Commit Graph

3323 Commits

Author SHA1 Message Date
Mark Andrews
d40840108e move 9.6-ESV-R5rc1 release marker 2011-06-15 03:34:04 +00:00
Evan Hunt
d7eaf06b5a 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-09 00:16:37 +00:00
Mark Andrews
58e8ea9c16 move 9.6-ESV-R5rc1 release point 2011-05-27 01:54:56 +00:00
Mark Andrews
c0229f8125 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-27 00:50:10 +00:00
Evan Hunt
f32e775717 3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
2011-05-26 23:12:06 +00:00
Mark Andrews
7160363173 whitespace 2011-05-24 00:05:41 +00:00
Mark Andrews
73220c967c v9_6_ESV_R5rc1 2011-05-23 23:19:09 +00:00
Evan Hunt
d9ebd3015c 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:24:12 +00:00
Mark Andrews
d54156f771 3113. [doc] Document the relationship between serial-query-rate
and NOTIFY messages.
2011-05-17 05:38:32 +00:00
Mark Andrews
cea7c586ff 3112. [doc] Add missing descriptions of the update policy name
types "ms-self", "ms-subdomain", "krb5-self" and
                        "krb5-subdomain", which allow machines to update
                        their own records, to the BIND 9 ARM.
2011-05-16 04:23:15 +00:00
Evan Hunt
80ce101ee4 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:23:50 +00:00
Evan Hunt
f9d92ced79 3104. [bug] Better support for cross-compiling. [RT #24367] 2011-05-05 19:22:19 +00:00
Evan Hunt
d34b3cc9dd 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]
2011-04-19 22:32:51 +00:00
Evan Hunt
2bf9de0210 3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
2011-04-15 01:02:36 +00:00
Mark Andrews
9b01b03fd6 9.6-ESV-R5b1 2011-04-08 02:19:06 +00:00
Mark Andrews
f0069633aa 3096. [bug] Set KRB5_KTNAME before calling log_cred() in
dst_gssapi_acceptctx(). [RT #24004]
2011-04-07 23:07:37 +00:00
Mark Andrews
126aafee47 3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
2011-04-06 10:34:27 +00:00
Scott Mann
9fcade3a09 Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh
in order to resolve changing named.conf issue.  [RT #23687]
2011-03-22 19:10:41 +00:00
Mark Andrews
a3f2db3629 3083. [bug] NOTIFY messages were not being sent when generating
a NSEC3 chain incrementally. [RT #23702]
2011-03-21 01:17:14 +00:00
Francis Dupont
1e491a168a 3081. [bug] Failure of DNAME substitution did not return
YXDOMAIN. [RT #23591]
2011-03-18 21:38:50 +00:00
Francis Dupont
39b282b851 3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
[RT #23587]
2011-03-18 09:10:20 +00:00
Mark Andrews
ca6c0d246d 3079. [bug] Handle isc_event_allocate failures in t_tasks.
[RT #23572]
2011-03-18 07:49:17 +00:00
Mark Andrews
9a44555549 3074. [bug] Make the adb cache read through for zone data and
glue learn for zone named is authoritative for.
                        [RT #22842]
2011-03-13 03:42:09 +00:00
Mark Andrews
e9cc9a1dce 3058. [bug] Cause named to terminate at startup or rndc reconfig/
reload to fail, if a log file specified in the conf
                        file isn't a plain file. [RT #22771]
2011-03-12 04:48:03 +00:00
Mark Andrews
4a8a881a7a 3071. [bug] has_nsec could be used unintialised in
update.c:next_active. [RT #20256]
2011-03-11 12:57:03 +00:00
Mark Andrews
5b4cdf0f41 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 10:50:00 +00:00
Mark Andrews
63876ecca1 3068. [bug] Named failed to build with a OpenSSL without engine
support. [RT #23473]
2011-03-11 01:39:11 +00:00
Mark Andrews
bcfab2630a 3067. [bug] ixfr-from-differences {master|slave}; failed to
select the master/slave zones.  [RT #23580]
2011-03-11 00:52:38 +00:00
Mark Andrews
13feff2b58 3065. [bug] RRSIG could have time stamps too far in the future.
[RT #23356]
2011-03-09 07:31:47 +00:00
Mark Andrews
bfe7b53f7b DNAME not DS 2011-03-08 00:36:43 +00:00
Mark Andrews
b23ab77224 reorder so ESV change history is visible 2011-03-07 00:58:47 +00:00
Mark Andrews
c0337497aa 3064. [bug] powerpc: add sync instructions to the end of atomic
operations. [RT #23469]
2011-03-07 00:32:20 +00:00
Evan Hunt
319cc9c02b 3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402] 2011-03-05 23:08:46 +00:00
Evan Hunt
e7f1bd0601 3059. [test] Added a regression test for change #3023. 2011-03-04 22:11:01 +00:00
Evan Hunt
58a91f8111 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:45:59 +00:00
Mark Andrews
b7147009da 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:34:22 +00:00
Francis Dupont
1b6423ff8c Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:44:00 +00:00
Mark Andrews
ee94e49f30 3044. [bug] Hold the socket manager lock while freeing the socket.
[RT #23333]
2011-02-28 12:54:54 +00:00
Evan Hunt
218d0d146a 3043. [test] Merged in the NetBSD ATF test framework (currently
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
2011-02-26 05:46:59 +00:00
Evan Hunt
7ac92ea3ae minor typo 2011-02-25 23:11:48 +00:00
Evan Hunt
c8250f45f0 3042. [bug] dig +trace could fail attempting to use IPv6
addresses on systems with only IPv4 connectivity.
			[RT #23797]
2011-02-25 23:06:01 +00:00
Mark Andrews
635f8fa82e 3041. [bug] dnssec-signzone failed to generate new signatures on
ttl changes. [RT #23330]
2011-02-24 03:35:39 +00:00
Mark Andrews
21deff3df5 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 12:48:21 +00:00
Mark Andrews
8ae6d54d4c change numbers 2011-02-23 03:59:51 +00:00
Mark Andrews
39a575c3f8 2037. [doc] Update COPYRIGHT to contain all the individual
copyright notices that cover various parts.
2011-02-22 06:40:42 +00:00
Mark Andrews
810779bf8d 2036. [bug] Check built-in zone arguments to see if the zone
is re-usable or not. [RT #21914]
2011-02-22 04:33:49 +00:00
Mark Andrews
77b668076b 3035. [cleanup] Simplify by using strlcpy. [RT #22521] 2011-02-21 07:38:59 +00:00
Mark Andrews
cb197cbb14 3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521] 2011-02-21 07:29:02 +00:00
Mark Andrews
f7eb0ef71f 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
[RT #22521]
2011-02-21 07:12:50 +00:00
Mark Andrews
8ecd249a9e 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:04:54 +00:00