2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-28 13:08:06 +00:00

521 Commits

Author SHA1 Message Date
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
2014-01-08 16:39:05 -08:00
Mark Andrews
d0e3216c21 3697. [bug] Handle "." as a search list element when IDN support
is enabled. [RT #35133]
2014-01-06 12:34:28 +11:00
Tinderbox User
e8914b47a2 update copyright notice 2014-01-05 23:46:12 +00:00
Mark Andrews
e9649ece3b 3696. [bug] dig failed to handle AXFR style IXFR responses which
span multiple messages. [RT #35137]
2014-01-06 06:22:30 +11:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
2013-12-04 12:47:23 +11:00
Evan Hunt
fb507315d4 [master] dig could miss tcp connections when cleaning up
3679.	[bug]		dig could fail to clean up TCP sockets still
			waiting on connect(). [RT #35074]
2013-12-02 13:34:23 -08:00
Evan Hunt
5255b631b1 [master] previous commit incomplete 2013-11-18 15:59:53 -08:00
Evan Hunt
2b57986603 [master] win32 portability fix 2013-11-18 15:46:24 -08:00
Tinderbox User
56474e9d28 update copyright notice 2013-11-07 23:46:18 +00:00
Mark Andrews
2048955015 3667. [func] dig: add support to keep the TCP socket open between
successive queries (+[no]keepopen).  [RT #34918]
2013-11-07 10:50:01 +11:00
Mark Andrews
938aea1dc4 address memory leak in change #3662, force format matching, attempt to address coverity false positives 2013-10-26 10:04:36 +11:00
Mark Andrews
7f0e47b3c2 %ld.%06g -> %ld.%06d 2013-10-25 12:53:24 +11:00
Tinderbox User
ecc420b283 update copyright notice 2013-10-24 23:46:20 +00:00
Mark Andrews
6100b17699 3662. [bug] 'host' could die if a UPD query timed out. [RT #34870] 2013-10-25 10:09:33 +11:00
Tinderbox User
473d3168f0 update copyright notice 2013-09-04 23:46:16 +00:00
Mark Andrews
8afea636ab 3640. [bug] ndots was not being checked when searching. Only
continue searching on NXDOMAIN responses.  Add the
                        ability to specify ndots to nslookup. [RT #34711]
2013-09-04 13:24:11 +10:00
Evan Hunt
bf0441a339 [master] fix memory leak in sigchase
3588.	[bug]		dig: addressed a memory leak in the sigchase code
			that could cause a shutdown crash.  [RT #33733]
2013-06-07 11:15:36 -07:00
Tinderbox User
543ab56b01 update copyright notice 2013-02-07 23:45:51 +00:00
JINMEI Tatuya
ab7a67829f dig +nssearch now prints name servers that don't have address records. 2013-02-07 14:14:26 -08:00
Tinderbox User
c37fbb91e3 update copyright notice 2012-10-18 23:46:07 +00:00
ckb
f3f76f009b 3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298] 2012-10-18 17:50:07 -05:00
Mark Andrews
7786d6542b 3393. [bug] 'host -C' could core dump if REFUSED was received.
[RT #31381]
2012-10-16 10:42:24 +11:00
Mark Andrews
611dc88768 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 14:20:45 +10:00
Tinderbox User
7ce7ecf6bc update copyright notice 2012-10-03 23:46:17 +00:00
Evan Hunt
41bbb34bc2 fix coverity issues
3388.	[bug]		Fixed several Coverity warnings. [RT #30996]
2012-10-02 23:44:03 -07:00
Evan Hunt
28c2bc2026 3237. [bug] dig -6 didn't work with +trace. [RT #26906] 2011-12-07 17:23:28 +00:00
Mark Andrews
553197e288 3231. [bug] named could fail to send a uncompressable zone.
[RT #26796]

3230.   [bug[           'dig axfr' failed to properly handle a multi-message
                        axfr with a serial of 0. [RT #26796]
2011-12-01 00:53:58 +00:00
Mark Andrews
411d2914ad 3226. [bug] Address minor resource leakages. [RT #26624] 2011-11-30 00:48:51 +00:00
Mark Andrews
19ae9cbb28 3208. [bug] 'dig -y' handle unknown tsig alorithm better.
[RT #25522]
2011-11-06 23:18:07 +00:00
Mark Andrews
cd56981c8a remove unused parameter from next_origin 2011-10-29 22:26:21 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:11:27 +00:00
Evan Hunt
7cc5632595 3042. [bug] dig +trace could fail attempting to use IPv6
addresses on systems with only IPv4 connectivity.
			[RT #23797]
2011-02-25 23:11:13 +00:00
Automatic Updater
b01d422daf update copyright notice 2011-02-21 23:47:45 +00:00
Mark Andrews
c12904ec53 3035. [cleanup] Simplify by using strlcpy. [RT #22521] 2011-02-21 07:34:57 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 00:54:34 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Mark Andrews
cd9d825a71 remove accidental commit 2010-11-16 05:38:31 +00:00
Mark Andrews
2bd3a6e266 strncpy + array[end] = 0 -> strlcpy 2010-11-16 00:46:00 +00:00
Mark Andrews
f083530138 2933. [bug] 'dig +nsid' used stack memory after it went out of
scope.  This could potentially result in a unknown,
                        potentially malformed, EDNS option being sent instead
                        of the desired NSID option. [RT #21781]
2010-08-10 08:39:15 +00:00
Mark Andrews
43888c2315 2922. [bug] 'dig +trace' could drop core after "connection
timeout". [RT #21514]
2010-06-24 07:22:18 +00:00
Automatic Updater
4dd3ec797d update copyright notice 2010-05-18 02:38:10 +00:00
Mark Andrews
98744b5111 2898. [bug] nslookup leaked memory when -domain=value was
specified. [RT #21301]
2010-05-18 01:48:13 +00:00
Evan Hunt
7fe4b0447f 2757. [bug] dig: assertion failure could occur in connect
timeout. [RT #20599]
2009-11-10 17:27:40 +00:00
Evan Hunt
9a050780dc 2750. [bug] dig: assertion failure could occur when a server
didn't have an address. [RT #20579]
2009-11-05 01:57:49 +00:00
Automatic Updater
4765fc7c3f update copyright notice 2009-09-15 23:48:09 +00:00
Evan Hunt
d514c0dc9b 2679. [func] dig -k can now accept TSIG keys in named.conf
format.  [RT #20031]
2009-09-15 03:13:44 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9
applications.  See README.libdns. [RT #19369]
2009-09-01 00:22:28 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
2009-07-19 04:18:05 +00:00
Mark Andrews
d8f118f4a0 2616. [bug] The nameserver argument to 'host' was being ignored.
[RT #19852]
2009-06-24 02:51:29 +00:00