Tinderbox User
df020004b5
regen v9_10
2014-11-21 01:08:20 +00:00
Evan Hunt
1d50ae782a
[v9_10] win32 build fix
2014-11-20 15:56:16 -08:00
Tinderbox User
c12efe0d96
update copyright notice / whitespace
2014-11-20 23:45:53 +00:00
Evan Hunt
af63f90b99
[v9_10] add missing grammar
2014-11-20 15:36:48 -08:00
Tinderbox User
723eebf872
newcopyrights
2014-11-20 23:30:18 +00:00
Evan Hunt
5c21bc8e00
[v9_10] Merge branch 'v9_10' of ssh://repo/proj/git/prod/bind9 into v9_10
2014-11-20 13:24:42 -08:00
Evan Hunt
0af284b18b
[v9_10] add notes
2014-11-20 13:17:47 -08:00
Mark Andrews
6f8851d738
the many system test is no more
2014-11-21 08:07:29 +11:00
Evan Hunt
c58e4a4503
[v9_10] remove inadvertently-retained content from quota.h
2014-11-20 12:55:25 -08:00
Evan Hunt
6c049c57d9
[v9_10] refactor max-recursion-queries
...
- the counters weren't set correctly when fetches timed out.
instead we now pass down a counter object.
(cherry picked from commit 05e448935c
2014-11-19 18:26:46 -08:00
Tinderbox User
a50124fe98
regen v9_10
2014-11-20 01:08:49 +00:00
Tinderbox User
13fc7dc7dc
update copyright notice / whitespace
2014-11-19 23:45:49 +00:00
Tinderbox User
fca3457c59
newcopyrights
2014-11-19 23:30:36 +00:00
Evan Hunt
3ba04bb8a0
[v9_10] fix reclimit test (remove servfail-ttl)
2014-11-19 00:18:20 -08:00
Evan Hunt
b3aa528d7e
[v9_10] add max-recursion-queries
...
also fixes and documentation for max-recursion-depth
(cherry picked from commit c4f54e5bd1
2014-11-18 22:13:13 -08:00
Tinderbox User
f9650eedfc
regen v9_10
2014-11-19 01:09:14 +00:00
Tinderbox User
ff68ed6890
update copyright notice / whitespace
2014-11-18 23:45:49 +00:00
Tinderbox User
39beffcd7d
newcopyrights
2014-11-18 23:30:31 +00:00
Evan Hunt
622819ca80
[v9_10] fix RT number
2014-11-18 08:59:06 -08:00
Evan Hunt
8c91f707e1
[v9_10] add CVE
2014-11-18 00:08:47 -08:00
Evan Hunt
6fd51d5088
[v9_10] limit recursion depth and iterative queries
...
4006. [security] A flaw in delegation handling could be exploited
to put named into an infinite loop. This has
been addressed by placing limits on the number
of levels of recursion named will allow (default 7),
and the number of iterative queries that it will
send (default 50) before terminating a recursive
query (CVE-2014-8500).
The recursion depth limit is configured via the
"max-recursion-depth" option. [RT #35780 ]
2014-11-17 23:48:20 -08:00
Mark Andrews
45174975bc
check returns from putstr and putnull
...
(cherry picked from commit 18fa89b01e
2014-11-18 13:00:55 +11:00
Tinderbox User
6ff0c711ba
update copyright notice
2014-11-17 23:45:44 +00:00
Tinderbox User
90650e260c
newcopyrights
2014-11-17 23:30:11 +00:00
Evan Hunt
8b7a37a594
[v9_10] geoip security fixes
...
4003. [security] When geoip-directory was reconfigured during
named run-time, the previously loaded GeoIP
data could remain, potentially causing wrong
ACLs to be used or wrong results to be served
based on geolocation. [RT #37720 ]
4002. [security] Lookups in GeoIP databases that were not
loaded could cause an assertion failure.
[RT #37679 ]
4001. [security] The caching of GeoIP lookups did not always
handle address families correctly, potentially
resulting in an assertion failure. [RT #37672 ]
2014-11-16 08:39:47 -08:00
Evan Hunt
53b733da7f
[v9_10] fix false positive compiler warning
...
a "pointer always evaluates to true" warning was blocking
compilation of the radix ATF test when using --enable-developer
with gcc 4.8.2.
2014-11-15 00:55:06 -08:00
Tinderbox User
07af5d14d6
regen v9_10
2014-11-15 01:10:27 +00:00
Evan Hunt
96b6923a25
[v9_10] reference leak with AAAA glue but not A
...
4004. [bug] When delegations had AAAA glue but not A, a
reference could be leaked causing an assertion
failure on shutdown. [RT #37796 ]
(cherry picked from commit c4abb19716
2014-11-14 09:04:44 -08:00
Evan Hunt
5ffe6452e1
[v9_10] s/memcpy/memmove/
2014-11-06 13:02:40 -08:00
Tinderbox User
6c4b321c85
regen v9_10
2014-11-06 01:09:09 +00:00
Tinderbox User
9c65091de4
update copyright notice
2014-11-05 23:45:45 +00:00
Tinderbox User
beea83c959
newcopyrights
2014-11-05 23:30:09 +00:00
Evan Hunt
56293cd148
[v9_10] fix nxrrset in nxdomain redirection
...
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722 ]
(cherry picked from commit 3cc8c7d630
2014-11-04 23:53:54 -08:00
Tinderbox User
e88b7475bc
regen v9_10
2014-11-05 01:09:02 +00:00
Tinderbox User
8836da6a4d
update copyright notice
2014-11-04 23:45:46 +00:00
Tinderbox User
3404c3fa03
newcopyrights
2014-11-04 23:30:13 +00:00
Mark Andrews
ebdf2334f5
add missing opening bracket
...
(cherry picked from commit a31d0513c3
2014-11-04 17:12:20 +11:00
Evan Hunt
b28fd545ca
[v9_10] spelling
2014-11-03 17:44:19 -08:00
Mark Andrews
b2b3882c5c
3998. [bug] isc_radix_search was returning matches that were
...
to precise. [RT #37680 ]
(cherry picked from commit b976c39c07
2014-11-04 12:40:41 +11:00
Mark Andrews
04f10def58
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:29:28 +11:00
Mark Andrews
73b7afc3b6
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:24:56 +11:00
Tinderbox User
28eae93d32
regen v9_10
2014-11-01 01:09:11 +00:00
Tinderbox User
53b878cd1c
update copyright notice
2014-10-31 23:45:48 +00:00
Mark Andrews
d74c345b26
add end of life statement
2014-10-31 13:03:38 +11:00
Tinderbox User
9276bd6fb8
regen v9_10
2014-10-31 01:09:00 +00:00
Mark Andrews
5ccdac854e
3996. [bug] Address use after free on out of memory error in
...
keyring_add. [RT #37639 ]
(cherry picked from commit c2f8108123
2014-10-31 11:44:53 +11:00
Mark Andrews
1083f358ae
3995. [bug] receive_secure_serial holds the zone lock for too
...
long. [RT #37626 ]
(cherry picked from commit 4e59131f18
2014-10-31 11:39:45 +11:00
Tinderbox User
18064d993a
newcopyrights
2014-10-30 23:30:13 +00:00
Evan Hunt
197c3286f8
[v9_10] document that serial-query-rate has a floor of 1/second
2014-10-30 14:33:56 -07:00
Mark Andrews
a1675b15dc
3990. [testing] Add tests for unknown DNSSEC algorithm handling.
...
[RT #37541 ]
(cherry picked from commit a5c7cfbac4
2014-10-30 11:21:38 +11:00
