WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-08 10:57:43 +02:00
Code Issues Packages Projects Releases Wiki Activity
8,538 Commits 29 Branches 215 Tags
auth-load-thread
Commit Graph
50 Commits
Author SHA1 Message Date
akhanin-dnsfandGitHub 307fc6f062 - Fix bounds check in packed_rr_to_string, it checked the (#1488) 
assembled rr length against the output string length
  dest_len, instead of against the size of the rr buffer it
  writes into. Callers in cachedump.c and remote.c pass a
  dest_len larger than that buffer.
- Unit test for packed_rr_to_string.
 2026-08-06 17:04:05 +02:00
W.C.A. Wijngaards 91ac449bcd Merge branch 'branch-1.25.2' 2026-07-22 11:33:54 +02:00
W.C.A. Wijngaards 2ce2ca3691 - Fix CVE-2026-55717, 'serve-expired-client-timeout' and 'response-ip' 
CNAME redirect could lead to a crash. Thanks to Qifan Zhang, Palo
  Alto Networks, for the report. In addition, thanks to Xin Wang,
  Jiapeng Li, and Jiajia Liu, Northwestern Polytechnical University,
  for also reporting this issue.
 2026-07-22 10:17:32 +02:00
W.C.A. Wijngaards b1d1dcb3b6 - Fix that dump_cache has a larger buffer for records, 
and it checks that an owner name does not collide with BADRR
  on the input, and changes verbosity on the log of failure in
  rrset to string.  Thanks to Qifan Zhang, Palo Alto Networks,
  for the report.
 2026-06-03 14:51:16 +02:00
W.C.A. Wijngaards 8ada1bd88d - Fix to relax assertions after the TTL 0 handling change. 
This relaxes an assertion in cachedb (it fails instead),
  and for packet_rrset_copy_region.
 2026-05-08 10:09:41 +02:00
Yorgos Thessalonikefs 73e408f1d0 A few changes for TTL processing: 
- Cached messages that reach 0 TTL are considered expired. This prevents
  Unbound itself from issuing replies with TTL 0 and possibly causing a
  thundering herd at the last second. Upstream replies of TTL 0 still
  get the usual pass-through but they are not considered for caching
  from Unbound or any of its caching modules.
- 'serve-expired-reply-ttl' is changed and is now capped by the original
  TTL value of the record to try and make some sense when replying
  with expired records.
- TTL decoding was updated to adhere to RFC8767 section 4 where a set
  high-order bit means the value is positive instead of 0.
 2025-09-15 10:03:35 +02:00
dyunwei eb7eb5ce68 Fix NLnetLabs#981: dump_cache truncates large records. 2024-01-09 14:17:31 +08:00
Roland van Rijswijk-Deij d253db04fd Addressed review comment from @wcawijngaards 2021-01-22 18:56:09 +00:00
Ubuntu b5b79e3a36 Add feature to serve original TTLs rather than decrementing ones 2020-07-15 15:15:45 +00:00
gthessandGitHub f7fe95ad7b Serve stale (#159) 
- Added serve-stale functionality as described in
  draft-ietf-dnsop-serve-stale-10. `serve-expired-*` options can be used
  to configure the behavior.
- Updated cachedb to honor `serve-expired-ttl`; Fixes #107.
- Renamed statistic `num.zero_ttl` to `num.expired` as expired replies
  come with a configurable TTL value (`serve-expired-reply-ttl`).
- Fixed stats when replying with cached, cname-aliased records.
- Added missing default values for redis cachedb backend.
 2020-02-05 14:20:27 +01:00
Ralph Dolmans 4ac33aa104 - Merge clean up 
- revert dname2str off by one fix
- fix str2dname off by one at right location
 2019-09-09 17:13:08 +02:00
Ralph Dolmans ba67920f9a - IXFR/AXFR support for RPZ 2019-04-25 14:46:45 +02:00
Ralph Dolmans 4d06c36342 - Added root-key-sentinel support 
git-svn-id: file:///svn/unbound/trunk@4652 be551aaa-1e26-0410-a405-d3ace91eadb9
 2018-04-24 09:03:49 +00:00
Wouter Wijngaards c010e93d4a - Fix to rename internally used types from _t to _type, because _t 
type names are reserved by POSIX.
- iana portlist update


git-svn-id: file:///svn/unbound/trunk@3989 be551aaa-1e26-0410-a405-d3ace91eadb9
 2017-01-19 10:25:41 +00:00
Wouter Wijngaards 72a5931a68 - remove NULL-checks before free, patch from Michael McConville. 
git-svn-id: file:///svn/unbound/trunk@3580 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-11 10:26:15 +00:00
Wouter Wijngaards b2bdce46be - rename ldns subdirectory to sldns to avoid name collision. 
git-svn-id: file:///svn/unbound/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 10:21:38 +00:00
Wouter Wijngaards 2b90f38a70 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: file:///svn/unbound/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
Wouter Wijngaards d3cbd76546 - Fix sldns to use sldns_ prefix for all ldns_ variables. 
git-svn-id: file:///svn/unbound/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 09:11:16 +00:00
Wouter Wijngaards 29e96e86c9 - separate ldns into core ldns inside ldns/ subdirectory. No more 
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: file:///svn/unbound/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:09:26 +00:00
Wouter Wijngaards f1fd2b53eb - Fix for 2038, with time_t instead of uint32_t. 
git-svn-id: file:///svn/unbound/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-20 12:23:42 +00:00
Wouter Wijngaards a1c76554a2 - Makefile changed for BSD make compatibility. 
git-svn-id: file:///svn/unbound/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-10 18:44:06 +00:00
Wouter Wijngaards 6d77834955 parent-child misconfigured data lookup. 
git-svn-id: file:///svn/unbound/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-28 14:15:29 +00:00
Wouter Wijngaards 147d47eee7 Move includes to code files. 
git-svn-id: file:///svn/unbound/trunk@2035 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-12 15:17:48 +00:00
Wouter Wijngaards 59c529bada Fix lookup of domains with parent-child zonecut data differences. 
git-svn-id: file:///svn/unbound/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-08 13:37:59 +00:00
Wouter Wijngaards 28be658942 debug routines and first brazilian prime has been done. 
git-svn-id: file:///svn/unbound/trunk@1770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-21 15:27:23 +00:00
Wouter Wijngaards 701b4ccdd6 autotrust event_update routine. 
git-svn-id: file:///svn/unbound/trunk@1766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-18 15:36:46 +00:00
Wouter Wijngaards 265c199445 Fixup negative TTLs Attila Nagy has reported. 
git-svn-id: file:///svn/unbound/trunk@1306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-16 13:12:32 +00:00
Wouter Wijngaards 91138fc32a doxygen fixup. 
git-svn-id: file:///svn/unbound/trunk@1267 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-23 11:47:09 +00:00
Wouter Wijngaards de0f903d37 load from cache works 
git-svn-id: file:///svn/unbound/trunk@1265 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-23 09:23:38 +00:00
Wouter Wijngaards 30478d3e17 nicer indentation. 
git-svn-id: file:///svn/unbound/trunk@1012 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-03-03 10:28:12 +00:00
Wouter Wijngaards 99dfad38b2 faster message parse. 
git-svn-id: file:///svn/unbound/trunk@985 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-22 12:54:14 +00:00
Wouter Wijngaards f187e1da7e fptrwlist and remove oldhack with islocked param. 
git-svn-id: file:///svn/unbound/trunk@805 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-12-04 21:34:53 +00:00
Wouter Wijngaards cedeaa8316 ds2ke and nsec work. 
git-svn-id: file:///svn/unbound/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-17 11:41:49 +00:00
Wouter Wijngaards 448a9f414f fixups for memory. 
git-svn-id: file:///svn/unbound/trunk@512 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-14 13:15:36 +00:00
Wouter Wijngaards ff4f04de2a security status. 
git-svn-id: file:///svn/unbound/trunk@495 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 08:27:23 +00:00
Wouter Wijngaards 2e352bc48c uses CNAMEs and DNAMEs from the cache. 
git-svn-id: file:///svn/unbound/trunk@380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-06-11 14:55:10 +00:00
Wouter Wijngaards 019816dcf1 Tested serval targets, with CNAME's and indirection for recursion and 
slumber list.


git-svn-id: file:///svn/unbound/trunk@374 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-06-07 13:21:04 +00:00
Wouter Wijngaards a11cc0c530 Fixup cname target name readout. 
git-svn-id: file:///svn/unbound/trunk@373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-06-07 10:38:02 +00:00
Wouter Wijngaards aaec3572e4 debug work. 
git-svn-id: file:///svn/unbound/trunk@371 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-06-05 15:04:01 +00:00
Wouter Wijngaards 5eef2381f0 Process target responses, case preservation. 
git-svn-id: file:///svn/unbound/trunk@365 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-06-04 13:53:01 +00:00
Wouter Wijngaards 635461389c iterator work. 
git-svn-id: file:///svn/unbound/trunk@348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-30 11:18:17 +00:00
Wouter Wijngaards 1a9238ca5f message lookup and copy to region. 
git-svn-id: file:///svn/unbound/trunk@343 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-29 10:32:11 +00:00
Wouter Wijngaards c7a9776d91 - Acknowledge use of unbound-java code in iterator. Nicer readme. 
- services/cache/dns.c DNS Cache. Hybrid cache uses msgcache and
         rrset cache from module environment.
       - packed rrset key has type and class as easily accessable struct
         members. They are still kept in network format for fast msg encode.
       - dns cache find_delegation routine.


git-svn-id: file:///svn/unbound/trunk@339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-25 12:02:37 +00:00
Wouter Wijngaards cc48ec587f Fixes. 
git-svn-id: file:///svn/unbound/trunk@330 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-22 15:02:39 +00:00
Wouter Wijngaards ccb924d55f LRU touch of RRsets. Pretty complicated to do. 
git-svn-id: file:///svn/unbound/trunk@324 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-16 12:48:48 +00:00
Wouter Wijngaards 44ef71ff6c working on trust of rrsets. 
git-svn-id: file:///svn/unbound/trunk@281 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-04 10:10:52 +00:00
Wouter Wijngaards caa76487f8 Alloc cache per thread gets used for deleted items. 
git-svn-id: file:///svn/unbound/trunk@280 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-04 08:05:56 +00:00
Wouter Wijngaards 8420d0b819 Use packedrrset msgformat in service. 
git-svn-id: file:///svn/unbound/trunk@277 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-05-03 15:34:03 +00:00
Wouter Wijngaards 6457115869 Commit code, and see if unit test is fixed (with less busy open). 
git-svn-id: file:///svn/unbound/trunk@233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-04-10 07:11:57 +00:00
Wouter Wijngaards d366a7a660 Memory layout rrsets. 
git-svn-id: file:///svn/unbound/trunk@230 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-04-04 13:02:13 +00:00