ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
20,265 Commits 589 Branches 805 Tags
v9.6-ESV-R10
Commit Graph
328 Commits
Author SHA1 Message Date
Mark Andrews e13c57d8ad 3577. [bug] Handle zero TTL values better. [RT #33411] 
(cherry picked from commit 5f238c3c64)
 2013-05-29 18:14:32 +10:00
Evan Hunt 52e6093cb1 [v9_6] address two more possible acache asserts 
3555.	[bug]		Address theoretical race conditions in acache.c
			(change #3553 was incomplete). [RT #33252]
(cherry picked from commit ff5ac6d421)
(cherry picked from commit 62ebf6bbef)
 2013-04-25 18:04:05 -07:00
Evan Hunt f88318ce7c [v9_6] double free caused assertion in acache 
3553.	[bug]		Address suspected double free in acache. [RT #33252]
(cherry picked from commit 11b04b18f8ecb7c0119a7a6b6bbf8f5bad789c9a)
(cherry picked from commit 3673e8535584457ec1a79b6a30ddf4d182b0f921)
 2013-04-25 10:41:52 -07:00
Tinderbox User 88434def08 update copyright notice 2013-02-18 23:45:13 +00:00
Mark Andrews e85ad696bb 3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT. 
dns_dlzcreate() failed to properly initialize
                        dlzdb.link.  When cloning a rdataset do not copy
                        the link contents.  [RT #32651]

Squashed commit of the following:

commit c36c49cbdaeec8b2506dffadbffa543283702fa2
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:24:57 2013 +1100

    don't copy the link when cloning a rdataset

commit 9fef5827edcc925075832dcce900eeca9057456d
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:23:25 2013 +1100

    initialise the dlzdb link; don't return a stale pointer on error

commit a13c584732eae2dde48920a73886b54f1fe6b030
Author: Mark Andrews <marka@isc.org>
Date:   Mon Feb 18 23:21:59 2013 +1100

    turn on ISC_LIST_CHECKINIT

Conflicts:
	lib/dns/dlz.c
(cherry picked from commit c1402b00d3)

Conflicts:
	CHANGES
 2013-02-19 07:33:54 +11:00
Mark Andrews b04d25d98f silence clang --analyze warnings 2012-11-30 18:53:43 +11:00
Mark Andrews 9dc8381ff4 null pointer derefernce on out of memory 2012-11-30 00:51:17 +11:00
Mark Andrews cecbe5bc42 3425. [bug] "acacheentry" reference counting was broken resulting 
in use after free. [RT #31908]
 2012-11-27 16:05:45 +11:00
Mark Andrews e4e82b398c 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 12:26:50 +10:00
ckb 960012de77 3348. [security] prevent RRSIG data from being cached if a negative 
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well. [RT #26809]
 2012-07-09 13:29:42 -05:00
Mark Andrews 11496d8be5 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 13:00:00 +10:00
Mark Andrews e5602180dc 3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571] 2012-04-11 10:52:26 +10:00
Tinderbox User d5c5ac0dbb regen v9_6 2012-03-07 01:45:20 +00:00
Mark Andrews 1646f6b739 2x POST(locktype); 2012-02-15 12:34:26 +00:00
Mark Andrews c43a12b55c 3284. [bug] Address race conditions with the handling of 
rbtnode.deadlink. [RT #27738]
 2012-02-15 02:04:24 +00:00
Automatic Updater 3d264c70a3 update copyright notice 2012-02-09 23:45:25 +00:00
Mark Andrews 222e488f92 3282. [bug] Restrict the TTL of NS RRset to no more than that 
of the old NS RRset when replacing it. [RT #27792]
 2012-02-09 21:05:29 +00:00
Automatic Updater e0229601aa update copyright notice 2012-01-04 23:45:30 +00:00
Evan Hunt eec7032275 3260. [bug] "rrset-order cyclic" could appear not to rotate 
for some query patterns.  [RT #27170/27185]
 2012-01-04 03:12:03 +00:00
Mark Andrews ecfec45175 3260. [bug] "rrset-order cyclic" could appear to not rotate 
for some query patterns.  [RT #27170]
 2011-12-22 23:55:25 +00:00
Mark Andrews 63516183ad 3238. [bug] keyrdata was not being reinitialized in 
lib/dns/rbtdb.c:iszonesecure. [RT#26913]
 2011-12-07 22:27:21 +00:00
Mark Andrews 0b20398de2 3218. [security] Cache lookup could return RRSIG data associated with 
nonexistent records, leading to an assertion
                        failure. [RT #26590]
 2011-11-16 09:45:25 +00:00
Mark Andrews 7bcd1005b3 nsec -> nsec3 2011-11-08 21:51:15 +00:00
Mark Andrews 30a0de4949 3212. [bug] rbtdb.c: failed to remove a node from the deadnodes 
list prior to adding a reference to it leading a
                        possible assertion failure. [RT #23219]
 2011-11-08 21:20:57 +00:00
Mark Andrews 0d11496e02 3169. [func] Catch db/version mis-matches when call dns_db_*(). 
[RT #26017]
 2011-10-13 00:37:34 +00:00
Evan Hunt c9b0a507f1 3144. [bug] dns_dbiterator_seek() could trigger an assert when 
used with a nonexistent database node. [RT #25358]
 2011-08-23 00:57:12 +00:00
Evan Hunt d7eaf06b5a 3124. [bug] Use an rdataset attribute flag to indicate 
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
 2011-06-09 00:16:37 +00:00
Mark Andrews 5b4cdf0f41 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 10:50:00 +00:00
Evan Hunt 58a91f8111 3053. [bug] Under a sustained high query load with a finite 
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
 2011-03-03 04:45:59 +00:00
Mark Andrews b7147009da 3051. [bug] NS records obsure DS records at the bottom of the 
zone if both are present. [RT #23035]
 2011-03-02 04:34:22 +00:00
Automatic Updater 81890674ce update copyright notice 2011-02-19 23:45:47 +00:00
Evan Hunt 08c0b5f032 3025. [bug] Fixed a possible deadlock due to zone resigning. 
[RT #22964]
 2011-02-19 00:44:13 +00:00
Mark Andrews bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 05:09:58 +00:00
Mark Andrews 7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:35:03 +00:00
Mark Andrews 7b2f8a1909 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:37:05 +00:00
Mark Andrews 5122ec7d9e 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:12:24 +00:00
Mark Andrews 3a3a245419 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:21:39 +00:00
Tatuya JINMEI 神明達哉 85b94d05c0 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 23:04:21 +00:00
Mark Andrews 2766e7b091 2881. [bug] Reduce the amount of time the rbtdb write lock 
is held when closing a version. [RT #21198]
 2010-05-10 01:42:36 +00:00
Mark Andrews 0810b14604 grab a write lock before updating header->trust 2010-02-26 00:25:27 +00:00
Automatic Updater b67c0e9a49 update copyright notice 2010-02-25 10:56:41 +00:00
Mark Andrews b8c2fd6c72 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:35:11 +00:00
Tatuya JINMEI 神明達哉 450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:34:30 +00:00
Mark Andrews ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Automatic Updater 1beb3ce612 update copyright notice 2009-11-26 23:47:33 +00:00
Mark Andrews 432b145c6e 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:36:45 +00:00
Mark Andrews eb5f89b06e 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:25:56 +00:00
Mark Andrews e7f4d4e09d 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-18 00:15:38 +00:00
Evan Hunt a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could 
trigger an assert. [RT #20368]
 2009-10-06 21:20:18 +00:00
Automatic Updater e4aad620d2 update copyright notice 2009-10-03 23:47:29 +00:00