upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-16 23:52:40 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
26645 commits 18 branches 854 tags 440 MiB
Commit graph

3119 commits

Author SHA1 Message Date
Witold Krecicki
57651e2c85 [master] fixed bug in isc_ht_iter_next 2016-05-27 19:57:27 +02:00
Evan Hunt
531074d11a [master] fixed some test failures 2016-05-26 21:29:54 -07:00
Evan Hunt
6c2a76b3e2 [master] copyrights, win32 definitions 2016-05-26 12:36:17 -07:00
Witold Krecicki
7a00d69909 4376. [experimental] Added support for Catalog Zones, a new method for 
provisioning secondary servers in which a list of
                        zones to be served is stored in a DNS zone and can
                        be propagated to slaves via AXFR/IXFR. [RT #41581]

4375.   [func]          Add support for automatic reallocation of isc_buffer
                        to isc_buffer_put* functions. [RT #42394]
 2016-05-26 21:23:19 +02:00
Mark Andrews
4ba89a0cfb 9.11.0a2 2016-05-17 13:33:55 +10:00
Tinderbox User
f89adb2c2a update copyright notice / whitespace 2016-05-05 23:45:48 +00:00
Evan Hunt
28053af04c [master] nanosecond-accurate file modification times 
4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]
 2016-05-05 12:22:26 -07:00
Mark Andrews
374dacca76 add isc_httpd_setfinishhook 2016-05-05 20:51:44 +10:00
Witold Krecicki
19d80ce584 4358. [test] Added American Fuzzy Lop harness that allows 
feeding fuzzed packets into BIND.
			[RT #41723]
 2016-05-05 11:49:38 +02:00
Evan Hunt
699f790c49 [master] update pkcs11 headers 
4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]
 2016-05-04 15:55:03 -07:00
Tinderbox User
adb31d0b10 update copyright notice / whitespace 2016-04-15 04:53:03 +00:00
Evan Hunt
91499fdb48 [master] fix build error on x86_64 solaris 2016-04-14 19:23:23 -07:00
Tinderbox User
c19f42a378 update copyright notice / whitespace 2016-03-24 23:45:21 +00:00
Evan Hunt
cb05fb63be [master] windows: copy missing HTML man pages into zips 2016-03-24 12:26:40 -07:00
Mark Andrews
f442a31fb3 add meminfo.h to list of header files to install 2016-03-24 15:12:14 +11:00
Tinderbox User
a63461cc4b update copyright notice / whitespace 2016-03-23 23:45:22 +00:00
Evan Hunt
bca79675ee [master] fix x64 NOP, silence set but not used warning 2016-03-23 12:34:56 -07:00
Evan Hunt
11a3f0a049 [master] disallow out-of-range descriptors in isc_socket_fdwatchcreate() 2016-03-22 18:05:32 -07:00
Evan Hunt
cf24cbd837 [master] adaptive RW locks 
3440.	[performance]	Implement adaptive read-write locks, reducing the
			overhead of locks that are only held briefly.
			[RT #37329]
 2016-03-22 17:59:21 -07:00
Mark Andrews
31a1cbf101 silence compiler false positive 2016-03-10 08:43:28 +11:00
Evan Hunt
868b3166b8 [master] silence coverity warning 2016-03-05 19:50:42 -08:00
Tinderbox User
220ba6da87 update copyright notice / whitespace 2016-03-04 23:45:23 +00:00
Evan Hunt
d4ed29b019 [rt41656] line length 
(cherry picked from commit 6957e9451cc7bf89d44716dfe4266281867e00e5)
 2016-03-04 13:01:54 +05:30
Mukund Sivaraman
9da98335c1 Code cleanups (#41656) 2016-03-04 12:18:17 +05:30
Tinderbox User
f254ab049e update copyright notice / whitespace 2016-03-02 23:45:17 +00:00
Mark Andrews
ce7216c40a 4223. [bug] Improve HTTP header processing on statschannel. 
[RT #41674]
 2016-03-02 11:04:59 +11:00
Tinderbox User
53ba272721 update copyright notice / whitespace 2016-02-18 23:45:32 +00:00
Mukund Sivaraman
5ac25749e7 Add missing win32 defs 2016-02-12 14:54:52 +05:30
Evan Hunt
93c211afc9 [master] fixed a regression in dyndb due to change #4277 2016-02-12 00:22:45 -08:00
Mark Andrews
b91d11bfcc copyrights / whitespace 2016-02-11 10:44:21 +11:00
Mukund Sivaraman
614ce1b65f Add tests for hash function, and comment dns_rbt_addnode() (#41179) 
No CHANGES entry necessary.
 2016-02-08 14:52:08 +05:30
Tinderbox User
8b074bef0c update copyright notice / whitespace 2016-02-01 23:45:25 +00:00
Mukund Sivaraman
d1dbf6b20f Use __built_expect() where available (#41411) 2016-02-01 08:59:49 +05:30
Evan Hunt
30370d905e [master] removed /Gy- from VS project files 
4302.	[port]		win32: fixed a build error in VS 2015. [RT #41426]
 2016-01-27 15:27:57 -08:00
Tinderbox User
16201b15a6 update copyright notice / whitespace 2016-01-17 23:45:21 +00:00
Francis Dupont
bdd9d37c96 Fixed small bugs in WIN32 legacy 2016-01-13 15:22:52 +01:00
Evan Hunt
bb5d14d724 [master] millisecond granularity for statschannel timers 
4290.	[func]		The timers returned by the statistics channel
			(indicating current time, server boot time, and
			most recent reconfiguration time) are now reported
			with millisecond accuracy. [RT #40082]
 2016-01-07 15:34:58 -08:00
Francis Dupont
343aeac717 Updated WIN32 files (rt40877) 2016-01-04 17:27:31 +01:00
Mark Andrews
27deca2bf0 don't mix IPv4 and IPv6 capability bits 2015-12-17 08:17:00 +11:00
Curtis Blackburn
9effea437d [rt41269] additional tests for dig and delv, 
fix for --disable-ipv6 on osx,
              fixes for tests with --disable-ipv6
 2015-12-15 11:58:28 -08:00
Mark Andrews
94c7301f6f 4279. [test] Don't use fixed ports when unit testing. [RT #41194] 2015-12-15 12:50:32 +11:00
Tinderbox User
6d27aeb4e2 update copyright notice / whitespace 2015-12-11 23:45:22 +00:00
Mark Andrews
564968bc0a whitespace 2015-12-11 14:29:18 +11:00
Evan Hunt
f21d2ee372 [master] comments 2015-12-09 08:54:04 -08:00
Mukund Sivaraman
5d79b60fc5 Improve performance of RBT (#41165) 2015-12-09 19:10:55 +05:30
Evan Hunt
226dd20bbd [master] isc__taskmgr_pause() could deadlock 
4271.	[test]		Unit tests could deadlock in isc__taskmgr_pause().
			[RT #41235]
 2015-12-03 20:49:28 -08:00
Tinderbox User
f30a3f28db update copyright notice / whitespace 2015-11-30 23:45:24 +00:00
Mark Andrews
8e73941f33 4265. [bug] Address unchecked isc_mem_get calls. [RT #41187] 2015-11-30 10:29:29 +11:00
Tinderbox User
af0bea7aa7 update copyright notice / whitespace 2015-11-20 23:45:23 +00:00
Mark Andrews
5b1c7ef35b 4264. [bug] Check const of strchr/strrchr assignments match 
argument's const status. [RT #41150]
 2015-11-20 18:38:24 +11:00
Mukund Sivaraman
7bc21557f3 Fix bug in epoll_ctl() usage causing blocked connections (#41067) 2015-11-19 11:01:45 +05:30
Francis Dupont
dd784c18ef Merged VS 2015 64 bit warnings (#40373) 2015-11-16 17:47:10 +01:00
Tinderbox User
3865e18d3d update copyright notice / whitespace 2015-11-09 23:45:22 +00:00
Evan Hunt
e13d04fda9 [master] fix python script versions 
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
 2015-11-08 21:34:24 -08:00
Mark Andrews
e939674d53 4252. [func] Add support for automating the generation CDS and 
CDNSKEY rrsets to named and dnssec-signzone.
                        [RT #40424]
 2015-11-05 12:09:48 +11:00
Tinderbox User
d4a69308f5 update copyright notice / whitespace 2015-10-29 23:45:34 +00:00
Mark Andrews
7c38fa994b 0xf5f5f5f5f5f5f5f5 is a LLU 2015-10-30 08:11:48 +11:00
Evan Hunt
821ff5e8fa [master] isc_atomic_storeq()/stats improvements 
4248.	[func]		Add an isc_atomic_storeq() function, use it in
			stats counters to improve performance.
			[RT #39972] [RT #39979]
 2015-10-28 22:19:18 -07:00
Tinderbox User
43cc3edce9 update copyright notice / whitespace 2015-10-15 23:45:22 +00:00
Mark Andrews
6588a2b404 4238. [bug] Don't send to servers on net zero (0.0.0.0/8). 
[RT #40947]
 2015-10-16 08:00:15 +11:00
Tinderbox User
244d11a227 update copyright notice / whitespace 2015-10-03 23:45:23 +00:00
Evan Hunt
4a84f8899b [master] silence "missing initializer" warning 2015-10-02 18:47:33 -07:00
Evan Hunt
b66b333f59 [master] dnstap 
4235.	[func]		Added support in named for "dnstap", a fast method of
			capturing and logging DNS traffic, and a new command
			"dnstap-read" to read a dnstap log file.  Use
			"configure --enable-dnstap" to enable this
			feature (note that this requires libprotobuf-c
			and libfstrm). See the ARM for configuration details.

			Thanks to Robert Edmonds of Farsight Security.
			[RT #40211]
 2015-10-02 12:32:42 -07:00
Witold Krecicki
a239044323 4234. [func] Add deflate compression in statistics channel HTTP 
server. [RT #40861]
 2015-10-02 10:45:10 +02:00
Tinderbox User
551e0d486d update copyright notice / whitespace 2015-09-30 23:45:36 +00:00
Mark Andrews
2a12984ce6 4227. [bug] Silence static analysis warnings. [RT #40828 2015-09-30 14:14:47 +10:00
Tinderbox User
55cfbf322d update copyright notice / whitespace 2015-09-29 23:45:32 +00:00
Evan Hunt
a00f9e2f50 [master] merge dyndb 
4224.	[func]		Added support for "dyndb", a new interface for loading
			zone data from an external database, developed by
			Red Hat for the FreeIPA project.

			DynDB drivers fully implement the BIND database
			API, and are capable of significantly better
			performance and functionality than DLZ drivers,
			while taking advantage of advanced database
			features not available in BIND such as multi-master
			replication.

			Thanks to Adam Tkac and Petr Spacek of Red Hat.
			[RT #35271]
 2015-09-28 23:12:35 -07:00
Mark Andrews
7867d18ce0 Introduce end-of-line normalization 2015-09-29 08:25:35 +10:00
Mark Andrews
d8e6cd0f8b use HAVE_SYS_SYSCTL_H 2015-09-29 07:26:04 +10:00
Francis Dupont
1d96b1a5ad Removed unused addrbuf 2015-09-28 17:32:40 +02:00
Francis Dupont
722ed14020 Fixed status vs statex 2015-09-28 17:30:07 +02:00
Francis Dupont
29d9a2927c Fixed project files 2015-09-28 15:46:33 +02:00
Francis Dupont
6066985ca8 Fixed isc_meminfo_totalphys return cast (size_t is *not* 64 bit) 2015-09-28 15:34:24 +02:00
Francis Dupont
b39bbe3c95 Fixed missing #include "config.h" 2015-09-28 14:50:18 +02:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage 
of available physical memory, set default to 90%.
			[RT #38442]
 2015-09-28 11:08:50 +02:00
Mark Andrews
a21c415687 4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK, 
EGAIN when these soft error are not retried for
                        isc_socket_send*().
 2015-09-21 17:22:53 +10:00
Mark Andrews
4dd41c7d59 4218. [bug] Potential null pointer dereference on out of memory if mmap is not supported. [RT #40777] 2015-09-19 07:12:02 +10:00
Mark Andrews
705d56b47a 4216. [cleanup] Silence static analysis warnings. [RT #40649] 2015-09-18 23:30:01 +10:00
Mark Andrews
3fa134363f 4200. [cleanup] win32: update BINDinstall to be BIND release 
independent. [RT #38915]
 2015-09-11 12:25:39 +10:00
Evan Hunt
d37f4738f4 [master] clean up dead code 2015-09-09 08:38:23 -07:00
Evan Hunt
bcae9a15c1 [master] s/the the/the/ 2015-08-27 14:11:27 -07:00
Mark Andrews
91f66e374b eol -> crlf 2015-08-26 12:43:08 +10:00
Mark Andrews
7ec3c447fd copy notes.pdf to Build\Releasei and link to it from index.html 2015-08-26 12:11:07 +10:00
Mark Andrews
18ba804f3a 4188. [bug] Support HTTP/1.0 client properly on the statistics 
channel. [RT #40261]
 2015-08-20 09:55:28 +10:00
Tinderbox User
161b5249b9 update copyright notice / whitespace 2015-08-19 23:45:23 +00:00
Tinderbox User
0d63efe476 update copyright notice / whitespace 2015-08-18 23:45:26 +00:00
Mark Andrews
47d459ef43 add isc_safe_memequal and isc_safe_memcompare; remove isc_safe_memcmp 2015-08-18 12:25:22 +10:00
Evan Hunt
420a43c8d8 [master] timing safe memory comparisons 
4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
			code. Also, the timing-safe comparison functions have
			been renamed to avoid possible confusion with
			memcmp(). [RT #40148]
 2015-08-17 18:26:44 -07:00
Mark Andrews
0bc743f9bc 4162. [bug] httpdmgr->flags was not being initialized. [RT #40017] 2015-07-10 18:42:20 +10:00
Tinderbox User
f16a6bfb6c update copyright notice / whitespace 2015-07-09 23:45:22 +00:00
Evan Hunt
fc5f1971a1 [master] fix build error with ISC_MEM_TRACKLINES=0 2015-07-09 14:23:29 -07:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 22:53:39 -07:00
Tinderbox User
9ab5a7d83c update copyright notice / whitespace 2015-07-07 23:45:22 +00:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the 
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
 2015-07-06 09:44:24 +10:00
Tinderbox User
2bd63eca27 update copyright notice / whitespace 2015-07-01 23:45:22 +00:00
Mark Andrews
753b27a7d3 4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply 
minimal fix.  [RT #39667]
 2015-07-01 11:51:45 +10:00
Tinderbox User
a03c39ef51 update copyright notice / whitespace 2015-06-05 23:45:26 +00:00
Mark Andrews
8a9bac8dec 4133. [port] Update how various json libraries are handled. 
[RT #39646]
 2015-06-05 10:16:24 +10:00
Tinderbox User
431e5c81db update copyright notice / whitespace 2015-05-28 23:45:24 +00:00
Mark Andrews
38c19e5779 4130. [bug] The compatability shim for *printf() misprinted some 
large numbers. [RT #39586]
 2015-05-29 07:21:49 +10:00
Mark Andrews
e53e202ef3 4128. [bug] Address issues raised by Coverity 7.6. [RT #39537] 2015-05-28 13:17:07 +10:00
Mark Andrews
5af7557757 use unsigned constants 2015-05-24 12:51:55 +10:00
Tinderbox User
d70dac20d2 update copyright notice / whitespace 2015-05-23 23:45:25 +00:00
Mark Andrews
503f0b324a #undef before #define 2015-05-24 06:04:09 +10:00
Francis Dupont
3759f10fc5 added print.h includes, updated copyrights 2015-05-23 14:21:51 +02:00
Tinderbox User
46ee7c3260 update copyright notice / whitespace 2015-05-22 23:45:24 +00:00
Mark Andrews
22909ca827 unconditionally include stdio.h 2015-05-22 10:08:43 +10:00
Mark Andrews
9e69ff9ad0 exclude isc_print_printf and isc_print_fprintf 2015-05-22 08:22:19 +10:00
Evan Hunt
cadf8d687b [master] add %z format options to printf 
4123.	[port]		Added %z (size_t) format options to the portable
			internal printf/sprintf implementation. [RT #39586]
 2015-05-21 14:55:15 -07:00
Mark Andrews
b4a6f7fff4 #include <string.h> for strcmp 2015-05-11 12:16:07 +10:00
Tinderbox User
012142bbe0 update copyright notice / whitespace 2015-05-06 23:45:24 +00:00
Tinderbox User
4e92a74ec4 update copyright notice / whitespace 2015-05-05 23:45:24 +00:00
Evan Hunt
9e804040a2 [master] add "rndc -r" to print result code 
4115.	[func]		"rndc -r" now prints the result code (e.g.,
			ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
			running the requested command. [RT #38913]
 2015-05-05 16:39:09 -07:00
Mark Andrews
675900780a 150 ->160 2015-05-06 09:24:16 +10:00
Mark Andrews
5e73a8d791 set initial values for 9.11.x 2015-05-06 08:27:49 +10:00
Mukund Sivaraman
8f25faf972 Fix a regression in radix tree implementation introduced by ECS code (#38983) 2015-05-05 13:11:23 +05:30
Tinderbox User
452a29e62c update copyright notice / whitespace 2015-04-28 23:45:24 +00:00
Mark Andrews
b292230ab8 4110. [bug] Address memory leaks / null pointer dereferences 
on out of memory. [RT #39310]
 2015-04-29 03:16:50 +10:00
Mark Andrews
e77e449549 4109. [port] linux: support reading the local port range from 
net.ipv4.ip_local_port_range. [RT # 39379]
 2015-04-25 08:25:42 +10:00
Tinderbox User
1413616670 update copyright notice / whitespace 2015-04-17 23:45:24 +00:00
Francis Dupont
ab973ec40c misc x64 VS 2015 CTP fixes [#39308] 2015-04-17 11:39:26 +02:00
Mark Andrews
f1a261ba2d 4104. [bug] Address uninitialized elements. [RT #39252] 2015-04-17 14:04:47 +10:00
Francis Dupont
bcb68be0a8 misc fixes for VS 2015 CTP #39267 2015-04-17 02:57:02 +02:00
Tinderbox User
ace0b8d470 update copyright notice / whitespace 2015-04-15 23:45:22 +00:00
Mark Andrews
c855e7170a 4100. [bug] Inherited owernames on the line immediately following 
a $INCLUDE were not working.  [RT #39268]
 2015-04-15 12:47:57 +10:00
Mukund Sivaraman
fba894c98b Some cleanups in isc mem code (#38896) 2015-03-27 23:12:11 +05:30
Evan Hunt
e89972afcb [master] fixed build errors with libressl 
4088.	[port]		Fixed errors when building with libressl. [RT #38899]
 2015-03-23 13:34:56 -05:00
Mukund Sivaraman
24f2cc7d06 Fix a possible race in updating stats counters (#38826) 
and do some other isc mem cleanups.
 2015-03-09 10:30:47 +05:30
Tinderbox User
811acf52b8 update copyright notice / whitespace 2015-03-04 23:45:21 +00:00
Evan Hunt
7ae96d8823 [master] add "lock-file" and fix up singleton code 
4080.	[func]		Completed change #4022, adding a "lock-file" option
			to named.conf to override the default lock file,
			in addition to the "named -X <filename>" command
			line option.  Setting the lock file to "none"
			using either method disables the check completely.
			[RT #37908]
 2015-03-02 19:27:54 -08:00
Tinderbox User
3d787a1213 update copyright notice / whitespace 2015-03-02 23:45:21 +00:00
Mukund Sivaraman
10dd5f62f2 Add support for Valgrind's helgrind tool (#38706) 
Also fix one locking issue that helgrind found: Maintain stats->lock
while stats->reference is used.
 2015-03-02 13:42:20 +05:30
Mukund Sivaraman
0ea9f8037d Remove more wider memset() over control now that it's handled below (#38621) 2015-03-02 12:52:41 +05:30
Tinderbox User
5e93bad21b update copyright notice / whitespace 2015-03-01 23:45:20 +00:00
Mark Andrews
b5edc023a1 4078. [bug] Hand the case where CMSG_SPACE(sizeof(int)) != 
CMSG_SPACE(sizeof(int)). [RT #38621.
 2015-02-27 14:52:26 +11:00
Mark Andrews
bb5df338d9 4076. [bug] Named could crash on shutdown with outstanding 
reload / reconfig events. [RT #38622]
 2015-02-27 12:34:43 +11:00
Mark Andrews
42580072de protect with #ifdef HAVE_PTHREAD_MUTEX_ADAPTIVE_NP 2015-02-27 11:37:35 +11:00
Mark Andrews
af669cb4fd 4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708] 2015-02-27 10:55:55 +11:00
Tinderbox User
c10fda07d6 update copyright notice / whitespace 2015-02-26 23:45:22 +00:00
Mukund Sivaraman
ebeb668f86 Remove unused functions (#38547) 2015-02-26 14:47:03 +05:30
Mukund Sivaraman
07dd40e8ee Initialize pthread_mutexattrs just once (#38547) 2015-02-26 14:43:45 +05:30
Mukund Sivaraman
db93c0def5 Fix a segfault when running nslookup (#38548) 2015-02-26 14:03:35 +05:30
Tinderbox User
f159b7b5c7 update copyright notice / whitespace 2015-02-25 23:45:22 +00:00
Mukund Sivaraman
5a505fc4c2 Add facility to run system test nameds under Valgrind (#38546) 2015-02-25 09:06:45 +05:30
Evan Hunt
07229d51a6 [master] report library version numbers on win32 2015-02-20 23:23:59 -08:00
Mark Andrews
6a837e5121 address race condition with multiple isc_socket_connect calls in change 4041 2015-02-18 23:32:31 +11:00
Tinderbox User
c8a55dfd0a update copyright notice / whitespace 2015-02-12 23:45:23 +00:00
Mukund Sivaraman
ffc393dd18 Remove canary code from hash destroy function (#38602) 
This triggers a Valgrind out-of-bounds read report. It was introduced by
commit 5d7849ad7f.

No CHANGES entry necessary as it doesn't have any user-visible or
behavioral change. It removes an out-of-bounds read issue that went
undetected when allocated through isc_mem as the memory was present.
The memory read was compared to itself, so it has no behavioral change.
 2015-02-12 18:14:34 +05:30
Tinderbox User
f3affbe2ff update copyright notice / whitespace 2015-02-10 23:45:23 +00:00
Evan Hunt
a98f70acc8 [master] address valgrind warnings 
4059.	[bug]		Addressed valgrind warnings. [RT #38549]
 2015-02-10 14:01:38 -08:00
Tinderbox User
29756974c5 update copyright notice / whitespace 2015-02-06 23:45:21 +00:00
Evan Hunt
591389c7d4 [master] 5011 tests and fixes 
4056.	[bug]		Expanded automatic testing of trust anchor
			management and fixed several small bugs including
			a memory leak and a possible loss of key state
			information. [RT #38458]

4055.	[func]		"rndc managed-keys" can be used to check status
			of trust anchors or to force keys to be refreshed,
			Also, the managed keys data file has easier-to-read
			comments.  [RT #38458]
 2015-02-05 17:18:15 -08:00
Mark Andrews
d2a50c9ba8 cast to (unsigned long) to silence format warning 2015-02-05 07:50:24 +11:00
Tinderbox User
92059a966a update copyright notice / whitespace 2015-02-03 23:46:29 +00:00
Mukund Sivaraman
2696ceb4d4 Fix a Valgrind warning about use of uninitialized memory (as part of #38454) 2015-02-03 11:43:34 +05:30
Mukund Sivaraman
fe12a8f107 Fix a leak of pthread_mutexattr_t (#38454) 
4051.	[bug]		Fix a leak of pthread_mutexattr_t. [RT #38454]
 2015-02-03 11:42:06 +05:30
Mark Andrews
7865bb3549 copy COPYRIGHT and OpenSSL Licence to Build\Release 2015-01-29 14:36:09 +11:00
Tinderbox User
be755f4725 update copyright notice / whitespace 2015-01-22 23:45:26 +00:00
Evan Hunt
84ee90b52d [master] fix 'total use' accounting 
4046.   [bug]           Accounting of "total use" in memory context
                        statistics was not correct. [RT #38370]
 2015-01-22 09:44:24 -08:00
Tinderbox User
39f68d7b64 update copyright notice / whitespace 2015-01-21 23:45:24 +00:00
Mark Andrews
17dc146c7c 4044. [bug] Change 3955 was not complete resulting is a assertion 
failure is the timing was just right. [RT #38352]
 2015-01-22 10:38:40 +11:00
Evan Hunt
e91c70668e [master] restored accidentally removed externals 2015-01-20 22:38:27 -08:00
Evan Hunt
ff62d4458a [master] allow shared TCP sockets when connecting 
4041.	[func]		TCP sockets can now be shared while connecting.
			(This will be used to enable client-side support
			of pipelined queries.) [RT #38231]
 2015-01-20 17:22:31 -08:00
Evan Hunt
b77ae24e3e [master] more windows VS14 compatibility work 
(completes change #3987)
 2015-01-20 15:45:38 -08:00
Tinderbox User
c110d61b17 update copyright notice / whitespace 2015-01-20 23:45:26 +00:00
Evan Hunt
11463c0ac2 [master] clean up gcc -Wshadow warnings 
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
 2015-01-20 13:29:18 -08:00
Tinderbox User
b624001e36 update copyright notice / whitespace 2015-01-16 23:45:22 +00:00
Mukund Sivaraman
b05a50c852 Make call to open a temporary file name safe during NZF creation (#38331) 
Based on a patch sent in by Tony Finch <dot@dotat.at>.

Also fix win32 implementation of isc_file_openunique() to use a random
filename instead of using the process id.
 2015-01-16 18:29:23 +05:30
Tinderbox User
2dd6ffb5cb update copyright notice / whitespace 2015-01-12 23:45:21 +00:00
Mukund Sivaraman
a6f0e9c985 Add NTA persistence (#37087) 
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
 2015-01-12 09:07:48 +05:30
Tinderbox User
f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Evan Hunt
4b52ac401d [master] remove unhelpful comment, revise change note 
3973.	[test]		Added hooks for Google Performance Tools
			CPU profiler, including real-time/wall-clock
			profiling. [RT #37339]
 2015-01-10 00:17:57 -08:00
Tinderbox User
055f6517b4 update copyright notice / whitespace 2014-12-19 23:45:22 +00:00
Mark Andrews
d8f2dd46cb 4025. [port] bsdi: failed to build. [RT #38047] 2014-12-19 12:06:35 +11:00
Mark Andrews
1e0ed0c6f5 4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next, 
dns_rdata_opt_current, dns_rdata_txt_first,
                        dns_rdata_txt_next and dns_rdata_txt_current were
                        documented but not implemented.  These have now been
                        implemented.

                        dns_rdata_spf_first, dns_rdata_spf_next and
                        dns_rdata_spf_current were document but not
                        implemented.  The prototypes for these
                        functions have been removed. [RT #38068]

4023.   [bug]           win32: socket handling with explict ports and
                        invoking named with -4 was broken for some
                        configurations. [RT #38068]
 2014-12-19 11:35:07 +11:00
Evan Hunt
9fcbc46062 [master] more missing entry points 2014-12-16 14:40:33 -08:00
Evan Hunt
fc12d18471 [master] typos 2014-12-16 12:42:05 -08:00
Evan Hunt
25ee607cf5 [master] add more missing entry points 2014-12-16 12:09:09 -08:00
Mark Andrews
f5c22df82b win32 build 2014-12-16 23:36:44 +11:00
Francis Dupont
fc63119c8b Hardened OpenSSL digest/HMAC calls [RT #37944] 2014-12-02 12:41:01 +01:00
Mark Andrews
70bceacc80 silence signed/unsigned warning 2014-11-21 20:28:17 +11:00
Evan Hunt
c6b699b58e [master] remove inadvertently-retained content from quota.h 2014-11-20 12:55:01 -08:00
Evan Hunt
05e448935c [master] refactor max-recursion-queries 
- the counters weren't set correctly when fetches timed out.
  instead we now pass down a counter object.
 2014-11-19 18:21:02 -08:00
Evan Hunt
c325ff9c79 [master] complete coverity fixes 2014-11-17 17:39:00 -08:00
Mark Andrews
4ac862fa96 only execute additional tests if create call succeeds 2014-11-18 12:19:37 +11:00
Evan Hunt
63fb92c1ba [master] fix false positive compiler warning 
a "pointer always evaluates to true" warning was blocking
compilation of the radix ATF test when using --enable-developer
with gcc 4.8.2.
 2014-11-15 00:56:30 -08:00
Evan Hunt
907e01d6f3 [master] buffer ATF test was failing 2014-11-15 00:56:17 -08:00
Evan Hunt
e32d354f75 [master] allow arbitrary-size rndc output 
4005.	[func]		The buffer used for returning text from rndc
			commands is now dynamically resizable, allowing
			arbitrarily large amounts of text to be sent back
			to the client. (Prior to this change, it was
			possible for the output of "rndc tsig-list" to be
			truncated.) [RT #37731]
 2014-11-14 15:58:54 -08:00
Mukund Sivaraman
a3157f3c75 [master] close() fd when done (Coverity report) 2014-11-11 07:15:02 +05:30
Evan Hunt
fadf7291df [master] check creat() return 2014-11-10 17:30:58 -08:00
Tinderbox User
6d0a639bd0 update copyright notice 2014-11-06 23:45:21 +00:00
Evan Hunt
067c0c38e7 [master] s/mempcy/memmove/ 2014-11-06 13:01:59 -08:00
Mark Andrews
8f0cf84bb1 set working directory; #include <string.h> 2014-11-06 18:02:32 +11:00
Tinderbox User
d478dbae80 update copyright notice 2014-11-05 23:45:20 +00:00
Evan Hunt
ad9645512c [master] add print.h 2014-11-04 20:43:41 -08:00
Evan Hunt
ce96d4326c [master] new mkeys and nzf naming format 
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
 2014-11-04 19:43:27 -08:00
Mark Andrews
b976c39c07 3998. [bug] isc_radix_search was returning matches that were 
to precise. [RT #37680]
 2014-11-04 12:34:12 +11:00
Mark Andrews
00fb0253c9 3991. [func] Add the ability to buffer logging output by specifying 
"buffered yes;" when defining a channel. [RT #26561]
 2014-10-30 11:37:05 +11:00
Tinderbox User
6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Francis Dupont
4d6329c1b3 Handle VS14 incompatible changes [RT #37380] 2014-10-21 09:34:33 +02:00
Francis Dupont
7fbfa379e2 Accept up to 256 byte PINs in native PKCS#11. [RT #37410] 2014-10-20 22:55:40 +02:00
Mark Andrews
871f3c8bee 3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF 
size. [RT #37187]
 2014-10-18 12:40:13 +11:00
Francis Dupont
1831311ac6 added hooks for gperftools CPU profiler [#37339] 2014-10-08 15:14:02 +02:00
Tinderbox User
2fb35a6d59 update copyright notice 2014-09-29 23:45:24 +00:00
Mark Andrews
10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Mark Andrews
52131a8351 3948. [port] solaris: RCVBUFSIZE was too large on Solaris with 
--with-tuning=large. [RT #37059]
 2014-09-09 09:41:55 +10:00
Evan Hunt
f687e639f0 [master] [rt36786] use INSTALL_PROGRAM for shared libs 
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]
 2014-09-05 10:24:20 -07:00
Tinderbox User
3278ff814d update copyright notice 2014-08-29 23:45:22 +00:00
Evan Hunt
d46855caed [master] ECS authoritative support 
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
 2014-08-28 22:05:57 -07:00
Evan Hunt
91e7faa874 [master] win32 sockets don't support dscp 2014-08-06 21:35:49 -07:00
Tinderbox User
79bb509936 update copyright notice 2014-08-02 23:45:21 +00:00
Mark Andrews
c38341ec43 3908. [bug] rndc now differentiates between a zone in multiple 
views and a zone that doesn't exist at all. [RT #36691]
 2014-08-02 14:43:26 +10:00
Mark Andrews
6a6838f973 3898. [bug] To small a buffer in tohexstr() calls in test code. 
[RT #36598]
 2014-07-22 11:26:28 +10:00
Mark Andrews
a1dee90bfb adjust INSIST now that dev->dscp is unsigned 2014-07-19 11:56:23 +10:00
Mark Andrews
89cf81b462 3896. [bug] Address performance issues with DSCP code on some 
platforms. [RT #36534]
 2014-07-18 11:40:44 +10:00
Mark Andrews
2e6d7a724a silence "Value stored to 'length' is never read" by removing assignment 2014-07-17 09:44:57 +10:00
Tinderbox User
b6f7267093 update copyright notice 2014-07-15 23:45:19 +00:00
Mark Andrews
71ec6d0940 3894. [bug] Buffers in isc_print_vsnprintf were not properly 
initialized leading to potential overflows when
                        printing out quad values. [RT #36505]
 2014-07-15 22:53:07 +10:00
Tinderbox User
8a9485517e update copyright notice 2014-07-10 23:45:19 +00:00
Mark Andrews
7eb82402e3 Revert "update description to match code; doxygen fixes" 
This reverts commit 1fc784da63.
 2014-07-10 10:37:10 +10:00
Mark Andrews
9862191c37 update description to match code; doxygen fixes 2014-07-10 10:36:33 +10:00
Mark Andrews
1fc784da63 update description to match code; doxygen fixes 2014-07-10 10:32:54 +10:00
Mark Andrews
e31a37787b silence coverity - reviewed by Evan over jabber 2014-07-01 09:52:02 +10:00
Mark Andrews
1a03e9eb52 rename closesocket to socketclose to avoid coverity model for window's closesocket 2014-06-26 10:47:48 +10:00
Evan Hunt
4ef06963a4 [master] unresolved externals 2014-06-20 13:51:36 -07:00
Mark Andrews
bfbd478cdb silence coverity 2014-06-19 11:33:22 +10:00
Evan Hunt
a4e76a630e [master] update gitignore files; use rev-parse to get srcid 2014-06-17 13:49:30 -07:00
Mark Andrews
23fe5cbb07 pass rng to destroy 2014-06-11 22:57:46 +10:00
Mark Andrews
0c57bf16a5 fix unbalanced lock; test for non NULL before dereference; 2014-06-11 21:42:36 +10:00
Mark Andrews
5331f97edc silence compiler warnings 2014-06-10 12:38:32 +10:00
Tinderbox User
1b2ae58ef1 update copyright notice 2014-06-09 23:45:20 +00:00
Mark Andrews
b16d99bac1 3872. [bug] Address issues found by static analysis. [RT #36209] 2014-06-10 09:17:15 +10:00
Mukund Sivaraman
5456bddd39 [27303] Supply format string as first arg to printf() 
No CHANGES entry for this as it isn't proved to cause an issue for
anyone (isc_msgcat_get() has to return a format specifier) and isn't a
user visible change.

Squashed commit of the following:

commit bcb15c9aa17b0b706aefd9efef5f7e0e951064a3
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed Jun 4 16:55:16 2014 +0530

    [27303] Supply format string as first arg to printf()

    The old code only had a problem if isc_msgcat_get() returned a format
    specifier (%n).
 2014-06-08 19:06:37 +05:30
Tinderbox User
780169512e update copyright notice 2014-06-04 23:45:22 +00:00
Mukund Sivaraman
84dc4b3e7e [35942] Update random number generator to ChaCha based (and add tests) 
Squashed commit of the following:

commit 219a904fea95c74016229b6f4436d4f09de1bfd0
Author: Evan Hunt <each@isc.org>
Date:   Mon Jun 2 12:20:54 2014 -0700

    [rt35942] style

commit 90bc77185e9798af4595989abb8698efef8c70d7
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 18:01:30 2014 +0530

    Return p-value=0 when prerequisite (monobit) fails

commit 5594669728f1181a447616f60b835e4a043d1b21
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:44:25 2014 +0530

    Print proportion of test sequences passing too

commit 9e94b67a4114651224a8285f7c4a7fb03907f376
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:34:03 2014 +0530

    Check uniform distribution of p-values

commit acf911b32dd84ac1c30c57d8937cfeb6b3ff972f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 17:17:39 2014 +0530

    Check proportion of sequences passing a test

commit 7289eb441fc4ec623364ad882e22b240ba8da308
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jun 2 04:33:37 2014 +0530

    Refactor common setup code into random_test()

    No behavioral change is made.

commit 51feef3e08c233d34a6b8b9d25a72d43110b4eed
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun Jun 1 17:31:57 2014 +0530

    Fix binary rank computation

commit 0ea3c03dea353f309d13c38e26aa0abbffdcff2b
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit eb4e7c53540ac97436d94714d30084907eeff01a
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 1292a06e0e09ebd37d4ecf5337814951dcacc4a4
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 16:21:51 2014 -0700

    [rt35942] style; check whether we need libm for exp()

commit c19788e5a89235e937a5aedf2ebea50f33406609
Author: Evan Hunt <each@isc.org>
Date:   Thu May 29 15:31:19 2014 -0700

    [rt35942] incidental spelling error fixed

commit c833326ad0df21e2a8b35958e85ccc0a692e38be
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:34:37 2014 +0530

    Revert "Add function to find rank of a binary matrix"

    This reverts commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb.

    This test will be added in RT#36125.

commit cf786a533d34fdcd9e1c5650356e56d33e93a29f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 29 11:33:18 2014 +0530

    Revert "Add binary matrix rank RNG test"

    This reverts commit dd843b9ca84fa9af80ec39631152f82778f0b97c.

    This test will be added in RT#36125.

commit dd843b9ca84fa9af80ec39631152f82778f0b97c
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 27 06:01:10 2014 +0530

    Add binary matrix rank RNG test

commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 15:45:31 2014 +0530

    Add function to find rank of a binary matrix

commit 313c30088d6ba933bde3abb920f2a6d16b9b77e1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:38:44 2014 +0530

    Add block frequency random test

commit 0d279c60ed3eabe52cf3e1435bf14ec62752536f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 13:04:03 2014 +0530

    Add preconditions from NIST spec

commit 7a6c5f2ce5078814d5cf0fea30596e58171174c1
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 26 12:51:03 2014 +0530

    Add functions to use in RNG tests

commit 8c5cb5594f904f6669cdffaa364f799b4a2c6b58
Author: Mukund Sivaraman <muks@isc.org>
Date:   Thu May 22 00:26:10 2014 +0530

    Add runs RNG test

commit 4882f078cc2596c0911066ffb783e4dd145a63ec
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:58:20 2014 +0530

    Pre-compute bitcounts LUT

commit 896db3809fba2d9884a4a3a2fa847a73e007ad7f
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 23:30:23 2014 +0530

    Fix the bit value being checked (this shouldn't affect the test)

commit b932cbb5dae39eb819db29cf9490fb51d59b7c56
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 19:35:12 2014 +0530

    Add monobits RNG test

commit 7bef19fd8b095aa567a975ef5c97d5812162d92e
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:53:02 2014 +0530

    Add API documentation

commit 54483f7feb64b5646dd1da45b1fd396e7d04b926
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 21 16:39:03 2014 +0530

    Rename isc_rngctx_t to isc_rng_t

commit 7c5031b53555137a82c6b6218cd4dd5e95acf94d
Author: Evan Hunt <each@isc.org>
Date:   Tue May 20 23:29:53 2014 -0700

    [rt35942] use attach/detach with isc_rngctx_t

commit 8aabae5e09888e6af651ed27bd6b4e9f76334d55
Author: Mukund Sivaraman <muks@isc.org>
Date:   Tue May 20 18:32:42 2014 +0530

    Move RNG from dispatch.c to libisc

commit e6d4ad4f389998b91d46e95e258cf420cb21d977
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon May 12 19:16:27 2014 +0530

    Replace old arc4random with new ChaCha implementation from OpenBSD
 2014-06-04 13:44:10 +05:30
Mark Andrews
50a7454174 3868. [bug] isc_mem_setwater incorrectly cleared hi_called 
potentially leaving over memory cleaner running.
                        [RT #35270]
 2014-06-02 16:31:42 +10:00
Mark Andrews
536da846f6 update copyrights 2014-05-30 09:41:33 +10:00
Evan Hunt
caa252e5ad [master] Fix bin/tests/rbt_test.c, use portable int types 2014-05-29 07:37:13 -07:00
Mukund Sivaraman
ce376a81fa [35904] Add various RBT unit tests 
No CHANGES entry was added as this commit mainly adds tests related
code.

Squashed commit of the following:

commit d3d44508daa128fb8b60f64b3a8c81f80602273d
Author: Evan Hunt <each@isc.org>
Date:   Wed May 7 09:36:41 2014 -0700

    [rt35904] remove private non-static names from .def file

commit dbca45661c3939f21c3bb3f405d08cfe1b35d7aa
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 7 21:39:32 2014 +0530

    Remove test for shortcut findnode()

    The implementation was not included in this review branch, but the tests
    erroneously made it through.

    This functionality will be addressed in a different ticket (RT#35906).

commit 94ff14576ab3407f2612d34727b7eacfefc3668c
Author: Mukund Sivaraman <muks@isc.org>
Date:   Wed May 7 21:36:50 2014 +0530

    Minor indent fix

commit 50972f17697bb222996e433faa8224843366f9b2
Author: Evan Hunt <each@isc.org>
Date:   Tue May 6 20:05:21 2014 -0700

    [rt35904] style

commit 5c4d5d41fcc5bfecdeebc008896974385c841b8d
Author: Mukund Sivaraman <muks@isc.org>
Date:   Sun May 4 19:19:36 2014 +0530

    RBT related updates

    * Add various RBT unit tests
    * Add some helper methods useful in unit testing RBT code
    * General cleanup
 2014-05-29 11:09:23 +05:30
Mark Andrews
358cc47a25 address typo 2014-05-27 14:10:12 +10:00
Mark Andrews
4b22b8decb fix typo == -> = 2014-05-24 23:24:19 +10:00
Mark Andrews
a569e1b321 3860. [bug] ioctl(DP_POLL) array size needs to be determined 
at run time as it is limited to {OPEN_MAX}.
                        [RT #35878]
 2014-05-23 13:05:23 +10:00
Tinderbox User
c381ccf794 update copyright notice 2014-05-07 23:45:21 +00:00
Evan Hunt
1ea6e09c37 [master] check for arc4random_addrandom() 
3840.	[port]		Check for arc4random_addrandom() before using it;
			it's been removed from OpenBSD 5.5. [RT #35907]
 2014-05-07 08:58:25 -07:00
Tinderbox User
abc71f216a update copyright notice 2014-05-02 23:45:19 +00:00
Mark Andrews
c25d9da3f1 add keyboard.h [RT #35887] 2014-05-02 10:19:10 +10:00
Tinderbox User
f6ea2b1d09 update copyright notice 2014-04-29 23:45:21 +00:00
Evan Hunt
3e5743068c [master] use-after-free in isc_radix_remove() 
3826.	[bug]		Corrected a use-after-free in isc_radix_remove().
			(This function is not used in BIND, but could have
			caused problems in programs linking to libisc.)
			[RT #35870]
 2014-04-29 15:21:46 -07:00
Mark Andrews
c11e46110b 3825. [bug] Address sign extension bug in isc_regex_validate. 
[RT #35758]
 2014-04-29 14:33:21 +10:00
Tinderbox User
06081a0d61 update copyright notice 2014-04-25 23:45:21 +00:00
Mark Andrews
1deeb567fa remove const 2014-04-25 14:26:41 +10:00
Mark Andrews
618053b8be additional places: 
3818.   [bug]           Stop lying to the optimizer that 'void *arg' is a
                        constant in isc_event_allocate.

(cherry picked from commit 39b5269577)
 2014-04-25 12:22:27 +10:00
Tinderbox User
37f7c4c673 update copyright notice 2014-04-24 23:45:21 +00:00
Mark Andrews
44c6deacdd additional changes for: 
3818.   [bug]           Stop lying to the optimizer that 'void *arg' is a
                        constant in isc_event_allocate.
 2014-04-24 18:59:01 +10:00
Mark Andrews
36e5ac0033 3819. [bug] NSEC3 hashes need to be able to be entered and 
displayed without padding.  This is not a issue for
                        currently defined algorithms but may be for future
                        hash algorithms. [RT #27925]
 2014-04-24 18:58:03 +10:00
Mark Andrews
e916c4f840 3818. [bug] Stop lying to the optimizer that 'void *arg' is a 
constant in isc_event_allocate.
 2014-04-24 13:43:59 +10:00
Evan Hunt
2ae159b376 [master] globally rename "delve" to "delv" 
3817.	[func]		The "delve" command is now spelled "delv" to avoid
			a namespace collision with the Xapian project.
			[RT #35801]
 2014-04-23 11:14:12 -07:00
Mark Andrews
2d1c1ee28a keyboard.h 2014-04-08 10:37:08 +10:00
Tinderbox User
1756e623f9 update copyright notice 2014-04-04 23:46:15 +00:00
Mark Andrews
866606b9c7 3802. [bug] Various header files were not being installed 2014-04-04 21:56:08 +11:00
Evan Hunt
4c4d6213e1 [master] prep 9.10.0rc1 2014-04-03 20:34:46 -07:00
Evan Hunt
f0e9d6e905 [master] fix gssapi probing on freebsd 
3801.	[port]		Fix probing for gssapi support on FreeBSD. [RT #35615]
 2014-04-03 19:52:03 -07:00
Mark Andrews
1fa64087e7 sigprocmask sets errno on error 2014-03-27 12:33:40 +11:00
Mark Andrews
b0e6f5dfd7 copy named-rrchecker.html 2014-03-14 11:16:13 +11:00
Tinderbox User
24a4fabc0b update copyright notice 2014-03-13 23:53:24 +00:00
Tinderbox User
3c15417fc1 update copyright notice 2014-03-13 23:46:07 +00:00
Evan Hunt
9896a01aeb [master] prep 9.10.0b2 2014-03-12 21:57:11 -07:00
Evan Hunt
acbb301e64 [master] better error output when initializing pkcs11 
3786.	[func]		Provide more detailed error codes when using
			native PKCS#11. "pkcs11-tokens" now fails robustly
			rather than asserting when run against an HSM with
			an incomplete PCKS#11 API implementation. [RT #35479]
 2014-03-12 20:52:01 -07:00
Tinderbox User
7bd4556414 update copyright notice 2014-03-10 23:46:12 +00:00
Evan Hunt
8cbf3b6fc3 [master] use adaptive locks when available 
3781.	[tuning]	Use adaptive mutex locks when available; this
			has been found to improve performance under load
			on many systems. "configure --with-locktype=standard"
			restores conventional mutex locks. [RT #32576]
 2014-03-10 12:14:35 -07:00
Evan Hunt
e29c2b3903 [master] fix misuses of isc__buffer functions, update comment 2014-03-06 17:26:21 -08:00
Tinderbox User
cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt
b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Tinderbox User
938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Evan Hunt
98922b2b2b [master] merge several interdependent fixes 
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
 2014-02-26 19:00:05 -08:00
Mark Andrews
86ec04712b #include <inttypes.h> 2014-02-27 11:57:51 +11:00
Evan Hunt
3a01ded15d [master] enable windows python tools 
3757.	[port]		Enable Python tools (dnssec-coverage,
			dnssec-checkds) to run on Windows. [RT #34355]
 2014-02-26 08:43:50 -08:00
Francis Dupont
2ab466bf79 more missing WIN32 docs 2014-02-22 03:01:56 +01:00
Evan Hunt
4a0beb64be [master] start prep for 9.10.0b1 2014-02-19 21:39:35 -08:00
Mark Andrews
e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt
6a3fa181d1 [master] add "--with-tuning=large" option 
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
 2014-02-18 22:36:14 -08:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Tinderbox User
72141595cf update copyright notice 2014-02-16 23:46:32 +00:00
Evan Hunt
1d761cb453 [master] delve 
3741.	[func]		"delve" (domain entity lookup and validation engine):
			A new tool with dig-like semantics for performing DNS
			lookups, with internal DNSSEC validation, using the
			same resolver and validator logic as named. This
			allows easy validation of DNSSEC data in environments
			with untrustworthy resolvers, and assists with
			troubleshooting of DNSSEC problems. (Note: not yet
			available on win32.) [RT #32406]
 2014-02-16 13:03:17 -08:00
Mark Andrews
2729aea3c1 3738. [bug] --enable-openssl-hash failed to build. [RT #35343] 2014-02-13 15:09:08 +11:00
Tinderbox User
1124950b35 update copyright notice 2014-02-12 23:46:27 +00:00
Mark Andrews
afdcff15c0 #ifdef PF_ROUTE use 2014-02-13 01:13:05 +11:00
Evan Hunt
dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Mark Andrews
850b5e8093 Add Linux support to: 
3733.   [func]          Improve interface scanning support.  Interface
                        information will be automatically updated if the
                        OS supports routing sockets (MacOS, *BSD, Linux).
                        Use "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-10 09:46:54 +11:00
Tinderbox User
81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Mark Andrews
6a47daef7e #ifdef PF_ROUTE 2014-02-07 20:36:48 +11:00
Mark Andrews
62ec9fd168 3733. [func] Improve interface scanning support. Interface 
information will be automatically updated if the
                        OS supports routing sockets.  Use
                        "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-07 17:16:37 +11:00
Evan Hunt
e5f9fa7e18 [master] deprecate isc_bitsrting 
3727.	[func]		The isc_bitstring API is no longer used and
			has been removed from libisc. [RT #35284]
 2014-02-06 15:36:13 -08:00
Evan Hunt
a8cdf2a2e7 [master] fixed win32 dig problem 
3724.   [bug]           win32: Fixed a bug that prevented dig and
                        host from exiting properly after completing
                        a UDP query. [RT #35288]
 2014-02-04 12:01:20 -08:00
Evan Hunt
48def18179 [master] silence coverity warnings 
- remove dead code in server.c
- initialize a struct tm.c
 2014-01-31 09:34:37 -08:00
Evan Hunt
0a35160f4e [master] prep 9.10.0a2 2014-01-30 18:02:26 -08:00
Mark Andrews
fbc0e37e0c 3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260] 2014-01-30 07:44:02 +11:00
Mark Andrews
b8cf73a3b3 3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when 
probing to see if it is possible to set dscp values
                        on a per packet basis. [RT #35252]

3716.   [bug]           The dns_request code was setting dcsp values when not
                        requested.  [RT #35252]
 2014-01-28 08:25:28 +11:00
Tinderbox User
85167bb10f update copyright notice 2014-01-24 23:46:22 +00:00
Evan Hunt
bff64bf12b [master] correct copyrights and attributions 
see RT #35423 for details; highlights:
    - remove license clauses 3 and 4 from NetBSD code
    - remove advertising clause from historical BSD code
    - add openssl advertising attributions
 2014-01-24 09:46:00 -08:00
Mark Andrews
db519a99ce remove src files not available for 'make depend' 2014-01-22 10:49:18 +11:00
Evan Hunt
1b255a0c4e [master] overlooked some memcpy->memmove changes with pkcs11 merge 2014-01-21 10:08:01 -08:00
Mark Andrews
e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Mark Andrews
64819a98a9 cast to unsigned char 2014-01-16 11:46:28 +11:00
Evan Hunt
90b513b2a0 [master] another build fix for pkcs11+atf+libtool 2014-01-15 12:07:04 -08:00
Evan Hunt
e4f484b7b7 [master] address compiler warnings 2014-01-15 09:35:44 -08:00
Mark Andrews
1b5dcef875 include <isc/tm.h>, <isc/lang.h> and <isc/types.h> 2014-01-15 20:42:22 +11:00
Evan Hunt
a147de10fe [master] portable strptime/timegm 
3709.	[port]		Use built-in versions of strptime() and timegm()
			on all platforms to avoid portability issues.
			[RT #35183]
 2014-01-14 23:17:47 -08:00
Evan Hunt
ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Evan Hunt
dc1cfff92a [master] fix win32 isc_time_set() 2014-01-11 22:01:40 -08:00
Evan Hunt
6736c84f11 [master] missing prototype in time.h 2014-01-10 20:19:17 -08:00
Evan Hunt
903247531a [master] portable replacement for timegm() 2014-01-10 19:22:02 -08:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt
f459b70c8e [master] one more win32 build error 2014-01-10 11:20:46 -08:00
Evan Hunt
480172bf6a [master] missing prototypes 2014-01-10 11:17:12 -08:00
Evan Hunt
1bb2f53b9f [master] fix win32 build problems 2014-01-10 10:58:06 -08:00
Mark Andrews
fd0f3e7cd8 add unit test for isc_time_parsehttptimestamp 2014-01-11 00:30:41 +11:00
Mark Andrews
52e6d8a36d add ISC_PLATFORM_NEEDSTRCASESTR 2014-01-10 23:53:41 +11:00
Mark Andrews
429ab67296 strptime returns time in the local time zone so use mktime 2014-01-10 23:44:59 +11:00
Evan Hunt
60fb67079e [master] add isc_string_strcasestr for portability 2014-01-09 22:04:03 -08:00
Evan Hunt
57a46f4b19 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 19:05:46 -08:00
Evan Hunt
789252d55f [master] stats improvements 
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
 2014-01-09 18:46:25 -08:00
Tinderbox User
431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
 2014-01-08 16:39:05 -08:00
Mark Andrews
2bdfb330af update copyrights 2013-12-05 15:04:53 +11:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature 
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
 2013-12-04 12:47:23 +11:00
Evan Hunt
43bbab6d0b [master] typo 2013-11-18 15:26:50 -08:00
Evan Hunt
434bfc3dfa [master] "in-view" zone option 
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
 2013-11-13 20:35:40 -08:00
Tinderbox User
a4fa22bf14 update copyright notice 2013-11-11 23:46:29 +00:00
Mark Andrews
0a47bc90af 3668. [bug] Fix cast in lex.c which could see 0xff treated as eof. 
[RT #34993]
 2013-11-11 10:49:28 +11:00
Mark Andrews
6100b17699 3662. [bug] 'host' could die if a UPD query timed out. [RT #34870] 2013-10-25 10:09:33 +11:00
Tinderbox User
bfc4a951c5 update copyright notice 2013-10-08 23:46:23 +00:00
Mark Andrews
03a9daede1 be consistent in how ISC_PLATFORM_USETHREADS is defined and used 2013-10-08 16:47:57 +11:00
Tinderbox User
4e3e8cbea0 update copyright notice 2013-10-08 04:13:49 +00:00
Mark Andrews
03152360db 3661. [bug] Address lock order reversal deadlock with inline zones. 
[RT #34856]
 2013-10-08 11:43:08 +11:00
Mark Andrews
368c4556c8 remove redudant #ifdef; address imprecise #ifdef usage 2013-10-02 11:59:39 +10:00
Evan Hunt
41dabe089f [master] remove namespace.h from installed files 2013-09-09 09:22:37 -07:00
Evan Hunt
09755f7270 [master] prep 9.10.0a1 release 2013-09-04 15:41:50 -07:00
Curtis Blackburn
c4348cb50f 3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is 
encountered. [RT #34668]
 2013-08-28 15:56:49 -05:00
Evan Hunt
7ade93c328 [master] fix build error when IP_TOS is undefined 2013-08-08 19:15:11 -07:00
Tinderbox User
44c016134f update copyright notice 2013-07-13 23:46:06 +00:00
Francis Dupont
41a6b3031e spelling 2013-07-13 01:39:41 +02:00
Evan Hunt
f4e309b177 [master] silence warning 2013-07-10 09:15:51 -07:00
Francis Dupont
a96e5ffbe0 spelling 2013-07-10 10:56:18 +02:00
Tinderbox User
ca48f47d88 update copyright notice 2013-07-09 23:46:11 +00:00
Evan Hunt
4b13ea47db [master] check for -ljson-c as well as -ljson 
3512.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]
 2013-07-09 16:43:59 -07:00
Evan Hunt
5b7abbef51 [master] added isc_safe_memcmp() 
3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]
 2013-07-09 11:47:16 -07:00
Evan Hunt
eb4458b478 [master] prevent exportlib deadlock 
3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]
 2013-07-06 18:23:41 -07:00
Tinderbox User
9c5faa2ba8 update copyright notice 2013-06-26 23:46:14 +00:00