Commit Graph

3152 Commits

Author SHA1 Message Date
Mark Andrews
1fc35fe236 9.6-ESV-R1 2010-05-10 03:01:18 +00:00
Mark Andrews
48d417b283 2876. [bug] Named could return SERVFAIL for negative responses
from unsigned zones. [RT #21131]
2010-04-21 04:25:51 +00:00
Mark Andrews
a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Mark Andrews
aedf9eab89 9.6.2 2010-02-18 03:34:50 +00:00
Tatuya JINMEI 神明達哉
d03e7dd277 2850. [bug] If isc_heap_insert() failed due to memory shortage
the heap would have corrupted entries. [RT #20951]

9.8.0, 9.7.1(?), 9.6.2, 9.5.3
(what about 9.4-ESV?)
2010-02-04 23:27:32 +00:00
Mark Andrews
01347cce29 2849. [bug] Don't treat errors from the xml2 library as fatal.
[RT #20945]
2010-02-04 01:10:32 +00:00
Mark Andrews
350f415b02 cleanup 2010-01-31 23:26:44 +00:00
Mark Andrews
b4d6057cf0 2846. [bug] EOF on unix domain sockets was not being handled
correctly. [RT #20731]
2010-01-31 23:21:58 +00:00
Mark Andrews
153ec122b2 2844. [doc] notify-delay default in ARM was wrong. It should have
been five (5) seconds.
2010-01-23 00:39:07 +00:00
Evan Hunt
9b72b0258e prepare for 9.6.2rc1 release 2010-01-15 21:12:11 +00:00
Evan Hunt
3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Francis Dupont
6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Evan Hunt
0f83518a99 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 17:49:01 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
Evan Hunt
c7c6605eb0 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:44:45 +00:00
Mark Andrews
e02ccd485e 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 04:02:56 +00:00
Mark Andrews
ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Evan Hunt
65bbefae47 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define
[RT #20771]
2009-12-24 00:34:59 +00:00
Evan Hunt
c7a3571cf6 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:17:47 +00:00
Evan Hunt
b8f874d1b3 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:34:16 +00:00
Mark Andrews
669b1ee4d8 2814. [func] Provide a definitive error message when a master
zone is not loaded. [RT #20757]
2009-12-21 04:32:42 +00:00
Mark Andrews
fce41660df 2593. [bug] Improve a corner source of SERVFAILs [RT #19632] 2009-12-03 04:38:28 +00:00
Mark Andrews
3da71a0572 2601. [doc] Mention file creation mode mask in the
named manual page.
2009-12-03 04:35:45 +00:00
Mark Andrews
50331a1a93 2659. [doc] Clarify dnssec-keygen doc: key name must match zone
name for DNSSEC keys. [RT #19938]
2009-12-03 04:30:39 +00:00
Mark Andrews
f8376838e7 2701. [doc] Correction to ARM: hmac-md5 is no longer the only
supported TSIG key algorithm. [RT #18046]
2009-12-03 04:22:52 +00:00
Mark Andrews
34b8a84928 2533. [doc] ARM: document @ (at-sign). [RT #17144] 2009-12-03 03:34:18 +00:00
Mark Andrews
cac64d5bd8 Missing changes note:
2639.   [bug]           Silence compiler warnings in gssapi code. [RT #19954]
2009-12-03 02:25:51 +00:00
Mark Andrews
3638fe4f9a spelling 2009-12-03 00:03:58 +00:00
Mark Andrews
a3862bb60b spelling 2009-12-02 23:59:15 +00:00
Mark Andrews
38917972ea remove trailing whitespace 2009-12-02 23:57:33 +00:00
Mark Andrews
985137ff66 2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existant
function. [RT #18582]
2009-12-02 23:54:24 +00:00
Mark Andrews
8b7fa47bf2 2797. [bug] Don't decrement the dispatch manager's maxbuffers.
[RT #20613]
2009-12-02 23:26:28 +00:00
Mark Andrews
ce0d2caf1b 9.6.2b1 2009-12-02 23:03:04 +00:00
Mark Andrews
f37e34be9d rt# 2009-11-26 21:33:28 +00:00
Mark Andrews
432b145c6e 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:36:45 +00:00
Evan Hunt
c8ae58f9f8 2789. [bug] Fixed an INSIST in dispatch.c [RT #20576] 2009-11-25 05:55:10 +00:00
Mark Andrews
eb5f89b06e 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:25:56 +00:00
Mark Andrews
375962bc49 rt# 2009-11-24 03:34:02 +00:00
Mark Andrews
eb60656b9b 2784. [bug] TC was not always being set when required glue was
dropped. [RT #234186]
2009-11-24 03:25:53 +00:00
Mark Andrews
32967e6895 2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
buffer size of 512 or less.  [RT #20654]
2009-11-24 03:15:31 +00:00
Mark Andrews
cdf3ea38b5 2782. [port] win32: use getaddrinfo() for hostname lookups.
[RT #20650]
2009-11-24 02:12:54 +00:00
Mark Andrews
5302b44251 2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong. 2009-11-23 02:39:10 +00:00
Mark Andrews
e7f4d4e09d 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-18 00:15:38 +00:00
Mark Andrews
7dc66d649a 2765. [bug] Skip masters for which the TSIG key cannot be found.
[RT #20595]
2009-11-12 23:39:23 +00:00
Evan Hunt
2ac5c5415c 2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533] 2009-11-10 20:01:41 +00:00
Evan Hunt
fa8f5570bc 2759. [doc] Add information about .jbk/.jnw files to
the ARM. [RT #20303]
2009-11-10 19:48:16 +00:00
Evan Hunt
6d4ad45aee 2758. [bug] win32: Added a workaround for a windows 2008 bug
that could cause the UDP client handler to shut
			down. [RT #19176]
2009-11-10 18:31:24 +00:00
Evan Hunt
13de8b7015 2757. [bug] dig: assertion failure could occur in connect
timeout. [RT #20599]
2009-11-10 17:27:13 +00:00
Evan Hunt
b514948e9d 2755. [doc] Clarify documentation of keyset- files in
dnssec-signzone man page. [RT #19810]
2009-11-06 21:36:22 +00:00
Evan Hunt
f75c7e218c 2754. [bug] Secure-to-insecure transitions failed when zone
was signed with NSEC3. [RT #20587]
2009-11-06 08:38:21 +00:00