Commit Graph
9118 Commits
Author SHA1 Message Date
Tatuya JINMEI 神明達哉 e56e0eecbb 2384. [security] Additional support for query port randomization (change
#2375) including performance improvement and port range
			specification.  [RT #17949, #18098]
2008-06-25 00:03:29 +00:00
cvs2git 3b804e5ed4 This commit was manufactured by cvs2git to create branch 'v9_3'. 2008-06-24 23:24:36 +00:00
Mark Andrews 0d5cc4c53a #include <config.h>, restore 'static inline' 2008-06-24 23:24:35 +00:00
Mark Andrews 391ac1cbfd static inline -> inline 2008-06-24 21:44:11 +00:00
Tatuya JINMEI 神明達哉 1ef53a4a91 newline 2008-06-24 01:58:16 +00:00
Tatuya JINMEI 神明達哉 78576fe0db include sys/sysctl.h only if HAVE_SYS_SYSCTL_H is defined 2008-06-24 01:40:25 +00:00
Automatic Updater 2cf81a3d8a update copyright notice 2008-06-23 23:47:11 +00:00
Tatuya JINMEI 神明達哉 386d3a99c1 2375. [security] Fully randomize UDP query ports to improve
forgery resilience. [RT #17949, #18098]
2008-06-23 19:41:20 +00:00
Automatic Updater 70b9627e90 update copyright notice 2008-06-17 23:45:32 +00:00
Tatuya JINMEI 神明達哉 ae8531ff79 2383. [bug] named could double queries when they resulted in
SERVFAIL due to overkilling EDNS0 failure detection.
			[RT #18182]
2008-06-17 22:42:10 +00:00
Tatuya JINMEI 神明達哉 0f39ff74a8 2383. [bug] named could double queries when they resulted in
SERVFAIL due to overkilling EDNS0 failure detection.
2008-06-17 22:35:08 +00:00
Mark Andrews 4bbc0f1871 2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
proofs which, in turn, caused validation failures
                        for insecure zones immediately below a secure zone
                        the server was authoritative for. [RT #18112]
2008-06-17 03:30:30 +00:00
Mark Andrews 538a0a40a2 2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
proofs which, in turn, caused validation failures
                        for insecure zones immediately below a secure zone
                        the server was authoritative for. [RT #18112]
2008-06-17 03:14:20 +00:00
Automatic Updater 97c432334e update copyright notice 2008-06-04 23:47:11 +00:00
Jeremy Reed b09318463a Remove trailing (extra) comma in enum.
Fixes "Unexpected" error with AIX cc (and probably other old compilers).
As reported on bind-users and confirmed by original poster.
This is for bugs ticket #18151.
2008-06-04 22:32:53 +00:00
Tatuya JINMEI 神明達哉 99a87dacc3 cleanup (removed meaningless condition) [RT #18144] 2008-06-04 01:11:05 +00:00
Automatic Updater 022b5c5a36 update copyright notice 2008-05-30 23:47:01 +00:00
Tatuya JINMEI 神明達哉 5cb56973ea fixed a typo in comment [RT #18130] 2008-05-30 18:27:27 +00:00
Mark Andrews 2a9280e202 2376. [bug] Change #2144 was not complete. 2008-05-29 05:31:55 +00:00
Mark Andrews 58253bddc4 2375. [bug] Change #2144 was not complete. 2008-05-29 04:46:32 +00:00
Automatic Updater 5e12264e75 update copyright notice 2008-05-22 23:45:34 +00:00
Evan Hunt 6421f9a9aa Fully randomize UDP query ports to improve forgery resilience. [rt17949] 2008-05-22 20:46:35 +00:00
Automatic Updater 11156f82ba update copyright notice 2008-05-21 23:47:01 +00:00
Evan Hunt 080a964a3f "blackhole" ACLs could cause named to segfault due to some
uninitialized memory. [rt18095]
2008-05-21 23:21:33 +00:00
Evan Hunt 5a17fe2916 Default values of zone ACLs were re-parsed each time a new zone was
configured, causing an overconsumption of memory. [rt18092]
2008-05-21 23:17:21 +00:00
Evan Hunt d230b29aba fixed incorrect TAG_HMACSHA256_BITS value [rt18047] 2008-05-15 00:50:26 +00:00
Automatic Updater 59b6d8259a update copyright notice 2008-05-13 23:47:01 +00:00
Evan Hunt c72279e756 "rndc freeze" could trigger an assertion in named when called on a
nonexistent zone. [rt18050]
2008-05-13 01:20:24 +00:00
Mark Andrews 2a5780de8a 2369. [bug] libbind: Array bounds overrun on read in bitncmp().
[RT #18054]
2008-05-12 00:20:16 +00:00
Mark Andrews e1aeb1569a 2369. [bug] libbind: Array bounds overrun on read in bitncmp().
[RT #18054]
2008-05-12 00:17:27 +00:00
Evan Hunt 69ec1b7eb3 Improve counting of dns_resstatscounter_retry [rt18030] 2008-05-06 01:12:55 +00:00
Automatic Updater 9ff097ed39 update copyright notice 2008-05-05 23:45:30 +00:00
Mark Andrews e1ebedbb23 add shutdown_task lock comment 2008-05-05 01:49:39 +00:00
Mark Andrews 0dba2713de add lock comment 2008-05-03 05:07:13 +00:00
Mark Andrews 816496b221 2366. [bug] Adb shutdown race. [RT #18021] 2008-05-02 04:40:12 +00:00
Tatuya JINMEI 神明達哉 5c024f7877 cleanups for LRU-caching code [RT #18018] 2008-05-01 18:23:07 +00:00
Evan Hunt 28ad0be64e Fix a bug causing dns_acl_isany() to return spurious results [rt18000] 2008-04-29 01:01:42 +00:00
Mark Andrews 62127c7094 2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
[RT #17513]
2008-04-28 23:49:12 +00:00
Automatic Updater e7ae6a19c9 update copyright notice 2008-04-28 23:45:41 +00:00
Mark Andrews 8b56b8956f 2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
[RT #17513]
2008-04-28 23:43:24 +00:00
Mark Andrews ccfdf96d56 2353. [func] libbind: nsid support. [RT #17091] 2008-04-28 05:46:51 +00:00
Mark Andrews bf5d3ae42a 2350. [port] win32: IPv6 support. [RT #17797] 2008-04-28 05:35:45 +00:00
Mark Andrews f1e91e8855 2345. [bug] named-checkconf failed to detect when forwarders
were set at both the options/view level and in
                        a root zone. [RT #17671]
2008-04-28 05:22:33 +00:00
Mark Andrews 3bd51537a4 2344. [bug] Improve "logging{ file ...; };" documentation.
[RT #17888]
2008-04-28 04:54:26 +00:00
Mark Andrews c72fcab80b 2341. [bug] libbind: add missing -I../include for off source
tree builds. [RT #17606]
2008-04-28 04:52:06 +00:00
Mark Andrews 67542fde0e 2335. [port] sunos: libbind and *printf() support for long long.
[RT #17513]
2008-04-28 04:26:34 +00:00
Mark Andrews 5622622793 2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
bug in fromstruct_txt(). [RT #17609]
2008-04-28 04:19:28 +00:00
Mark Andrews 2e7459026e 2333. [bug] Fix off by one error in isc_time_nowplusinterval().
[RT #17608]
2008-04-28 04:14:32 +00:00
Mark Andrews f9f8465fdd 2330. [bug] Remove potential race condition when handling
over memory events. [RT #17572]
2008-04-28 03:18:36 +00:00
Evan Hunt 2284b84d74 Make "rrset-order fixed" a compile-time option. settable by
"./configure --enable-fixed-rrset". Disabled by default. [rt17977]
2008-04-23 21:32:57 +00:00