ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,554 Commits 589 Branches 805 Tags
v9.6-ESV-R4
Commit Graph

3258 Commits

Author SHA1 Message Date
Mark Andrews
c3ab09c9a1 9.6-ESV-R4 2011-03-28 08:41:26 +00:00
Mark Andrews
350f45bed8 9.6.3 2011-01-30 06:39:08 +00:00
Mark Andrews
1be3bd3c8f 3009. [bug] clients-per-query code didn't work as expected with 
particular query patterns. [RT #22972]
 2011-01-27 02:29:47 +00:00
Mark Andrews
0654815406 2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls. 
[RT #20768]
 2011-01-14 05:04:13 +00:00
Mark Andrews
dbb2c2bb65 9.6.3rc1 2011-01-14 00:52:40 +00:00
Mark Andrews
503b8fe694 spelling 2011-01-13 02:40:19 +00:00
Mark Andrews
0219620a50 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 02:06:13 +00:00
Mark Andrews
4df4d06b91 3002. [bug] isc_mutex_init_errcheck() failed to destroy attr. 
[RT #22766]
 2011-01-04 04:37:17 +00:00
Mark Andrews
168d13317a 2996. [security] Temporarily disable SO_ACCEPTFILTER support. 
[RT #22589]
 2010-12-22 03:28:13 +00:00
Mark Andrews
d8bf1487c7 2995. [bug] The Kerberos realm was not being correctly extracted 
from the signer's identity. [RT #22770]
 2010-12-22 02:37:55 +00:00
Mark Andrews
bbbdd230ad 2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and 
do not use threads on earlier versions.  Also kill
                        the unproven-pthreads, mit-pthreads, and ptl2 support.
 2010-12-21 04:33:18 +00:00
Mark Andrews
8c5ba02091 2984. [bug] Don't run MX checks when the target of the MX record 
is ".".  [RT #22645]
 2010-12-14 00:48:23 +00:00
Mark Andrews
f3786154f8 9.6.3b1 2010-12-09 07:29:04 +00:00
Mark Andrews
12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 01:12:55 +00:00
Evan Hunt
94c1870f9a 2979. [bug] named could deadlock during shutdown if two 
"rndc stop" commands were issued at the same
			time. [RT #22108]
 2010-12-03 22:03:41 +00:00
Mark Andrews
12f834dbb1 2978. [port] hpux: look for <devpoll.h> [RT #21919] 2010-12-03 00:59:55 +00:00
Mark Andrews
9c1af23a09 remove CVSS scores 2010-12-03 00:30:11 +00:00
Mark Andrews
006e5cc005 update RT number 2010-12-03 00:11:54 +00:00
Mark Andrews
4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG 
key.  [RT #3415]
 2010-12-02 23:40:28 +00:00
Mark Andrews
bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 05:09:58 +00:00
Mark Andrews
0c26f604d4 CVE-2010-3613 Reduce complexity from M to L raising score from 7.1 to 7.8. 
Just have the base CVSS vectors.
 2010-11-25 04:54:20 +00:00
Mark Andrews
433ff39d70 add CVE, VU and CVSS 2010-11-18 02:51:55 +00:00
Mark Andrews
b77e2d2525 2972. [bug] win32: address windows socket errors. [RT #21906] 2010-11-18 00:37:54 +00:00
Evan Hunt
886b4dfbb5 2971. [bug] Fixed a bug that caused journal files not to be 
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
 2010-11-17 00:36:27 +00:00
Mark Andrews
7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:35:03 +00:00
Shawn Routhier
06f96028a5 Fix acl type processing so that allow-query works in options and view 
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
 2010-11-16 02:43:35 +00:00
Mark Andrews
c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 02:23:44 +00:00
Mark Andrews
5badea639c 2967. [bug] 'host -D' now turns on debugging messages earlier. 
[RT #22361]
 2010-10-19 02:55:53 +00:00
Mark Andrews
cbba436904 2966. [bug] isc_print_vsnprintf() failed to check if there was 
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
 2010-10-18 04:02:40 +00:00
Mark Andrews
10ee68e217 2965. [func] Test HMAC functions using test data from RFC 2104 and 
RFC 4634. [RT #21702]
 2010-09-29 04:13:38 +00:00
Mark Andrews
ff826c2844 2964. [bug] view->queryacl was being overloaded. Seperate the 
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
 2010-09-24 08:09:08 +00:00
Mark Andrews
b622abe567 spelling 2010-09-17 04:56:35 +00:00
Mark Andrews
7a448bce5d 2962. [port] win32: add more dependencies to BINDBuild.dsw. 
[RT #22062]
 2010-09-16 08:48:43 +00:00
Mark Andrews
af6b256444 2960. [func] Check that named accepts non-authoritative answers. 
[RT #21594]
 2010-09-15 12:16:51 +00:00
Mark Andrews
3f816cf4dd 2959. [func] Check that named starts with a missing masterfile. 
[RT #22076]
 2010-09-15 03:47:08 +00:00
Mark Andrews
6fd0466e76 2957. [bug] entropy_get() and entropy_getpseudo() failed to match 
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
 2010-09-15 03:26:09 +00:00
Mark Andrews
32ccfb2a25 2956. [port] Enable atomic operations on the PowerPC64. [RT #21899] 2010-09-13 07:10:58 +00:00
Mark Andrews
cd3e4f6c6c 2954. [bug] contrib: dlz_mysql_driver.c bad error handling on 
build_sqldbinstance failure. [RT #21623]
 2010-09-13 03:32:01 +00:00
Mark Andrews
7a5e04daa2 9.6.3b1 2010-09-10 06:08:30 +00:00
Mark Andrews
453c9289b5 2953. [bug] Silence spurious "expected covering NSEC3, got an 
exact match" message when returning a wildcard
                        no data response. [RT #21744]
 2010-09-07 02:53:19 +00:00
Mark Andrews
67128a1621 2952. [port] win32: named-checkzone and named-checkconf failed 
to initialise winsock. [RT #21932]
 2010-09-07 01:53:47 +00:00
Mark Andrews
5122ec7d9e 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:12:24 +00:00
Mark Andrews
004d763170 2950. [bug] named failed to perform a SOA up to date check when 
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
 2010-09-06 04:49:19 +00:00
Mark Andrews
f8dd4a6340 2946. [doc] Document the default values for the minimum and maximum 
zone refresh and retry values in the ARM. [RT #21886]
 2010-08-20 01:38:26 +00:00
Mark Andrews
a22de44555 2945. [doc] Update empty-zones list in ARM. [RT #21772] 
2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]
 2010-08-20 00:19:54 +00:00
Mark Andrews
03df994501 2942. [contrib] zone2sqlite failed to setup the entropy sources. 
[RT #21610]
 2010-08-16 05:37:18 +00:00
Mark Andrews
f2d91bd3e5 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 05:22:12 +00:00
Mark Andrews
a36e2a27db change number 2010-08-13 07:36:44 +00:00
Mark Andrews
3a3a245419 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:21:39 +00:00
Tatuya JINMEI 神明達哉
85b94d05c0 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 23:04:21 +00:00