2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

994 Commits

Author SHA1 Message Date
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
c8aa2c8311 1204. [bug] The RTT estimate on unused servers was not aged.
[RT #2569]
2002-05-27 06:30:25 +00:00
Mark Andrews
d6fbfd28ea 1243. [bug] It was possible to trigger a REQUIRE() in
dns_message_findtype(). [RT #2659]
2002-04-03 02:44:57 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Mark Andrews
3023a2fb9d Don't mark a server as not supporting a EDNS on SERVFAIL. There are too
many other potential causes.
2002-02-19 06:16:36 +00:00
Mark Andrews
c26c65b7a0 1206. [bug] SERVFAIL and NOTIMP responses to a EDNS should trigger
a non-EDNS retry.
2002-02-19 00:48:21 +00:00
Brian Wellington
db462c020e spacing 2002-02-05 19:44:55 +00:00
Brian Wellington
ecb55f9962 The code for parsing non-answer messages could get confused if it saw a SIG NS
before an NS.
2002-02-05 01:15:21 +00:00
Mark Andrews
e1c2a8b9c1 1178. [func] Follow and cache (if appropriate) A6 and other
data chains to completion in the additional section.
2002-01-17 00:16:30 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Andreas Gustafsson
cab27680d6 change 1077. introduced a locking hierarchy violation; fix by
introducing a separate lock for resolver->nfctx.
2001-11-14 22:05:05 +00:00
Andreas Gustafsson
2869504d83 1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
[RT #2046]
2001-11-14 01:31:12 +00:00
Andreas Gustafsson
138cc7f283 1121. [bug] The server could attempt to access a NULL zone
table if shutting down while resolving.
                        [RT #1587, #2054]
2001-11-14 01:01:28 +00:00
Andreas Gustafsson
f3ca27e9fe sizeof style 2001-11-12 19:05:39 +00:00
Andreas Gustafsson
e3e94dd137 1118. [bug] On multithreaded servers, a race condition
could cause an assertion failure in resolver.c
                        during resolver shutdown. [RT #2029]
2001-11-12 18:48:50 +00:00
Andreas Gustafsson
0902c53969 typo in debug message [RT #1989] 2001-11-04 19:20:39 +00:00
Andreas Gustafsson
b352902413 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2001-10-29 19:02:48 +00:00
Mark Andrews
13f2c161db 1039. [bug] We cached an incorrect negative response if there were
CNAMES in the answer section.  [RT#1862]
2001-10-10 04:11:32 +00:00
Mark Andrews
3fc4c1434d 1037. [bug] We failed to reject some self inconsistant answers.
[RT #1862]
2001-10-09 08:03:32 +00:00
Mark Andrews
b09f4e054c 1025. [bug] Don't use multicast addresses to resolve iterative
queries.  [RT #101]
2001-10-03 07:43:03 +00:00
Mark Andrews
595a14576e 1013. [bug] It was possible to cancel a query twice when marking
a server as bogus or by having a blackhole acl.
                        [RT #1776]
2001-09-21 13:31:55 +00:00
Andreas Gustafsson
67298a4b2f "data" is plural 2001-09-17 20:24:13 +00:00
Andreas Gustafsson
4a20a92f4f replaced 994. with alternative fix:
994.   [func]          Treat non-authoritative responses to queries for type
                        NS as referrals even if the NS records are in the
                        answer section, because BIND 8 servers incorrectly
                        send them that way.  This is necessary for DNSSEC
                        validation of the NS records of a secure zone to
                        succeed when the parent is a BIND 8 server. [RT #1706]
2001-09-14 21:04:35 +00:00
Andreas Gustafsson
34aa790937 reverted 994. 2001-09-14 20:53:33 +00:00
Mark Andrews
56d69016f4 994. [bug] If the unsecure proof fails for unsigned NS records
attempt a secure proof using the NS records found as
                        glue to find the NS records from the zone's servers
                        along with associated glue rather than from parent
                        servers.  [RT #1706]
2001-09-13 07:23:39 +00:00
Bob Halley
c54210716e avoid deadlock with the ADB when shutting down [RT #1324] 2001-07-11 01:19:56 +00:00
David Lawrence
92ef1a9b9d use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land 2001-06-04 19:33:39 +00:00
Brian Wellington
a78196366c move variable initialization 2001-05-29 23:07:28 +00:00
Brian Wellington
c20ffa38de 808. [func] Add 'rndc flush' to flush the server's cache. 2001-04-11 20:37:50 +00:00
Brian Wellington
6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson
b879ed05f4 785. [bug] A race condition in the resolver could cause
an assertion failure. [RT #673, #872, #1048]
2001-03-20 22:13:00 +00:00
Brian Wellington
0d19c777ae Use a counter instead of a flag to indicate if the resolver is in the
process of connecting.  There's a possibility that a connect might not
have sent a completion event when another one starts, and this could cause
bad things to happen since the query would only know about one connect.
2001-03-16 21:50:59 +00:00
Brian Wellington
2048bb8c0c dns_message_parse() cannot return DNS_R_MOREDATA. 2001-03-15 02:00:15 +00:00
Mark Andrews
b01cd0d5c7 Use dns_dispatch_getlocaladdress() to retrieve the local address to bind too. 2001-03-13 05:49:58 +00:00
Andreas Gustafsson
fc04bb9d98 lame server on ... -> lame server resolving ... [RT #641] 2001-03-07 18:03:07 +00:00
Brian Wellington
d25dd5b056 770. [func] Add the "edns yes_or_no" statement to the server
clause. [RT #524]
2001-03-06 23:54:37 +00:00
Brian Wellington
e43b9a2005 move compression context create/delete into the caller of the message
rendering functions.  This reduces the size of the message object.
2001-03-05 21:15:47 +00:00
Brian Wellington
a0b4d6cf8a comment style 2001-02-28 21:19:53 +00:00
Andreas Gustafsson
d1cc210d20 RT #927 fix from Bob:
759.   [bug]           The resolver didn't turn off "avoid fetches" mode
                        when restarting, possibly causing resolution
                        to fail when it should not.  This bug only affected
                        platforms which support both IPv4 and IPv6. [RT #927]

 758.   [bug]           The "avoid fetches" code did not treat negative
                        cache entries correctly, causing fetches that would
                        be useful to be avoided.  This bug only affected
                        platforms which support both IPv4 and IPv6. [RT #927]
2001-02-28 20:51:22 +00:00
Brian Wellington
36608f2052 When returning from validation, make sure to handle chaiing correctly. 2001-02-21 05:16:44 +00:00
Bob Halley
1e50dad10d When returning DNS_R_CNAME or DNS_R_DNAME as the result of an ANY or SIG
query, the resolver failed to setup the return event's rdatasets, causing an
assertion failure in the query code.  [RT #881]

The fix includes the addition of the DNS_NAMEATTR_CHAINING attribute,
and the removal of the DNS_NAMEATTR_CNAME and DNS_NAMEATTR_DNAME attributes,
because they were not used anywhere in the current source.
2001-02-19 08:54:54 +00:00
Brian Wellington
3f07549972 comment fix 2001-02-18 21:19:43 +00:00
Andreas Gustafsson
19eee89387 if dns_message_gettempname() failed, we would try to call
dns_message_putemprdataset() on an uninitialized pointer
2001-02-17 02:16:14 +00:00
Andreas Gustafsson
97f26b88f6 removed more needless attaching and detaching of the blackhole ACL 2001-02-09 00:23:16 +00:00
Andreas Gustafsson
a349fd680c removed all code for maintaining a 'goodness' value in the adb,
since it was never used and Michael thinks 'it should probably be removed'.
2001-02-09 00:13:55 +00:00
Bob Halley
22457624d3 deal with 0 TTL glue 2001-02-08 19:14:58 +00:00
Bob Halley
d6b3d06db7 Referrals whose NS RRs had a 0 TTL caused the resolver to return
DNS_R_SERVFAIL.  [RT #783]
2001-02-02 00:10:26 +00:00
Brian Wellington
6e8b041d9c blackholed addresses were mishandled in the resolver. 2001-01-19 22:22:17 +00:00
Andreas Gustafsson
ff7f1dc039 676. [bug] Log messages about lame servers to category
'lame-servers' rather than 'resolver', so as not
                        to be gratuitously incompatible with BIND 8.
2001-01-11 19:38:11 +00:00