Mark Andrews
2d1fd70e51
add dns_soa_buildrdata
...
(cherry picked from commit 415f8d470d
2013-08-19 08:30:52 +00:00
Mark Andrews
4a35f5a42c
9.9.4rc2
2013-08-19 11:44:53 +10:00
Tinderbox User
d1fb83012b
update copyright notice
2013-08-15 23:45:44 +00:00
Mark Andrews
e95e204520
3635. [bug] Signatures were not being removed from a zone with
...
only KSK keys for a algorithm. [RT #24439 ]
(cherry picked from commit d1e22676de
2013-08-15 13:37:47 +10:00
Mark Andrews
cbc2132d2a
3632. [bug] Signature from newly inactive keys were not being
...
removed. [RT #32178 ]
(cherry picked from commit 7ace327795
2013-08-15 11:20:18 +10:00
Evan Hunt
3c292bb534
[v9_9] change 3630 incomplete--needed to check fromtext too
...
(cherry picked from commit 5f630b9417
2013-08-14 17:24:34 -07:00
Tinderbox User
0920c92d0d
update copyright notice
2013-08-13 23:45:42 +00:00
Evan Hunt
70858bf974
[v9_9] fix md5 key id computation
...
3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033 ]
(cherry picked from commit 5d4343a998
2013-08-13 16:04:48 -07:00
Mark Andrews
dab73dfc86
3627. [bug] RPZ changes were not effective on slaves. [RT #34450 ]
...
(cherry picked from commit 333f320a62d78e79fa54e7bcc389073a109618f7)
2013-08-09 12:58:11 +10:00
Mark Andrews
42dd57732d
add comment
...
(cherry picked from commit f45818b82a
2013-07-26 10:26:06 +10:00
Mark Andrews
ea18f614fc
update
2013-07-19 10:07:24 +10:00
Mark Andrews
7a558671b6
3621. [security] Incorrect bounds checking on private type 'keydata'
...
can lead to a remotely triggerable REQUIRE failure
(CVE-2013-4854). [RT #34238 ]
(cherry picked from commit fdb4ae8f6c
2013-07-19 09:27:21 +10:00
Mark Andrews
75b9952748
9.9.4rc1
2013-07-15 15:03:21 +10:00
Mark Andrews
7991f7aeb7
remove dead code
2013-07-15 09:31:33 +10:00
Mark Andrews
9a1eaa6cfa
fix unchecked null; value not read
...
(cherry picked from commit 09fec18669
2013-07-14 00:30:16 +10:00
Evan Hunt
0bbc017b99
[v9_9] address zone->db races
...
3616. [bug] Change #3613 was incomplete. [RT #34177 ]
2013-07-11 09:53:37 -07:00
Evan Hunt
c2cb8c8fc0
[v9_9] address race conditions with removing inline zones
...
3513. [bug] named could crash when deleting inline-signing
zones with "rndc delzone". [RT #34066 ]
(cherry picked from commit 927e4c9fec
2013-07-09 17:50:43 -07:00
Tinderbox User
72cdd1b118
update copyright notice
2013-07-09 23:45:38 +00:00
Evan Hunt
a66c88dd26
[v9_9] added isc_safe_memcmp()
...
3611. [bug] Improved resistance to a theoretical authentication
attack based on differential timing. [RT #33939 ]
(cherry picked from commit 5b7abbef51
2013-07-09 12:03:18 -07:00
Evan Hunt
31ba7f4a00
[v9_9] prep 9.9.4b1
2013-07-01 10:39:45 -07:00
Tinderbox User
a120d1ed3e
update copyright notice
2013-06-19 23:45:47 +00:00
Evan Hunt
7c2f548141
[v9_9] check for physical equivalence in names
...
3599. [tuning] Check for pointer equivalence in name comparisons.
[RT #18125 ]
2013-06-18 18:15:07 -07:00
Tinderbox User
00f7494211
update copyright notice
2013-06-08 23:45:45 +00:00
Evan Hunt
6260eef2be
[v9_9] backport RRL to 9.9.x
...
This incorporates the following changes, plus a new configure
option "--enable-rrl" to turn them on:
3575. [func] Changed the logging category for RRL events from
'queries' to 'query-errors'. [RT #33540 ]
3554. [bug] RRL failed to correctly rate-limit upward
referrals and failed to count dropped error
responses in the statistics. [RT #33225 ]
3545. [bug] RRL slip behavior was incorrect when set to 1.
[RT #33111 ]
3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
so that all dns_rrl_rtype_t enum values fit regardless
of whether it is teated as signed or unsigned by
the compiler. [RT #32792 ]
3494. [func] DNS RRL: Blunt the impact of DNS reflection and
amplification attacks by rate-limiting substantially-
identical responses. To enable, use "configure
--enable-rrl". [RT #28130 ]
2013-06-07 12:47:11 -07:00
Tinderbox User
09520bf8c4
update copyright notice
2013-06-05 23:45:41 +00:00
Evan Hunt
e7582c65b1
[v9_9] assertion failure in resolver.c
...
3584. [security] Caching data from an incompletely signed zone could
trigger an assertion failure in resolver.c [RT #33690 ]
(cherry picked from commit 276457f7a3
2013-06-04 11:23:18 -07:00
Mark Andrews
1325e455bc
3583. [bug] Address memory leak in GSS-API processing [RT #33574 ]
...
(cherry picked from commit 2347c72129
2013-06-04 12:00:31 +10:00
Mark Andrews
286ef95ba5
redo: 3576. [bug] Address a shutdown race when validating. [RT #33573 ]
2013-06-04 11:26:33 +10:00
Evan Hunt
b79131b960
[v9_9] log forwarded updates
...
3566. [func] Log when forwarding updates to master. [RT #33240 ]
(cherry picked from commit 34f3693b93
2013-06-03 09:52:18 -07:00
Evan Hunt
27e5f18023
[v9_9] possible race in acache.c
...
3580. [bug] Addressed a possible race in acache.c [RT #33602 ]
(cherry picked from commit 5183f9d9da
2013-05-31 17:31:14 -07:00
Mark Andrews
0904ef3859
address memory in dns_view_getsecroots failure
...
(cherry picked from commit c611465739
2013-05-31 12:31:25 +10:00
Mark Andrews
e2a54c4408
3577. [bug] Handle zero TTL values better. [RT #33411 ]
...
(cherry picked from commit 5f238c3c64
2013-05-29 18:12:22 +10:00
Mark Andrews
91fdf4c601
3576. [bug] Address a shutdown race when validating. [RT #33573 ]
...
(cherry picked from commit 2cd3c8856c
2013-05-29 18:03:59 +10:00
Mark Andrews
e24b9972c0
3571. [bug] Address race condition in dns_client_startresolve().
...
[RT #33234 ]
2013-05-29 17:27:46 +10:00
Mark Andrews
a02fa95032
9.9.3
2013-05-17 10:26:24 +10:00
Mark Andrews
e56f27b74b
add gen.dSYM
2013-05-09 10:55:43 +10:00
Evan Hunt
d07ede4cd6
[v9_9] silence ccc-analyzer
...
3567. [bug] Silence clang static analyzer warnings. [RT #33365 ]
2013-05-03 14:35:55 -07:00
Mark Andrews
9fb5329995
add dns_message_buildopt
2013-04-30 17:38:53 +10:00
Tinderbox User
7541c0dce6
update copyright notice
2013-04-30 04:51:25 +00:00
Mark Andrews
c592204e36
9.9.3rc2
2013-04-30 14:38:17 +10:00
Mark Andrews
7366376f57
3559. [func] Check that both forms of Sender Policy Framework
...
records exist or do not exist. [RT #33355 ]
(cherry picked from commit 26bb3b7a67
2013-04-30 13:53:43 +10:00
Mark Andrews
222a755a37
3557. [bug] Reloading redirect zones was broken. [RT #33292 ]
...
(cherry picked from commit ec8a802114
2013-04-29 15:20:55 +10:00
Tinderbox User
cd6c226a47
update copyright notice
2013-04-28 23:45:37 +00:00
Evan Hunt
c99f7657bd
[v9_9] d.root-servers.net AAAA
...
3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
(cherry picked from commit 73ad83bcf0
2013-04-27 16:43:24 -07:00
Evan Hunt
62ebf6bbef
[v9_9] address two more possible acache asserts
...
3555. [bug] Address theoretical race conditions in acache.c
(change #3553 was incomplete). [RT #33252 ]
(cherry picked from commit ff5ac6d421
2013-04-25 18:03:28 -07:00
Evan Hunt
268f738ff2
[v9_9] double free caused assertion in acache
...
3553. [bug] Address suspected double free in acache. [RT #33252 ]
(cherry picked from commit 11b04b18f8ecb7c0119a7a6b6bbf8f5bad789c9a)
(cherry picked from commit 3673e8535584457ec1a79b6a30ddf4d182b0f921)
2013-04-25 10:41:23 -07:00
Tinderbox User
515586b369
update copyright notice
2013-04-11 23:45:37 +00:00
Mark Andrews
53f675154c
silence coverity warnings
...
(cherry picked from commit 45b727f651
2013-04-11 17:25:44 +10:00
Tinderbox User
c4d2f352d3
update copyright notice
2013-04-09 23:45:38 +00:00
Mark Andrews
99d0a87115
silence signed/unsigned compare warning
2013-04-09 06:31:32 +10:00
Mark Andrews
Tinderbox User
Evan Hunt