Commit Graph

484 Commits

Author SHA1 Message Date
Mark Andrews
570effe386 3904. [func] Add the RPZ SOA to the additional section. [RT36507]
(cherry picked from commit 3a55d43527)
2014-07-31 10:53:33 +10:00
Mark Andrews
5845da71b0 attempt to silence leaked lock false positive 2014-06-04 15:22:49 +10:00
Mark Andrews
466260b953 3857. [bug] Make it harder for a incorrect NOEDNS classification
to be made. [RT #36020]
2014-05-22 23:46:28 +10:00
Mark Andrews
f1aa50ef44 remove unused assignment
(cherry picked from commit a771e8c154d85dea18c2ae77dbc082d197ba433a)
2014-05-22 00:57:35 +10:00
Mark Andrews
a86bb63d99 3855. [bug] Limit smoothed round trip time aging to no more than
once a second. [RT #32909]

(cherry picked from commit 0fe0789181)
2014-05-21 11:09:56 +10:00
Mark Andrews
2fd5f9a326 s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/
(cherry picked from commit 801b958a5c)
2014-05-08 11:43:45 +10:00
Mark Andrews
375dac22e4 define DNS_OPT_EDNSOPTIONS
(cherry picked from commit 72ba6ba736)
2014-05-08 11:39:56 +10:00
Evan Hunt
314b626e20 [v9_9] fix dns_resolver_destroyfetch race
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]

(cherry picked from commit 7f5bdf7f40)
2014-02-18 23:32:41 -08:00
Tinderbox User
864ca7ce33 update copyright notice 2014-01-09 23:45:53 +00:00
Evan Hunt
8c7ce6d3e6 [v9_9] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]

(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
2014-01-08 16:38:56 -08:00
Evan Hunt
0c0ce5f9a4 [v9_9] fix insecure delegation across static-stub zones
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]

(cherry picked from commit 9b895f30f1)
2013-12-12 22:20:21 -08:00
Mark Andrews
3b38a23089 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]

(cherry picked from commit c3c8823fed)

Conflicts:
	CHANGES
	bin/check/win32/checktool.dsp.in
	bin/dnssec/win32/dnssectool.dsp.in
	bin/dnssec/win32/importkey.dsp.in
	bin/dnssec/win32/importkey.mak.in
	bin/named/geoip.c
	bin/named/include/named/geoip.h
	bin/tools/win32/rrchecker.dsp.in
	bin/tools/win32/rrchecker.mak.in
	config.h.win32
	lib/dns/geoip.c
	lib/dns/master.c
	lib/dns/win32/libdns.dsp.in
	lib/dns/win32/libdns.mak.in
	lib/isc/mem.c
	lib/isc/stats.c
	lib/isc/win32/file.c
	lib/isc/win32/libisc.def.in
	lib/isc/win32/libisc.mak.in
	lib/isc/win32/stdio.c
	lib/isccc/cc.c
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/makeversion.pl
	win32utils/setpk11provider.pl
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt
2013-12-04 13:48:45 +11:00
Mark Andrews
1ad4a296d7 missing FCTXTRACE2 macro RT#34914
(cherry picked from commit 0bfc15fe59)
2013-10-21 15:52:22 +11:00
Mark Andrews
42dd57732d add comment
(cherry picked from commit f45818b82a)
2013-07-26 10:26:06 +10:00
Evan Hunt
e7582c65b1 [v9_9] assertion failure in resolver.c
3584.	[security]	Caching data from an incompletely signed zone could
			trigger an assertion failure in resolver.c [RT #33690]
(cherry picked from commit 276457f7a3)
2013-06-04 11:23:18 -07:00
Mark Andrews
f28461b6f5 3548. [bug] The NSID request code in resolver.c was broken
resulting in invalid EDNS options being sent.
                        [RT #33153]
(cherry picked from commit 4adf97c32f)

Conflicts:
	lib/dns/include/dns/message.h
	lib/dns/message.c
(cherry picked from commit 6227ab7137)
2013-04-08 16:48:36 +10:00
Mark Andrews
c51fe7894a 3541. [bug] The parts if libdns was not being properly initialized
in when built in libexport mode. [RT #33028]
2013-04-03 17:28:22 +11:00
Mark Andrews
5dae063d56 3487. [bug] Change 3444 was not complete. There was a additional
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
2013-02-16 07:46:48 +11:00
Tinderbox User
a1b3872a71 update copyright notice 2013-01-10 23:45:46 +00:00
Mark Andrews
4d112a210e 3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]
2013-01-10 22:38:10 +11:00
Mark Andrews
ddd2da6c49 silence signed/unsigned warning; rename log -> fctx_log 2012-12-19 12:40:45 +11:00
Tinderbox User
efbd480608 update copyright notice 2012-12-18 23:45:35 +00:00
Mark Andrews
48f72b811d 3443. [bug] The NOQNAME proof was not being returned from cached
insecure responses. [RT #21409]

Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/include/dns/types.h
2012-12-19 10:06:24 +11:00
Tinderbox User
bb9d319faa update copyright notice 2012-11-21 23:45:32 +00:00
ckb
1e8bf19d9a 3422. [bug] Added a clear error message for when the SOA does not
match the referral. [RT #31281]
2012-11-21 16:50:38 -06:00
Evan Hunt
7cec7ec1d2 [v9_9] backport performance changes from 9.10
3316.   [tuning]        Improved locking performance when recursing.
                        [RT #28836]

3315.   [tuning]        Use multiple dispatch objects for sending upstream
                        queries; this can improve performance on busy
                        multiprocessor systems by reducing lock contention.
                        [RT #28605]
2012-10-26 10:14:29 -07:00
Mark Andrews
07dbb507d2 3391. [bug] DNSKEY that encountered a CNAME failed. [RT #31262] 2012-10-06 14:56:52 +10:00
Evan Hunt
8c18302d8b fix coverity issues
3388.	[bug]		Fixed several Coverity warnings. [RT #30996]
2012-10-02 23:46:15 -07:00
Mark Andrews
0588a6f624 3376. [bug] Lack of EDNS support was being recorded without a
successful response. [RT #30811]
2012-09-14 11:02:03 +10:00
Evan Hunt
576df86934 fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:02:23 -07:00
Mark Andrews
4db66665f5 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:38:48 +10:00
Mark Andrews
f5e44458b8 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:39:51 +10:00
Evan Hunt
2535471704 fctx_finddone: call fctx_destroy within the bucket lock
Conflicts:

	CHANGES
2012-04-24 14:57:19 -07:00
Tinderbox User
c201888c2a regen v9_9 2012-03-07 01:59:30 +00:00
Evan Hunt
f94af76649 Revert "added gitignore, removed cvsignore"
This reverts commit e8ae173655.
2012-03-05 08:24:17 -08:00
Evan Hunt
e8ae173655 added gitignore, removed cvsignore 2012-03-03 23:24:11 -08:00
Automatic Updater
42d1f669cc update copyright notice 2012-02-14 23:46:49 +00:00
Mark Andrews
cd34c0b8c7 extend:
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
2012-02-14 00:24:56 +00:00
Mark Andrews
e4aac0596c 3241. [bug] Address race conditions in the resolver code.
[RT #26889]
2011-12-07 23:08:42 +00:00
Evan Hunt
56d7492b2c missed a line 2011-12-05 17:27:16 +00:00
Evan Hunt
4122abdc3c Back out changes #3182 and #3202 2011-12-05 17:10:51 +00:00
Evan Hunt
69feafa0af 3221. [bug] Fixed a potential coredump on shutdown due to
referencing fetch context after it's been freed.
			[RT #26720]
2011-11-23 22:53:53 +00:00
Mark Andrews
2256c13194 --- 9.9.0b2 released ---
3219.   [bug]           Disable NOEDNS caching following a timeout.
2011-11-16 22:18:53 +00:00
Evan Hunt
3ab9d6435a 3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478] 2011-11-15 21:44:53 +00:00
Automatic Updater
af42579df6 update copyright notice 2011-11-04 23:46:15 +00:00
Mark Andrews
a5166d5fce 3202. [bug] NOEDNS caching on timeout was too agressive.
[RT #26416]
2011-11-04 03:38:44 +00:00
Mark Andrews
146057d7e7 3192. [bug] A query structure could be used after being freed.
[RT #22208]
2011-11-02 23:42:33 +00:00
Automatic Updater
96f5a19c12 update copyright notice 2011-10-27 23:46:31 +00:00
Scott Mann
b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Mark Andrews
dc2e627239 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
                        [RT #25380]
2011-10-12 00:18:11 +00:00