Commit Graph

6189 Commits

Author SHA1 Message Date
Mark Andrews
ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews
d196b45738 1248. [bug] The validator could incorrectly verify an invalid
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure
when seeing a bogus signature before a correct
                        signature.
2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews
981e5046e0 max-journal-size is a zone option 2002-07-13 00:53:34 +00:00
Mark Andrews
0996973920 distclean 2002-07-12 01:42:22 +00:00
Mark Andrews
53f9ddf27c silence pointer mismatch 2002-07-04 04:19:54 +00:00
Mark Andrews
6244f49146 protect clua_context access w/ #ifdef 2002-07-03 06:25:32 +00:00
Mark Andrews
7fd9fd9e4c TRUCLUSTER support: isc_interfaceiter_first() should set clua_context. 2002-07-02 05:51:43 +00:00
Mark Andrews
89251e453b result undeclared, #include <isc/log.h> 2002-07-01 23:00:38 +00:00
Mark Andrews
ecf7a18125 isc_modules[2] not isc_modules[3] 2002-07-01 01:39:45 +00:00
Mark Andrews
fe4d3e1992 hpux: ioctl(SIOCGLIFCONF) failure -> debug(1) 2002-07-01 01:08:37 +00:00
Mark Andrews
54532c5413 1339. [func] libbind: log attempts to exploit #1338. 2002-06-28 06:12:42 +00:00
Mark Andrews
020f7361a4 1338. [bug] libbind: Remote buffer overrun. 2002-06-28 06:06:24 +00:00
Mark Andrews
e8fb857c20 consistant white space w/ BIND 8 2002-06-28 05:59:22 +00:00
Mark Andrews
1c0927d8a0 1337. [port] libbind: TrueUNIX 5.1 does not like __align as a
element name.
2002-06-28 05:46:10 +00:00
Mark Andrews
e817515a6c pullup: ns_r_badvers extended error code 2002-06-28 05:41:56 +00:00
Mark Andrews
446ff1959c pullup from BIND 8
1336.   [bug]           libbind: gethostans() could get out of sync parsing
                        the response if there was a very long CNAME chain.
2002-06-28 05:00:55 +00:00
Mark Andrews
33c5380153 1334. [port] Handle ECONNRESET from sendmsg() [unix]. 2002-06-26 00:12:54 +00:00
Mark Andrews
51ff296fef regen so both configures are built using the same autoconf 2002-06-24 23:41:06 +00:00
Mark Andrews
d9e0458a89 1331. [bug] lwres_getrrsetbyname leaked memory. [RT #3159] 2002-06-20 02:31:17 +00:00
Mark Andrews
880f50a1e6 Protect both the socket and fifo tests with #ifdef's. 2002-06-20 01:19:51 +00:00
Mark Andrews
de49761421 1330. [bug] 'rndc stop' failed to cause zones to be flushed
sometimes. [RT #3157]
2002-06-19 07:14:48 +00:00
Mark Andrews
5758e9adfb 1329. [func] Log that a zone transfer was covered by a TSIG. 2002-06-19 06:47:25 +00:00
Mark Andrews
b0d31c78bc uninitalised variable 2002-06-19 04:15:12 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
e0fa16fe19 1326. [bug] Badly encoded LOC record when the size, horizontal
precision or vertical precision was 0.1m.
2002-06-14 23:40:14 +00:00
Mark Andrews
5991ce4236 remove change #1284 2002-06-13 07:25:25 +00:00
Mark Andrews
7d389c324c 1324. [func] New function: dns_zone_name(). 2002-06-13 07:05:47 +00:00
Mark Andrews
e2cf63c5df 1218. [port] Compaq Trucluster support. 2002-06-07 00:03:50 +00:00
Mark Andrews
38ded52dbb Handle OS's with incomplete API's 2002-06-06 00:55:48 +00:00
Mark Andrews
c3184b4e2a 1219. [bug] Set AI_ADDRCONFIG when looking up addresses
via getaddrinfo() (affects dig, host, nslookup, rndc
                        and nsupdate).
2002-06-06 00:27:37 +00:00
Mark Andrews
9b7c023fe6 1218. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
could be left with a trailing "\" after configure
                        has been run.
2002-06-05 22:34:57 +00:00
Mark Andrews
918102a7d2 mask of mode format bits and compare result 2002-06-05 02:20:59 +00:00
Mark Andrews
5ddbaad44e || should have been && in #if test. 2002-06-04 23:26:16 +00:00
Mark Andrews
0a1fa37641 1217. [port] linux: make handling EINVAL from socket() no longer
conditional on #ifdef LINUX.
2002-06-03 06:31:16 +00:00
Mark Andrews
c61ec97ae0 1216. [bug] isc_log_closefilelogs() needed to lock the log
context.
2002-06-03 04:34:19 +00:00
Mark Andrews
49f7d1585e 1215. [bug] isc_log_setdebuglevel() needed to lock the log
context.
2002-06-03 03:39:56 +00:00
Mark Andrews
0b1af13f68 pullup:
1314.   [func]          libbind: no longer attempts bit string labels for
                        IPv6 reverse resolution.  Try IP6.ARPA then IP6.INT
                        for nibble style resolution.
2002-06-03 00:34:58 +00:00
Mark Andrews
945cb085b8 1213. [func] Entropy can now be retrieved from EGDs. [RT #2438] 2002-05-30 04:21:17 +00:00
Mark Andrews
5ed4b0d445 1212. [func] Enable IPv6 support when using ioctl style interface
scanning and OS supports SIOCGLIFADDR using struct
                        if_laddrreq.
2002-05-30 01:28:53 +00:00
Mark Andrews
c549b3a4d5 1211. [func] Enable IPv6 support when using sysctl style interface
scanning.
2002-05-30 01:24:12 +00:00
Mark Andrews
8f96645217 1208. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
reflect written requirements.
2002-05-29 00:27:53 +00:00
Mark Andrews
da091cda77 1207. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
a rdataset to a zone db in the rbtdb implementation of
                        addrdataset.
2002-05-28 05:49:20 +00:00
Mark Andrews
d8d489cd8e 1206. [bug] dns_name_downcase() enforce requirement that
target != NULL or name->buffer != NULL.
2002-05-28 03:39:46 +00:00
Mark Andrews
f93fad20d4 check location before dereference 2002-05-27 11:37:40 +00:00
Mark Andrews
5fdea8467e Define SETFAMILYFLAGS, tidy. 2002-05-27 07:54:35 +00:00
Mark Andrews
bdb1394788 1205. [func] lwres: probe the system to see what address families
are currently in use.
2002-05-27 06:54:48 +00:00