Commit Graph

4314 Commits

Author SHA1 Message Date
Mark Andrews
d4185b5b3e nuke OVERRIDE_OPENSSL_RAND 2006-12-13 23:56:24 +00:00
Mark Andrews
1814d2108d update copyright notice 2006-12-07 23:57:59 +00:00
Mark Andrews
514aeac2ac 2118. [bug] Handle response with long chains of domain name
compression pointers which point to other compression
                        pointers. [RT #16427]
2006-12-07 06:57:46 +00:00
Mark Andrews
1ea2595e1b 2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
which could lead to validation failures.  named didn't
                        handle negative DS responses that were in the process
                        of being validated.  Check CNAME bit before accepting
                        NODATA proof. To be able to ignore a child NSEC there
                        must be SOA (and NS) set in the bitmap. [RT #16399]
2006-12-07 06:47:36 +00:00
Mark Andrews
13290782cb 2115. [bug] 'rndc reconfig' could trigger a INSIST if the
number of masters for a zone was reduced. [RT #16444]
2006-12-07 06:17:06 +00:00
Mark Andrews
58ea8fb1df 2112. [security] Warn if weak RSA exponent is used. [RT #16460] 2006-12-07 05:05:10 +00:00
Mark Andrews
cfcb0881d1 2111. [bug] Fix a number of errors reported by Coverity.
[RT #16507]
2006-12-07 04:46:27 +00:00
Mark Andrews
a7dd5f21e9 2108. [func] DHCID support. [RT #16456] 2006-12-07 03:38:39 +00:00
Mark Andrews
21c7ecb9f0 better mcxt handling. remove buffer handling layer violation 2006-12-05 21:59:12 +00:00
Mark Andrews
377231eb95 update copyright notice 2006-12-05 00:13:48 +00:00
Mark Andrews
61fad00204 USE_ENGINE should be conditional on OVERRIDE_OPENSSL_RAND 2006-12-04 05:12:25 +00:00
Mark Andrews
46f681f001 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 02:26:05 +00:00
Mark Andrews
289ae548d5 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 01:54:53 +00:00
Mark Andrews
6805e4e2c4 2101. [bug] OpenSSL version checks were not quite right.
[RT #16476]
2006-11-07 21:23:06 +00:00
Mark Andrews
a1210da036 2098. [bug] Race in rbtdb.c:no_references(), which occasionally
triggered an INSIST failure about the node lock
                        reference.  [RT #16411]
2006-10-26 05:39:49 +00:00
Mark Andrews
a473029e76 2097. [bug] named could reference a destroyed memory context
after being reloaded / reconfigured. [RT #16428]
2006-10-18 04:18:54 +00:00
Mark Andrews
b5d4d4d77f WIN32 not WIN 2006-10-11 03:54:56 +00:00
Mark Andrews
0695629678 Windows specific compile time test for:
2089.   [security]      Raise the minimum safe OpenSSL versions to
                        OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
                        prior to these have known security flaws which
                        are (potentially) exploitable in named. [RT #16391]
2006-10-11 02:15:59 +00:00
Mark Andrews
14a2b06605 Use F5 as large RSA exponent w/ OpenSSL 0.9.8 2006-10-10 02:30:10 +00:00
Mark Andrews
91ddbb6e4f update copyright notice 2006-10-03 23:50:52 +00:00
Mark Andrews
75720af254 win32 2006-10-02 07:21:53 +00:00
Mark Andrews
bc8711b148 win32 2006-10-02 07:03:05 +00:00
Mark Andrews
5cf0c55948 2090. [port] win32: Visual C++ 2005 command line manifest support.
[RT #16417]
2006-10-02 02:27:41 +00:00
Mark Andrews
fda0a03881 2089. [security] Raise the minimum safe OpenSSL versions to
OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
                        prior to these have known security flaws which
                        are (potentially) exploitable in named. [RT #16391]

2088.   [security]      Change the default RSA exponent from 3 to 65537.
                        [RT #16391]
2006-10-02 01:44:27 +00:00
Mark Andrews
f34249bb28 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:56:36 +00:00
Mark Andrews
1195c1452c update copyright notice 2006-08-30 23:49:58 +00:00
Mark Andrews
2113dfd6e2 2079. [bug] The lame cache was not handling multiple types
correctly. [RT #16361]
2006-08-30 23:09:18 +00:00
Mark Andrews
896e6a0e44 update copyright notice 2006-08-25 05:25:52 +00:00
Mark Andrews
c781727055 2076. [bug] Several files were missing #include <config.h>
causing build failures on OSF. [RT #16341]
2006-08-24 00:17:54 +00:00
Mark Andrews
22e5a52c3b 2075. [bug] The spillat timer event hander could leak memory.
[RT #16357]
2006-08-22 06:11:19 +00:00
Mark Andrews
240e57ab98 2074. [bug] dns_request_create2(), dns_request_create3(),
dns_request_createraw2() and dns_request_createraw3()
                        failed to send multiple UDP requests. [RT #16349]
2006-08-21 00:35:36 +00:00
Mark Andrews
9464f58356 update copyright notice 2006-08-10 23:59:30 +00:00
Mark Andrews
d4f5efb4d6 2070. [bug] The remote address was not always displayed when
reporting dispatch failures. [RT #16315]
2006-08-10 01:38:15 +00:00
Mark Andrews
cfaf65f53f 2068. [cleanup] Lower incremental tuning message to debug 1.
[RT #16319]
2006-08-08 06:37:12 +00:00
Mark Andrews
8db2f89e23 spelling 2006-08-01 03:42:56 +00:00
Mark Andrews
854dac0f18 2063. [bug] Change #1955 introduced a bug which caused the first
'rndc flush' call to not free memory. [RT #16244]
2006-08-01 01:03:27 +00:00
Mark Andrews
a4eea08984 update comment 2006-07-31 02:04:03 +00:00
Mark Andrews
cc7d91bd5c 2061. [bug] Accept expired wildcard message reversed. [RT #16296] 2006-07-24 22:41:59 +00:00
Mark Andrews
f22ef4dfb9 2059. [bug] Search into cache rbtdb could trigger an INSIST
failure while cleaning up a stale rdataset.
                        [RT #16292]
2006-07-24 01:12:45 +00:00
Mark Andrews
84f5576c14 2058. [bug] Adjust how we calculate rtt estimates in the presence
of authoritative servers that drop EDNS and CD
                        requests.  Also fallback to EDNS/512 and plain DNS
                        faster for zones with less than 3 servers.  [RT #16187]
2006-07-22 01:18:35 +00:00
Mark Andrews
7ad89b5ecd update copyright notice 2006-07-21 02:05:58 +00:00
Mark Andrews
cbef026164 2050. [bug] Parsing of NSAP records was not case insensitive.
[RT #16287]
2006-07-20 03:21:10 +00:00
Mark Andrews
cd7812e4b1 update copyright notice 2006-07-20 01:10:31 +00:00
Mark Andrews
799a39bc80 of -> or 2006-07-19 01:04:08 +00:00
Mark Andrews
2db8db6399 2049. [bug] Restore SOA before AXFR when falling back from
a attempted IXFR when transfering in a zone.
                        Allow a initial SOA query before attempting
                        a AXFR to be requested. [RT #16156]
2006-07-19 00:53:42 +00:00
Mark Andrews
7076f000ea 2048. [bug] It was possible to loop forever when using
avoid-v4-udp-ports / avoid-v6-udp-ports when
                        the OS always returned the same local port.
                        [RT #16182]
2006-07-19 00:42:13 +00:00
Mark Andrews
ce9cfc26a1 log message typo and %d -> %u 2006-07-19 00:24:17 +00:00
Tatuya JINMEI 神明達哉
c6ee5082db 2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
cleanup.
2006-07-06 06:36:51 +00:00
Tatuya JINMEI 神明達哉
3d5430b75a warning fix in a call to isc_atomic_store() [RT#16219] 2006-07-06 06:30:00 +00:00
Tatuya JINMEI 神明達哉
9a6522317c 2045. [func] use lock buckets for acache entries to limit memory
consumption. [RT #16183]
2006-06-28 08:28:49 +00:00