2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-28 13:08:06 +00:00

329 Commits

Author SHA1 Message Date
Andreas Gustafsson
e3e94dd137 1118. [bug] On multithreaded servers, a race condition
could cause an assertion failure in resolver.c
                        during resolver shutdown. [RT #2029]
2001-11-12 18:48:50 +00:00
Andreas Gustafsson
0902c53969 typo in debug message [RT #1989] 2001-11-04 19:20:39 +00:00
Andreas Gustafsson
b352902413 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2001-10-29 19:02:48 +00:00
Mark Andrews
13f2c161db 1039. [bug] We cached an incorrect negative response if there were
CNAMES in the answer section.  [RT#1862]
2001-10-10 04:11:32 +00:00
Mark Andrews
3fc4c1434d 1037. [bug] We failed to reject some self inconsistant answers.
[RT #1862]
2001-10-09 08:03:32 +00:00
Mark Andrews
b09f4e054c 1025. [bug] Don't use multicast addresses to resolve iterative
queries.  [RT #101]
2001-10-03 07:43:03 +00:00
Mark Andrews
595a14576e 1013. [bug] It was possible to cancel a query twice when marking
a server as bogus or by having a blackhole acl.
                        [RT #1776]
2001-09-21 13:31:55 +00:00
Andreas Gustafsson
67298a4b2f "data" is plural 2001-09-17 20:24:13 +00:00
Andreas Gustafsson
4a20a92f4f replaced 994. with alternative fix:
994.   [func]          Treat non-authoritative responses to queries for type
                        NS as referrals even if the NS records are in the
                        answer section, because BIND 8 servers incorrectly
                        send them that way.  This is necessary for DNSSEC
                        validation of the NS records of a secure zone to
                        succeed when the parent is a BIND 8 server. [RT #1706]
2001-09-14 21:04:35 +00:00
Andreas Gustafsson
34aa790937 reverted 994. 2001-09-14 20:53:33 +00:00
Mark Andrews
56d69016f4 994. [bug] If the unsecure proof fails for unsigned NS records
attempt a secure proof using the NS records found as
                        glue to find the NS records from the zone's servers
                        along with associated glue rather than from parent
                        servers.  [RT #1706]
2001-09-13 07:23:39 +00:00
Bob Halley
c54210716e avoid deadlock with the ADB when shutting down [RT #1324] 2001-07-11 01:19:56 +00:00
David Lawrence
92ef1a9b9d use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land 2001-06-04 19:33:39 +00:00
Brian Wellington
a78196366c move variable initialization 2001-05-29 23:07:28 +00:00
Brian Wellington
c20ffa38de 808. [func] Add 'rndc flush' to flush the server's cache. 2001-04-11 20:37:50 +00:00
Brian Wellington
6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson
b879ed05f4 785. [bug] A race condition in the resolver could cause
an assertion failure. [RT #673, #872, #1048]
2001-03-20 22:13:00 +00:00
Brian Wellington
0d19c777ae Use a counter instead of a flag to indicate if the resolver is in the
process of connecting.  There's a possibility that a connect might not
have sent a completion event when another one starts, and this could cause
bad things to happen since the query would only know about one connect.
2001-03-16 21:50:59 +00:00
Brian Wellington
2048bb8c0c dns_message_parse() cannot return DNS_R_MOREDATA. 2001-03-15 02:00:15 +00:00
Mark Andrews
b01cd0d5c7 Use dns_dispatch_getlocaladdress() to retrieve the local address to bind too. 2001-03-13 05:49:58 +00:00
Andreas Gustafsson
fc04bb9d98 lame server on ... -> lame server resolving ... [RT #641] 2001-03-07 18:03:07 +00:00
Brian Wellington
d25dd5b056 770. [func] Add the "edns yes_or_no" statement to the server
clause. [RT #524]
2001-03-06 23:54:37 +00:00
Brian Wellington
e43b9a2005 move compression context create/delete into the caller of the message
rendering functions.  This reduces the size of the message object.
2001-03-05 21:15:47 +00:00
Brian Wellington
a0b4d6cf8a comment style 2001-02-28 21:19:53 +00:00
Andreas Gustafsson
d1cc210d20 RT #927 fix from Bob:
759.   [bug]           The resolver didn't turn off "avoid fetches" mode
                        when restarting, possibly causing resolution
                        to fail when it should not.  This bug only affected
                        platforms which support both IPv4 and IPv6. [RT #927]

 758.   [bug]           The "avoid fetches" code did not treat negative
                        cache entries correctly, causing fetches that would
                        be useful to be avoided.  This bug only affected
                        platforms which support both IPv4 and IPv6. [RT #927]
2001-02-28 20:51:22 +00:00
Brian Wellington
36608f2052 When returning from validation, make sure to handle chaiing correctly. 2001-02-21 05:16:44 +00:00
Bob Halley
1e50dad10d When returning DNS_R_CNAME or DNS_R_DNAME as the result of an ANY or SIG
query, the resolver failed to setup the return event's rdatasets, causing an
assertion failure in the query code.  [RT #881]

The fix includes the addition of the DNS_NAMEATTR_CHAINING attribute,
and the removal of the DNS_NAMEATTR_CNAME and DNS_NAMEATTR_DNAME attributes,
because they were not used anywhere in the current source.
2001-02-19 08:54:54 +00:00
Brian Wellington
3f07549972 comment fix 2001-02-18 21:19:43 +00:00
Andreas Gustafsson
19eee89387 if dns_message_gettempname() failed, we would try to call
dns_message_putemprdataset() on an uninitialized pointer
2001-02-17 02:16:14 +00:00
Andreas Gustafsson
97f26b88f6 removed more needless attaching and detaching of the blackhole ACL 2001-02-09 00:23:16 +00:00
Andreas Gustafsson
a349fd680c removed all code for maintaining a 'goodness' value in the adb,
since it was never used and Michael thinks 'it should probably be removed'.
2001-02-09 00:13:55 +00:00
Bob Halley
22457624d3 deal with 0 TTL glue 2001-02-08 19:14:58 +00:00
Bob Halley
d6b3d06db7 Referrals whose NS RRs had a 0 TTL caused the resolver to return
DNS_R_SERVFAIL.  [RT #783]
2001-02-02 00:10:26 +00:00
Brian Wellington
6e8b041d9c blackholed addresses were mishandled in the resolver. 2001-01-19 22:22:17 +00:00
Andreas Gustafsson
ff7f1dc039 676. [bug] Log messages about lame servers to category
'lame-servers' rather than 'resolver', so as not
                        to be gratuitously incompatible with BIND 8.
2001-01-11 19:38:11 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Bob Halley
75768d5fa2 It was possible to join to an already running fctx
after it had "cloned" its events, but before it sent
them.  In this case, the event of the newly joined
fetch would not contain the answer, and would
trigger the INSIST() in fctx_sendevents().
[RT #597, #605, #607]
2001-01-03 20:31:34 +00:00
Brian Wellington
6d5032f9a2 Micro-optimizations:
- use the DNS_NAME_INIT macro in name.c
	- create dns_name_copy() and use it instead of dns_name_concatenate()
	  when doing a copy.
2001-01-03 00:05:15 +00:00
Andreas Gustafsson
22dbaf9ad8 647. [bug] Resolver queries sent after following multiple
referrals had excessively long retransmission
                        timeouts due to incorrectly counting the referrals
                        as "restarts".
2001-01-02 20:46:07 +00:00
Andreas Gustafsson
21931e9334 cleanup of logging code 2001-01-02 18:51:07 +00:00
Andreas Gustafsson
6af9849f74 log message about disabling EDNS0 only once per lookup 2001-01-02 17:59:13 +00:00
Brian Wellington
65a275fb3d The resolver doesn't need to manually dissect a TSIG and look at the error
field, since dns_message_checksig returns an error in that case.
2000-12-29 23:24:32 +00:00
Andreas Gustafsson
7d33e89969 627. [bug] The EDNS0 blackhole detection code of 327. waited
for three retransmissions to each server, which
                        takes much too long when a domain has many name
                        and all of them drop EDNS0 queries.  Now we retry
                        without EDNS0 after three consecutive timeouts,
                        even if they are all from different servers.
2000-12-20 23:18:37 +00:00
Brian Wellington
78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
Mark Andrews
6fda157766 ISC_LINK_*UNSAFE -> ISC_LINK_INITAND* 2000-12-07 20:15:58 +00:00
Bob Halley
59e1a928bc do not INSIST when restarting with returnlame 2000-11-27 19:56:16 +00:00
Brian Wellington
ef6a36d944 tsig signed queries by the resolver both didn't always work and leaked memory. 2000-11-22 23:16:04 +00:00
Mark Andrews
3fdad8e3bb adjust is_lame test for same level. 2000-11-15 04:53:06 +00:00
Brian Wellington
78d78f05d9 556. [func] The DNSSEC OK bit in the EDNS extended flags
is now implemented.  Responses to queries without
                        this bit set will not contain any DNSSEC records.
2000-11-13 21:34:03 +00:00
Andreas Gustafsson
ae7e8784aa log messages should not be capitalized 2000-11-11 02:14:50 +00:00