2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-28 21:17:54 +00:00

545 Commits

Author SHA1 Message Date
Mark Andrews
a56f5ada43 2157. [func] dns_db_transfernode() created. [RT #16685]
2156.   [bug]           Fix node reference leaks in lookup.c:lookup_find(),
                        resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:38:58 +00:00
Mark Andrews
2e676167cc 2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
[RT #16619]
2007-02-26 01:07:49 +00:00
Mark Andrews
10fc76d48a 2138. [bug] Lock order reversal in resolver.c. [RT #16653] 2007-02-14 23:40:01 +00:00
Mark Andrews
05c97640f6 uninitalised use 2007-02-07 04:49:18 +00:00
Mark Andrews
281bab0f36 2129. [func] Provide a pool of UDP sockets for queries to be
made over. See use-queryport-pool, queryport-pool-ports
                        and queryport-pool-updateinterval.  [RT #16415]
2007-02-02 02:18:06 +00:00
Mark Andrews
3052274767 2126. [bug] Serialise validation of type ANY responses. [RT #16555] 2007-01-08 01:13:38 +00:00
Mark Andrews
28b14c4e69 update copyright notice 2007-01-05 05:56:05 +00:00
Mark Andrews
e3f66e1617 2124. [bug] It was possible to dereference a freed fetch
context. [RT #16584]
2007-01-04 04:11:03 +00:00
Mark Andrews
1ea2595e1b 2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
which could lead to validation failures.  named didn't
                        handle negative DS responses that were in the process
                        of being validated.  Check CNAME bit before accepting
                        NODATA proof. To be able to ignore a child NSEC there
                        must be SOA (and NS) set in the bitmap. [RT #16399]
2006-12-07 06:47:36 +00:00
Mark Andrews
a473029e76 2097. [bug] named could reference a destroyed memory context
after being reloaded / reconfigured. [RT #16428]
2006-10-18 04:18:54 +00:00
Mark Andrews
f34249bb28 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:56:36 +00:00
Mark Andrews
2113dfd6e2 2079. [bug] The lame cache was not handling multiple types
correctly. [RT #16361]
2006-08-30 23:09:18 +00:00
Mark Andrews
22e5a52c3b 2075. [bug] The spillat timer event hander could leak memory.
[RT #16357]
2006-08-22 06:11:19 +00:00
Mark Andrews
84f5576c14 2058. [bug] Adjust how we calculate rtt estimates in the presence
of authoritative servers that drop EDNS and CD
                        requests.  Also fallback to EDNS/512 and plain DNS
                        faster for zones with less than 3 servers.  [RT #16187]
2006-07-22 01:18:35 +00:00
Mark Andrews
21b76ee598 2022. [bug] If dnssec validation is disabled only assert CD if
CD was requested. [RT #16037]

2021.   [bug]           dnssec-enable no; triggered a REQUIRE. [RT #16037]
2006-05-18 00:51:02 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:21:54 +00:00
Mark Andrews
7d4a465de0 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
2006-02-17 00:24:21 +00:00
Mark Andrews
fde1a334ee 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:05:46 +00:00
Mark Andrews
14c80ce1b2 1966. [bug] Don't set CD when we have fallen back to plain DNS.
[RT #15727]
2006-01-06 00:38:21 +00:00
Mark Andrews
a1bc941093 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:19:02 +00:00
Mark Andrews
08c9026166 1953. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1952.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:01:46 +00:00
Mark Andrews
2b66a51a7d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:15:55 +00:00
Mark Andrews
35da39a7f1 update copyright notice 2006-01-04 00:37:24 +00:00
Mark Andrews
1c91b0a651 1946. [bug] resume_dslookup() could trigger a REQUIRE failure
when using forwarders. [RT #15549]
2006-01-03 07:12:52 +00:00
Mark Andrews
00afe78ab2 1941. [bug] ncache_adderesult() should set eresult even if no
rdataset is passed to it. [RT #15642]
2005-11-30 22:51:58 +00:00
Mark Andrews
2674e1a455 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2005-11-30 03:33:49 +00:00
Mark Andrews
60ab03125c 1939. [bug] The resolver could dereference a null pointer after
validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
2005-11-03 00:51:55 +00:00
Mark Andrews
216030f284 1930. [port] HPUX: ia64 support. [RT #15473]
1929.   [port]          FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
2005-10-14 01:18:47 +00:00
Mark Andrews
79d2e0b253 isc_mem_put not isc_mem_putanddetach 2005-09-18 07:04:41 +00:00
Mark Andrews
5be3685b0e 1919. [bug] dig's +sigchase code overhauled. [RT #14933]
1918.   [bug]           The DLV code has been re-worked to make no longer
                        query order sensitive. [RT #14933]
2005-08-25 00:56:08 +00:00
Mark Andrews
7216566bd5 1895. [bug] fctx_create() could return success even though it
failed. [RT #14993]
2005-07-04 22:52:34 +00:00
Mark Andrews
fd780f3d47 1891. [func] Limit the number of recursive clients that can be
waiting for a single query (<qname,qtype,qclass>) to
                        resolve.  New options clients-per-query and
                        max-clients-per-query.
2005-06-27 00:15:45 +00:00
Mark Andrews
8087418873 handle isc_mem_create() failure gracefully 2005-06-23 06:12:56 +00:00
Mark Andrews
bcf369e513 1889. [func] The lame cache is now done on a <qname,qclass,qtype>
basis as some servers only appear to be lame for
                        certain query types.  [RT #14916]
2005-06-23 04:22:02 +00:00
Mark Andrews
9b80f3a7c7 1887. [func] Detect duplicates of UDP queries we are recursing on
and drop them.  New stats category "duplicates".
                        [RT #14892]
2005-06-17 01:58:23 +00:00
Mark Andrews
1c153afce5 1868. [func] edns-udp-size can now be overridden on a per
server basis. [RT #14851]
2005-06-07 00:27:34 +00:00
Mark Andrews
1fc4793844 1879. [func] Added framework for handling multiple EDNS versions.
1878.   [func]          dig can now specify the EDNS version when making
                        a query.
2005-06-07 00:16:01 +00:00
Tatuya JINMEI 神明達哉
5597be9bb8 1813. [func] Restructured the data locking framework using
architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
			x86, x86_64, alpha, and sparc64 are currently
			supported.

(RT #13505)
2005-06-04 05:32:50 +00:00
Rob Austein
ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews
8a713ca49d 1807. [bug] When forwarding (forward only) set the active domain
from the forward zone name. [RT #13526]
2005-03-16 03:50:47 +00:00
Mark Andrews
8cd830d7c8 1802. [bug] Handle connection resets better. [RT #11280] 2005-03-15 01:41:28 +00:00
Mark Andrews
c941e32d22 1819. [bug] The validator needed to check both the algorithm and
digest types of the DS to determine if it could be
                        used to introduce a secure zone. [RT #13593]
2005-03-04 03:53:22 +00:00
Mark Andrews
0ad024cc42 1806. [bug] The resolver returned the wrong result when a CNAME /
DNAME was encountered when fetching glue from a
                        secure namespace. [RT #13501]

1805.   [bug]           Pending status was not being cleared when DLV was
                        active. [RT #13501]
2005-02-08 23:51:32 +00:00
Mark Andrews
4296c5480d 1801. [func] Report differences between hints and real NS rrset
and associated address records.
2005-02-07 00:53:29 +00:00
Mark Andrews
7fed21a109 update copyright notice 2005-01-20 00:01:46 +00:00
Mark Andrews
164e2a6f83 1800. [bug] Changes #1719 allowed a INSIST to be triggered.
[RT #13428]
2005-01-19 23:25:41 +00:00
Mark Andrews
c202b9f4dd 1773. [bug] Fast retry on host / net unreachable. [RT #13153] 2004-12-03 01:59:28 +00:00
Mark Andrews
e3d982f4a8 1754. [bug] We wern't always attempting to query the parent
server for the DS records at the zone cut.
                        [RT #12774]
2004-11-10 21:57:46 +00:00
Mark Andrews
71e7ac828e 1760. [bug] Host / net unreachable was not penalising rtt
estimates. [RT #12970]
2004-11-10 21:46:48 +00:00
Mark Andrews
21094b43a2 1749. [bug] 'check-names response ignore;' failed to ignore.
[RT #12866]
2004-10-21 01:53:44 +00:00