ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,569 Commits 589 Branches 805 Tags
v9.6-ESV-R4-P2
Commit Graph
4788 Commits
Author SHA1 Message Date
Evan Hunt 45b34964d2 forgot to bump libdns API revision number for 9.4-ESV-R4-P2 2011-06-09 04:06:22 +00:00
Automatic Updater ec0f6a3365 update copyright notice 2011-06-08 23:46:25 +00:00
Evan Hunt 45d15f741c patch security flaw [rt24777], prepare release of 9.6-ESV-R4-P2 2011-06-08 22:03:10 +00:00
Automatic Updater 10e9cc5921 update copyright notice 2011-06-02 23:46:22 +00:00
Evan Hunt 9856dd776f add dns_trust_totext to def file 2011-05-27 00:58:12 +00:00
Evan Hunt 0d5585795b rolling 9.6-ESV-R4-P1: 
3121.   [security]      An authoritative name server sending a negative
                        response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]

3120.	[bug]		Named could fail to validate zones listed in a DLV
			that validated insecure without using DLV and had
			DS records in the parent zone. [RT #24631]
 2011-05-27 00:19:19 +00:00
Mark Andrews 350f45bed8 9.6.3 2011-01-30 06:39:08 +00:00
Automatic Updater 92306578c0 update copyright notice 2011-01-27 23:45:47 +00:00
Mark Andrews 1be3bd3c8f 3009. [bug] clients-per-query code didn't work as expected with 
particular query patterns. [RT #22972]
 2011-01-27 02:29:47 +00:00
Mark Andrews dbb2c2bb65 9.6.3rc1 2011-01-14 00:52:40 +00:00
Automatic Updater 166b841b92 update copyright notice 2011-01-13 04:48:23 +00:00
Mark Andrews b41db83139 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 02:14:46 +00:00
Mark Andrews 0219620a50 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 02:06:13 +00:00
Mark Andrews d8bf1487c7 2995. [bug] The Kerberos realm was not being correctly extracted 
from the signer's identity. [RT #22770]
 2010-12-22 02:37:55 +00:00
Automatic Updater 27ee4b8ca4 update copyright notice 2010-12-14 23:46:09 +00:00
Mark Andrews 8c5ba02091 2984. [bug] Don't run MX checks when the target of the MX record 
is ".".  [RT #22645]
 2010-12-14 00:48:23 +00:00
Mark Andrews 57628d8c51 dst_key_attach 2010-12-09 07:55:34 +00:00
Mark Andrews f3786154f8 9.6.3b1 2010-12-09 07:29:04 +00:00
Mark Andrews 12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 01:12:55 +00:00
Mark Andrews 4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG 
key.  [RT #3415]
 2010-12-02 23:40:28 +00:00
Mark Andrews bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 05:09:58 +00:00
Automatic Updater fff1bf76bd update copyright notice 2010-11-17 23:45:46 +00:00
Evan Hunt 886b4dfbb5 2971. [bug] Fixed a bug that caused journal files not to be 
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
 2010-11-17 00:36:27 +00:00
Mark Andrews 7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:35:03 +00:00
Mark Andrews c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 02:23:44 +00:00
Automatic Updater c828f12404 update copyright notice 2010-09-24 08:30:28 +00:00
Mark Andrews ff826c2844 2964. [bug] view->queryacl was being overloaded. Seperate the 
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
 2010-09-24 08:09:08 +00:00
Automatic Updater ce26def095 update copyright notice 2010-09-15 12:37:35 +00:00
Mark Andrews 6fd0466e76 2957. [bug] entropy_get() and entropy_getpseudo() failed to match 
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
 2010-09-15 03:26:09 +00:00
Mark Andrews 4616a212ab 9.6.3b1 2010-09-10 07:41:42 +00:00
Mark Andrews 7b2f8a1909 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:37:05 +00:00
Mark Andrews 5122ec7d9e 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:12:24 +00:00
Mark Andrews 004d763170 2950. [bug] named failed to perform a SOA up to date check when 
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
 2010-09-06 04:49:19 +00:00
Mark Andrews f2d91bd3e5 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 05:22:12 +00:00
Mark Andrews 3a3a245419 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:21:39 +00:00
Automatic Updater 429ff72b69 update copyright notice 2010-08-11 23:45:49 +00:00
Tatuya JINMEI 神明達哉 85b94d05c0 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 23:04:21 +00:00
Automatic Updater 8f0cbae84a update copyright notice 2010-07-09 23:45:55 +00:00
Evan Hunt c81b0a2f65 2929. [bug] Improved handling of GSS security contexts: 
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
 2010-07-09 05:15:06 +00:00
Mark Andrews bc3343cc10 2925. [bug] Named failed to accept uncachable negative responses 
from insecure zones. [RT# 21555]
 2010-06-25 23:57:04 +00:00
Automatic Updater 04dc4f8218 update copyright notice 2010-06-23 23:46:05 +00:00
Mark Andrews de37ff354c 2921. [bug] The resolver could attempt to destroy a fetch context 
to soon.  [RT #19878]
 2010-06-23 01:50:41 +00:00
Mark Andrews 93827d06d2 AAAA not A 2010-06-18 05:37:50 +00:00
Mark Andrews bec36072b8 2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET. 2010-06-18 02:13:46 +00:00
Automatic Updater 80b1a05246 update copyright notice 2010-06-09 23:48:16 +00:00
Mark Andrews 10b8bf5195 2915. [cleanup] Be smarter about which objects we attempt to compile 
based on configure options. [RT #21444]
 2010-06-09 01:54:10 +00:00
Automatic Updater a55880fd78 update copyright notice 2010-06-04 23:48:25 +00:00
Mark Andrews 8925c70a54 remove trailing comma 2010-06-04 00:15:28 +00:00
Mark Andrews 69fb084072 2912. [func] Windows clients don't like UPDATE responses that clear 
the zone section. [RT #20986]
 2010-06-03 05:29:03 +00:00
Mark Andrews 7e87f04c6d 2910. [func] Sanity check Kerberos credentials. [RT #20986] 2010-06-03 02:35:53 +00:00