ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,554 Commits 589 Branches 805 Tags
v9.6-ESV-R4
Commit Graph
296 Commits
Author SHA1 Message Date
Mark Andrews bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 05:09:58 +00:00
Mark Andrews 7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:35:03 +00:00
Mark Andrews 7b2f8a1909 mark node as from nsec3 tree using 9.6.x method 2010-09-07 01:37:05 +00:00
Mark Andrews 5122ec7d9e 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:12:24 +00:00
Mark Andrews 3a3a245419 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:21:39 +00:00
Tatuya JINMEI 神明達哉 85b94d05c0 2937. [bug] Worked around an apparent race condition in over 
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
 2010-08-11 23:04:21 +00:00
Mark Andrews 2766e7b091 2881. [bug] Reduce the amount of time the rbtdb write lock 
is held when closing a version. [RT #21198]
 2010-05-10 01:42:36 +00:00
Mark Andrews 0810b14604 grab a write lock before updating header->trust 2010-02-26 00:25:27 +00:00
Automatic Updater b67c0e9a49 update copyright notice 2010-02-25 10:56:41 +00:00
Mark Andrews b8c2fd6c72 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:35:11 +00:00
Tatuya JINMEI 神明達哉 450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:34:30 +00:00
Mark Andrews ae787010e1 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:12:35 +00:00
Automatic Updater 1beb3ce612 update copyright notice 2009-11-26 23:47:33 +00:00
Mark Andrews 432b145c6e 2790. [bug] Handle DS queries to stub zones. 2009-11-26 03:36:45 +00:00
Mark Andrews eb5f89b06e 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:25:56 +00:00
Mark Andrews e7f4d4e09d 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-18 00:15:38 +00:00
Evan Hunt a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could 
trigger an assert. [RT #20368]
 2009-10-06 21:20:18 +00:00
Automatic Updater e4aad620d2 update copyright notice 2009-10-03 23:47:29 +00:00
Evan Hunt 02a7cfcc8a 2699. [bug] Missing lock in rbtdb.c. [RT #20037] 2009-10-03 22:39:04 +00:00
Mark Andrews 785eb615e3 2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865] 2009-07-13 07:04:36 +00:00
Tatuya JINMEI 神明達哉 0e8a52d67d 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay 
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
 2009-05-06 23:34:30 +00:00
Tatuya JINMEI 神明達哉 3e132fc2dd wording fix for cpp error message (rt #19569) 2009-04-07 02:50:11 +00:00
Mark Andrews 7808280b34 2573. [bug] Replacing a non-CNAME record with a CNAME record in a 
single transaction in a signed zone failed. [RT #19397]
 2009-03-05 04:57:40 +00:00
Tatuya JINMEI 神明達哉 2a238ee552 2538. [bug] cache/ADB memory could grow over max-cache-size, 
especially with threads and smaller max-cache-size
			values. [RT #19240]
 2009-01-28 23:24:19 +00:00
Automatic Updater 99b63ca8e5 update copyright notice 2009-01-18 23:47:41 +00:00
Mark Andrews d7900926bf spelling 2009-01-18 23:25:18 +00:00
Mark Andrews 2628c71479 silence compiler warning. [RT #18990] 2008-11-14 14:07:48 +00:00
Mark Andrews 76bd01263f remove debugging printf 2008-10-29 05:53:12 +00:00
Mark Andrews 736e6a6709 2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain 
collisions.  [RT #18812]

2480.   [bug]           named could fail to emit all the required NSEC3
                        records.  [RT #18812]
 2008-10-29 04:54:00 +00:00
Tatuya JINMEI 神明達哉 ff2c81060f added pre-initialization check on cachedb->node_lock_count. 2008-10-27 22:43:34 +00:00
Mark Andrews 86ee7433b3 2475. [bug] LRU cache cleanup under overmem condition could purge 
particular entries more aggresively. [RT #17628]
 2008-10-27 03:52:43 +00:00
Mark Andrews 4ac81dfb30 silence compiler warning. [RT #18766] 2008-10-24 00:11:17 +00:00
Automatic Updater 6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Tatuya JINMEI 神明達哉 52d5489b95 2415. [bug] 'rndc dumpdb' could trigger various assertion failures 
in rbtdb.c. [RT #18455]
 2008-08-13 02:28:45 +00:00
Tatuya JINMEI 神明達哉 99a87dacc3 cleanup (removed meaningless condition) [RT #18144] 2008-06-04 01:11:05 +00:00
Tatuya JINMEI 神明達哉 5c024f7877 cleanups for LRU-caching code [RT #18018] 2008-05-01 18:23:07 +00:00
Evan Hunt 2284b84d74 Make "rrset-order fixed" a compile-time option. settable by 
"./configure --enable-fixed-rrset". Disabled by default. [rt17977]
 2008-04-23 21:32:57 +00:00
Mark Andrews 537266cadc comment out '#define inline' 2008-04-09 04:31:11 +00:00
Mark Andrews 8907d8fa04 2355. [func] Extend the number statistics counters available. 
[RT #17590]
 2008-04-03 05:55:52 +00:00
Mark Andrews d904beeb3b 2354. [bug] Failed to initialise sone rdatasetheader_t elements. 
[RT #17927]
 2008-04-03 04:00:38 +00:00
Mark Andrews 3f42cf2f3e 2349. [func] Provide incremental re-signing support for secure 
dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.
 2008-04-02 02:37:42 +00:00
Automatic Updater e672951ed2 update copyright notice 2008-04-01 23:47:10 +00:00
Mark Andrews a76b380643 2349. [func] Provide incremental re-signing support for secure 
dynamic zones. [RT #1091]
 2008-04-01 01:37:25 +00:00
Automatic Updater 8b90c4fdad update copyright notice 2008-02-01 23:46:58 +00:00
Mark Andrews 9dcc44d7b3 2327. [bug] It was possible to dereference a NULL in rbtdb.c. 
Implement deadnode processing in zones as we do for
                        caches. [RT #17312]
 2008-02-01 04:31:04 +00:00
Automatic Updater da1e0ac742 update copyright notice 2008-01-31 23:47:06 +00:00
Mark Andrews 5badfc7e00 2326. [bug] It was possible to trigger a INSIST in the acache 
processing.
 2008-01-31 05:28:46 +00:00
Mark Andrews d7e8610d31 2270. [bug] dns_db_closeversion() version->writer could be reset 
before it is tested. [RT #17290]
 2007-12-02 20:27:35 +00:00
Michael Graff b239c8294a commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit 2007-10-19 17:15:53 +00:00