444 Commits
Author SHA1 Message Date
Mark Andrews 6451a2bd14 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:45:15 +10:00
Evan Hunt ed89ac0465 fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 15:03:11 -07:00
Tinderbox User e7c7209af8 regen v9_7 2012-03-07 01:49:52 +00:00
Automatic Updater 68761692d6 update copyright notice 2012-02-14 23:46:06 +00:00
Mark Andrews 968368a0b5 extend:
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
2012-02-14 00:26:41 +00:00
Mark Andrews 4afeb31498 3241. [bug] Address race conditions in the resolver code.
[RT #26889]
2011-12-07 23:11:34 +00:00
Evan Hunt db2cb7eaae missed a line 2011-12-05 17:27:27 +00:00
Evan Hunt 40f6436384 Back out change #3182 and respin. 2011-12-05 16:57:27 +00:00
Evan Hunt ad4090df9e 3221. [bug] Fixed a potential coredump on shutdown due to
referencing fetch context after it's been freed.
			[RT #26720]
2011-11-23 22:52:46 +00:00
Evan Hunt fcd518304a 3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478] 2011-11-15 21:46:07 +00:00
Mark Andrews 8c6d81740b 3192. [bug] A query structure could be used after being freed.
[RT #22208]
2011-11-02 23:46:17 +00:00
Automatic Updater 871e091d33 update copyright notice 2011-10-27 23:45:36 +00:00
Scott Mann 07a0a4dedb fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:29:42 +00:00
Mark Andrews 605095f7e0 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
			[RT #25380]
2011-10-12 00:28:13 +00:00
Evan Hunt b55dbfdc1e 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 23:15:44 +00:00
Mark Andrews 526b51ec93 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 07:12:03 +00:00
Automatic Updater 1fd0d83a38 update copyright notice 2011-01-27 23:46:37 +00:00
Mark Andrews a244965075 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:28:54 +00:00
Mark Andrews 1872751420 2961. [bug] Be still more selective about the non-authoritative
answers we apply change 2748 to. [RT #22074]
2010-09-15 12:23:17 +00:00
Mark Andrews 910ceb6004 2928. [bug] Be more selective about the non-authoritative
answer we apply change 2748 to. [RT #21594]
2010-09-13 23:25:22 +00:00
Evan Hunt 92f39ccb5b 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:19 +00:00
Automatic Updater 5b17e46285 update copyright notice 2010-06-23 23:46:36 +00:00
Mark Andrews 773efb00d2 2921. [bug] The resolver could attempt to destroy a fetch context
to soon.  [RT #19878]
2010-06-23 01:50:55 +00:00
Automatic Updater 03d50bfec1 update copyright notice 2010-04-20 23:49:58 +00:00
Mark Andrews e104ca4071 2874. [bug] Cache lack of EDNS support only after the server
successfully responds to the query using plain DNS.
                        [RT #20930]
2010-04-20 07:32:51 +00:00
Mark Andrews 40b08512c4 2958. [bug] When canceling validation it was possible to leak
memory. [RT #20800]
2010-03-04 22:28:40 +00:00
Mark Andrews a3c95f281a 2957. [bug] RTT estimates were not being adjusted on ICMP errors.
[RT #20772]
2010-03-04 06:48:31 +00:00
Automatic Updater 8ce46dbe07 update copyright notice 2010-02-25 05:06:35 +00:00
Mark Andrews 8a98023414 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:05:09 +00:00
Automatic Updater ed0fd28aff update copyright notice 2010-01-07 23:48:16 +00:00
Evan Hunt cf00dcb23a 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:49:12 +00:00
Automatic Updater fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Mark Andrews a39a5f4d81 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-17 23:55:18 +00:00
Automatic Updater e34e9a8d68 update copyright notice 2009-11-17 23:48:13 +00:00
Evan Hunt 44a3999cf4 2770. [cleanup] Add log messages to resolver.c to indicate events
causing FORMERR responses. [RT #20526]
2009-11-17 02:23:15 +00:00
Mark Andrews 0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them
as referrals. [RT #18884]
2009-11-04 02:15:30 +00:00
Evan Hunt 5cb44a38d9 back out change 2740 2009-10-28 18:04:29 +00:00
Mark Andrews e9d45c0a04 2740. [func] Identify bad answers from GTLD servers and treat them
as referrals. [RT #18884]
2009-10-27 23:05:53 +00:00
Evan Hunt 95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust
anchors for a view. [RT #20211]
2009-10-27 22:46:13 +00:00
Tatuya JINMEI 神明達哉 307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9
applications.  See README.libdns. [RT #19369]
2009-09-01 00:22:28 +00:00
Mark Andrews bcd0cbfdae 2649. [bug] Set the domain for forward only zones. [RT #19944] 2009-08-13 04:33:51 +00:00
Mark Andrews 6d5852f318 2623. [bug] Named started seaches for DS non-optimally. [RT #19915] 2009-07-13 06:24:27 +00:00
Automatic Updater dc0c165ce3 update copyright notice 2009-06-02 23:47:50 +00:00
Mark Andrews 5422cf284f 2605. [bug] Accept DS responses from delegation only zones.
[RT # 19296]
2009-06-02 05:51:44 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater cc5f9fe224 update copyright notice 2009-05-11 02:38:35 +00:00
Mark Andrews 8a805c9f41 spelling 2009-05-11 02:30:07 +00:00
Mark Andrews 4c2ed3d141 2599. [bug] Address rapid memory growth when validation fails.
[RT #19654]
2009-05-11 02:22:03 +00:00
Francis Dupont ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00