40ba55eb silence compiler warning 2008-10-15 22:33:01 +00:00
Automatic Updater
720b365cf4 regen 2008-09-05 01:32:10 +00:00
Automatic Updater
672f00e426 update copyright notice 2008-09-04 23:46:08 +00:00
Mark Andrews
a8240cd7d5 2398. [bug] Improve file descriptor management. New, 
temporary, named.conf option reserved-sockets,
                        default 512. [RT #18344]
 2008-09-04 08:03:08 +00:00
Automatic Updater
64f32116e9 regen 2008-09-01 02:29:02 +00:00
Automatic Updater
f9a7c086aa update copyright notice 2008-08-21 23:46:01 +00:00
Tatuya JINMEI 神明達哉
5fd6b9b3b8 2420. [func] Add new command line option '-S' for named to specify 
the max number of sockets. [RT #18493]
			Use caution: this option may not work for some
			operating systems without rebuilding named.
 2008-08-21 00:03:25 +00:00
Tatuya JINMEI 神明達哉
19d3add998 2386. [func] Add warning about too small 'open files' limit. 
[RT #18269]
 2008-08-01 02:00:42 +00:00
Mark Andrews
a370328554 2396. [bug] Don't set SO_REUSEADDR for randomized ports. 
[RT #18336]
part 2
 2008-07-23 23:33:03 +00:00
Automatic Updater
0f81af0773 update copyright notice 2008-07-22 23:46:04 +00:00
Mark Andrews
462df43837 2396. [bug] Don't set SO_REUSEADDR for randomized ports. 
[RT #18336]
 2008-07-22 03:51:44 +00:00