mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 05:57:52 +00:00
Code Issues Releases Wiki Activity
16,778 Commits 657 Branches 820 Tags
Commit Graph

292 Commits

Author SHA1 Message Date
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into 
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
 2004-01-14 02:06:51 +00:00
Mark Andrews
61fb42c4ef 1555. [func] 'rrset-order cyclic' now longer has a random starting 
point. [RT #7572]
 2004-01-12 04:19:42 +00:00
Mark Andrews
fedd92b14f want free should be initaliased to ISC_FALSE. 2003-10-17 05:31:05 +00:00
Mark Andrews
b657d7db3b 1523. [bug] Fix race condition in rbtdb. [RT# 9189] 2003-10-08 00:24:28 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews
163547c0c0 1461. [bug] Remove deadlock from rbtdb code. [RT #5999] 2003-04-17 01:56:35 +00:00
Mark Andrews
8b5de97014 1448. [bug] Handle empty wildcards labels. 
developer: marka
reviewer: explorer
 2003-02-27 00:19:04 +00:00
Mark Andrews
80b782f356 1447. [bug] We were casting (unsigned int) to and from (void *). 
rdataset->private4 is now rdataset->privateuint4
                        to reflect a type change.
developer: marka
reviewer: explorer
 2003-02-26 23:52:30 +00:00
Mark Andrews
421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN. 
[RT #4715]
developer: marka
reviewer: explorer
 2003-01-18 03:18:31 +00:00
Mark Andrews
5f89a1ee9e 1411. [bug] empty nodes should stop wildcard matches. [RT #4802] 
developer: marka
reviewer: explorer
 2003-01-14 00:38:07 +00:00
Mark Andrews
876da2a83d Check that the NS/AAAA/A RRsets have not expired seeing if they don't need to 
be replaced.
 2002-12-16 12:47:39 +00:00
Michael Graff
6434457b0b merge 4090 2002-11-12 23:24:45 +00:00
Tatuya JINMEI 神明達哉
1e850a433a in dbiterator_destroy(), gained a reference to db before using an mctx 
associated with the db, in case that we had the last reference.
[RT #3588]
 2002-10-10 13:50:02 +00:00
Mark Andrews
a29ef27b39 When a lookup resulted in an nxrrset match of a wildcard, the wildcard 
attribute wasn't set on foundname.
Move "else" body to mainline, "if" body end in unconditional goto.
 2002-09-10 13:35:54 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
da091cda77 1207. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding 
a rdataset to a zone db in the rbtdb implementation of
                        addrdataset.
 2002-05-28 05:49:20 +00:00
Brian Wellington
708f3fd049 Added the DNS_DBFIND_FORCENXT flag to dns_db_find, which causes the lookup 
to search for NXT records, even if the zone is not marked as secure.
 2001-12-08 00:37:07 +00:00
Andreas Gustafsson
db40c6bfdf don't unlock the node lock in no_references() [RT #2018] 2001-11-16 00:17:07 +00:00
Andreas Gustafsson
f3ca27e9fe sizeof style 2001-11-12 19:05:39 +00:00
Andreas Gustafsson
6b07de6abf document the rdatasetheader next and down pointers 2001-10-27 00:27:54 +00:00
Brian Wellington
06289aeea8 comment fix 2001-10-25 21:39:48 +00:00
Mark Andrews
2bb3d8bdfe Make casting easier in symbolic debuggers by using different names 
for the 64 bit version.
 2001-09-18 14:30:10 +00:00
Mark Andrews
440906ce59 INSIST that the rdataset is unassociated. 2001-08-27 03:58:44 +00:00
David Lawrence
163e27991b Revert part of the ISC_MAGIC/ISC_MAGIC_VALID change. Because 
common.impmagic is not the first four bytes of the struct,
ISC_MAGIC_VALID() cannot be used.
 2001-06-04 20:57:25 +00:00
David Lawrence
92ef1a9b9d use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land 2001-06-04 19:33:39 +00:00
Bob Halley
4e9d4ceadf Take two of new semantics for ANY queries at zone cut points. Now doing 
an ANY query at a zone cut point will return a delegation, except if
DNS_DBFIND_GLUEOK is set, in which case DNS_R_ZONECUT will be returned as
before.  Someday it would probably be a good idea to get rid of DNS_R_ZONECUT
entirely and just return DNS_R_GLUE in that case, but I was afraid to do
that now since it might break things.  These changes pass all system tests.
 2001-05-15 05:35:27 +00:00
Andreas Gustafsson
0d205b805a backed out changes to handling of DNS_DBFIND_VALIDATEGLUE 
option in previous commit - they broke DNS_DBFIND_GLUEOK lookups,
causing several of the system tests to fail
 2001-05-15 03:52:31 +00:00
Bob Halley
751aa24c98 only return DNS_R_ZONECUT from secure zones 2001-05-14 19:25:59 +00:00
Andreas Gustafsson
17ed6b7945 when subtracting a nonempty rdataset from a nonexistent rdataset 
and the DNS_DBSUB_EXACT flag, dns_db_subtractrdataset() should return
DNS_R_NOTEXACT, not DNS_R_UNCHANGED.
 2001-05-10 16:26:07 +00:00
David Lawrence
e40cd7f5c9 preserve a reference to the node lock across a call to no_references() in 
detachnode
 2001-05-05 02:42:38 +00:00
Bob Halley
38d21a360a only reacquire the lock in no_references() if we actually gave it up 2001-04-24 17:03:54 +00:00
David Lawrence
ed1c40264e sigh. do not set the lock from node->locknum until being sure node is not null 2001-04-20 21:22:09 +00:00
David Lawrence
a0e1f68e14 Now that no_references() reacquires the node lock after deleting the node, 
all of its callers need to maintain a reference to the lock that doesn't
involve looking at node->locknum after no_references() was called.
 2001-04-20 14:35:04 +00:00
David Lawrence
f6f8d61a77 reacquire the node lock the caller held before returning from no_references() 2001-04-18 08:06:11 +00:00
David Lawrence
0109515495 use ISC_TF() to set an isc_boolean_t 2001-04-12 22:58:34 +00:00
David Lawrence
383b800c62 Fixed up iteration problems related to name cleaning. In a nutshell, 
the node at the end of a chain always needed to have its reference
count incremented, not only when the iterator was paused.  [RT #1007]
 2001-04-11 22:17:38 +00:00
Brian Wellington
414d289686 oops, cut-and-paste-o 2001-03-30 00:34:52 +00:00
Brian Wellington
e0bab4386b Treat a zone as secure only if it has a zone key and a signed NXT at the apex. 2001-03-30 00:33:39 +00:00
Andreas Gustafsson
b52a5b0630 790. [bug] Wildcards created using dynamic update or IXFR 
could fail to match. [RT #1111]
 2001-03-27 00:06:34 +00:00
David Lawrence
2283923028 a last minute edit added one too many conditions for putting a node on the 
deletions list
 2001-03-08 03:31:29 +00:00
David Lawrence
85e80b5b69 Remove name/node from the rbtdb in no_references(). 
Iterator uses 'cleaning' flag to expire nodes.
 2001-03-08 01:35:27 +00:00
Bob Halley
c274e542ad The fixes to return the SIG of a DNAME RR missed one place where 
search.zonecut was set, and consequently we were accessing
search.zonecut_sigrdataset without initializing it.
 2001-02-23 05:33:36 +00:00
Bob Halley
f4b5a0f434 When a query matched a DNAME in a secure zone, the server did not return the 
signature of the DNAME.  [RT #915]

A query should not match a DNAME whose trust level is pending.  [RT #916]
 2001-02-23 02:14:14 +00:00
Brian Wellington
65bc8f2af8 When assigning a bucket lock to an rbt node, use the hash of the full name, 
rather than the hash of the partial name stored in the node.  This more
evenly distributes nodes across locks.

This change only takes effect when DNS_RBT_USEHASH is defined, and also changes
the rbt so that the hashtable is created when the first node is created in the
tree, not after 64 nodes are added.
 2001-02-09 01:26:51 +00:00
Brian Wellington
63ca494e7e Added the isc_refcount_t type, which is a generic locked reference counter, 
and make the rbtdb, zone, and view objects use it.
This should reduce contention on other locks, since (in the normal)
implementation, the reference count has its own lock.  In the future, it
should also be possible to implement an isc_refcount_t with atomic operations
instead of mutexes, which should also help performance.
 2001-01-30 02:50:51 +00:00
Bob Halley
40fdf87153 Deal with TTL 0 ANY and SIG queries. 2001-01-24 02:40:19 +00:00
Brian Wellington
18d110413c Move dns_dnssec_iszonekey to dns_zonekey_iszonekey, to make the rbtdb not 
require all of dst to be linked in.
 2001-01-17 01:22:20 +00:00
Andreas Gustafsson
d94b209b95 added another INSIST() to dns_dbiterator_pause() as suggested by Bob 2001-01-12 20:11:28 +00:00