Mark Andrews
c22b540e4c
restore setting header->heap_index to zero in setsigningtime
2017-11-28 06:46:33 +11:00
Mark Andrews
19f6a63184
More:
...
4819. [bug] Fully backout the transaction when adding a RRset
to the resigning / removal heaps fails. [RT #46473 ]
2017-11-27 15:15:41 +11:00
Mark Andrews
6ead410268
in rdbdb.c:setsigningtime stop breaking heap invariant property unless we are going to restore the invariant property
2017-11-24 08:47:52 +11:00
Mark Andrews
78e1d7cdde
style
2017-11-23 16:09:27 +11:00
Tinderbox User
445cabb392
update copyright notice / whitespace
2017-11-17 23:45:28 +00:00
Mark Andrews
a197094d76
remove out of date comment
2017-11-18 08:50:58 +11:00
Mark Andrews
656eed7c9b
4821. [bug] When resigning ensure that the SOA's expire time is
...
always later that the resigning time of other records.
[RT #46473 ]
4820. [bug] dns_db_subtractrdataset should transfer the resigning
information to the new header. [RT #46473 ]
4819. [bug] Fully backout the transaction when adding a RRset
to the resigning / removal heaps fail. [RT #46473 ]
2017-11-18 07:11:12 +11:00
Mark Andrews
c341e524dc
address resource leak [RT #46413 ]
2017-10-27 09:58:55 +11:00
Evan Hunt
5b69d3da83
[master] check file and tree headers when loading map files
...
4792. [bug] Fix map file header correctness check. [RT #38418 ]
2017-10-25 21:37:00 -07:00
Evan Hunt
7baa39fc96
[master] it's okay if dns_db_setgluecachestats() returns ISC_R_NOTIMPLEMENTED
2017-10-06 12:52:21 -07:00
Mukund Sivaraman
a0c408c90d
Add statistics for glue cache usage ( #46028 )
2017-10-06 15:44:37 +05:30
Mark Andrews
c85b467dc0
4747. [func] Synthesis of responses from DNSSEC-verified records.
...
Stage 3 - synthesize NODATA responses. [RT #40138 ]
2017-10-03 11:16:37 +11:00
Mark Andrews
f9f3f20d2d
4739. [cleanup] Address clang static analysis warnings. [RT #45952 ]
2017-09-27 10:27:09 +10:00
Michał Kępień
f665c724e4
[master] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
...
4727. [bug] Retransferring an inline-signed slave using NSEC3
around the time its NSEC3 salt was changed could result
in an infinite signing loop. [RT #45080 ]
2017-09-18 09:18:45 +02:00
Evan Hunt
114f95089c
[master] cleanup strcat/strcpy
...
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981 ]
2017-09-13 00:14:37 -07:00
Mark Andrews
e01d88e885
don't disturb search->chain when calling find_coveringnsec
2017-09-08 06:48:41 +10:00
Tinderbox User
40780aa36f
update copyright notice / whitespace
2017-09-06 23:46:23 +00:00
Mark Andrews
09ccb70e11
add missing defines
2017-09-06 11:17:46 +10:00
Mark Andrews
df50751585
4700. [func] Serving of stale answers is now supported. This
...
allows named to provide stale cached answers when
the authoritative server is under attack.
See max-stale-ttl, stale-answer-enable,
stale-answer-ttl. [RT #44790 ]
2017-09-06 09:58:29 +10:00
Mark Andrews
0aed466565
4693. [func] Synthesis of responses from DNSSEC-verified records.
...
Stage 1 covers NXDOMAIN synthesis from NSEC records.
This is controlled by synth-from-dnssec and is enabled
by default. [RT #40138 ]
2017-08-31 07:57:50 +10:00
Evan Hunt
e924155211
[master] Maintain ZEROTTL cache entries at the tail of the LRU lists
...
4662. [performance] Improve cache memory cleanup of zero TTL records
by putting them at the tail of LRU header lists.
[RT #45274 ]
2017-07-28 00:13:05 -07:00
Mark Andrews
4bf32aa587
4654. [cleanup] Don't use C++ keywords delete, new and namespace.
...
[RT #45538 ]
2017-07-21 11:52:24 +10:00
Evan Hunt
9612549071
[master] change index to idx to avoid shadowed-variable warning
2017-05-04 09:34:10 -07:00
Evan Hunt
4c97cb13bd
[master] fix win32 build errors
2017-05-02 10:58:41 -07:00
Mark Andrews
2e65a1905b
add mark_stale_header and rbtdb_zero_header defines
2017-04-27 12:47:08 +10:00
Evan Hunt
5490188e22
[master] add allocate_version64 definition
2017-04-22 23:16:23 -07:00
Tinderbox User
1f6505a424
update copyright notice / whitespace
2017-04-22 23:45:41 +00:00
Mukund Sivaraman
03be5a6b4e
Improve performance for delegation heavy answers and also general query performance ( #44029 )
2017-04-22 09:22:44 +05:30
Mukund Sivaraman
4176d278e2
Fix inconsistencies in inline signing time comparisons ( #42112 )
2017-04-21 16:43:58 +05:30
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Tinderbox User
a9e8198788
update copyright notice / whitespace
2017-01-12 23:45:41 +00:00
Mark Andrews
d2e1b47d4f
4553. [bug] Named could deadlock there were multiple changes to
...
NSEC/NSEC3 parameters for a zone being processed at
the same time. [RT #42770 ]
2017-01-12 14:25:45 +11:00
Tinderbox User
ed07d7a8f5
update copyright notice / whitespace
2016-12-30 23:46:36 +00:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Tinderbox User
e37bc34b31
update copyright notice / whitespace
2016-11-02 23:46:39 +00:00
Mark Andrews
5f8412a4cb
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
2016-11-02 17:31:27 +11:00
Evan Hunt
46e7763d19
[master] check for STALE rdatasets in cache search
...
4446. [bug] The cache_find() and _findrdataset() functions
could find rdatasets that had been marked stale.
[RT #42853 ]
2016-08-17 11:44:24 -07:00
Mark Andrews
c7e021e2e6
4439. [bug] Address race conditions getting ownernames of nodes.
...
[RT #43005 ]
2016-08-12 14:08:48 +10:00
Mukund Sivaraman
e65cd99461
Some general cleanup ( #42827 )
2016-07-13 14:15:22 +05:30
Mark Andrews
d811a7d9ef
4405. [bug] Change 4342 introduced a regression where you could
...
not remove a delegation in a NSEC3 signed zone using
OPTOUT via nsupdate. [RT #42702 ]
2016-07-06 10:13:15 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
b56bd9b59f
4387. [bug] Change 4336 was not complete leading to SERVFAIL
...
being return as NS records expired. [RT #42683 ]
2016-06-22 15:26:38 +10:00
Francis Dupont
affa9c9825
Fixed WIN32 (VS 2010 32 bits) compiling problems
2016-05-30 17:10:08 +02:00
Tinderbox User
262bebd081
update copyright notice / whitespace
2016-05-27 23:45:23 +00:00
Mark Andrews
9268297baa
4379. [bug] An INSIST could be triggered if a zone contains
...
RRSIG records with expiry fields that loop
using serial number arithmetic. [RT #40571 ]
2016-05-27 15:24:30 +10:00
Witold Krecicki
7a00d69909
4376. [experimental] Added support for Catalog Zones, a new method for
...
provisioning secondary servers in which a list of
zones to be served is stored in a DNS zone and can
be propagated to slaves via AXFR/IXFR. [RT #41581 ]
4375. [func] Add support for automatic reallocation of isc_buffer
to isc_buffer_put* functions. [RT #42394 ]
2016-05-26 21:23:19 +02:00
Mark Andrews
6214c3c93a
4341. [bug] 'rndc flushtree' could fail to clean the tree if there
...
wasn't a node at the specified name. [RT #41846 ]
2016-03-24 11:31:25 +11:00
Mark Andrews
558278974e
4338. [bug] Reimplement change 4324 as it wasn't properly doing
...
all the required book keeping. [RT #41941 ]
2016-03-23 10:38:05 +11:00
Mark Andrews
0993cd5f22
4336. [bug] Don't emit records with zero ttl unless the records
...
were learnt with a zero ttl. [RT #41687 ]
2016-03-21 13:22:21 +11:00
Mukund Sivaraman
080b51f164
Revert DEFAULT_NODE_LOCK_COUNT back to 7 ( #40997 )
2016-03-04 16:28:22 +05:30