ad21dbd1c2
Cookie secret file ( #1090 )
...
* - cookie-secret-file, define struct.
* - cookie-secret-file, add config option, create, read and delete struct.
* - cookie-secret-file, check cookie secrets for cookie validation.
* - cookie-secret-file, unbound-control add_cookie_secret, drop_cookie_secret,
activate_cookie_secret and print_cookie_secrets.
* - cookie-secret-file, test and fix locks, renew writes a fresh cookie,
staging cookies get a fresh cookie and spelling in error message.
* - cookie-secret-file, remove unused variable from cookie file unit test.
* Remove unshare and faketime dependencies for cookie_file test; documentation nits.
---------
Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl >
2024-08-02 13:32:08 +02:00
W.C.A. Wijngaards
6106528a50
- Fix testbound for alloc stats strdup in util/alloc.c.
2024-08-02 08:58:22 +02:00
W.C.A. Wijngaards
befa7d8cd8
- Fix that alloc stats has strdup checks, it stops debuggers from
...
complaining about mismatch at free time.
2024-08-02 08:54:54 +02:00
W.C.A. Wijngaards
5bea29b01c
- For #1110 : Test for fallthrough attribute in configure and add
...
fallthrough attribute annotations.
2024-07-23 09:47:42 +02:00
W.C.A. Wijngaards
c3dd6a2dbd
- Add dnstap-sample-rate that logs only 1/N messages, for high volume
...
server environments. Thanks Dan Luther.
2024-07-19 10:04:40 +02:00
W.C.A. Wijngaards
3adb9c8f92
- Fix #1103 : unbound 1.20.0 segmentation fault with nghttp2.
2024-07-12 16:11:29 +02:00
W.C.A. Wijngaards
6b319c97ee
- Fix compile warnings in fptr_wlist.c.
2024-07-03 16:42:52 +02:00
W.C.A. Wijngaards
6eb3992c9e
- Fix to remove unneeded linebreak in fptr_wlist.c.
2024-07-03 15:51:22 +02:00
W.C.A. Wijngaards
a335e601e4
ipset-pf-support, move startup and destartup to the front of the module
...
func block functions, modstack call deinit function names, and detect
module change when no startup functions are needed.
2024-07-03 13:53:44 +02:00
W.C.A. Wijngaards
ff653a7ef8
Call module init init again, and new function startup and destartup.
...
NULL can be used if the function is not used. Open shared ports during
reload. Deinit is called during reload.
2024-07-01 16:10:07 +02:00
W.C.A. Wijngaards
fd11cd9182
ipset-pf-support, fix compilation, close of pf socket.
2024-07-01 14:54:45 +02:00
W.C.A. Wijngaards
3953f827fb
Merge branch 'master' of https://github.com/madroach/unbound into ipset-pf-support
2024-07-01 14:36:33 +02:00
W.C.A. Wijngaards
08050dc939
- Fix #1091 : Build fails with OpenSSL >= 3.0 built with
...
OPENSSL_NO_DEPRECATED.
2024-06-17 12:28:45 +02:00
W.C.A. Wijngaards
1974732d19
- Fix typos for 'the the' in text.
2024-06-06 09:35:57 +02:00
W.C.A. Wijngaards
86fe9cbce5
- Fix to squelch connection reset by peer errors from log. And fix
...
that the tcp read errors are labeled as initial for the first calls.
2024-06-03 12:14:51 +02:00
Yorgos Thessalonikefs and GitHub
6f030e9672
Proper parent identification for dynamically entered local zones ( #1076 )
...
- Fix #1059 : Intermittent DNS blocking failure with local-zone and
always_nxdomain. Addition of local_zones dynamically via
unbound-control was not finding the zone's parent correctly.
2024-05-24 15:21:40 +02:00
W.C.A. Wijngaards
d149e755fd
- Fix for parse end of forward-zone, stub-zone and view.
2024-05-21 12:04:57 +02:00
W.C.A. Wijngaards
86ee8ccd12
- Fix to print a parse error when config is read with no name for
...
a forward-zone, stub-zone or view.
2024-05-21 11:54:18 +02:00
W.C.A. Wijngaards
95669855fb
- Fix to squelch udp connect errors in the log at low verbosity about
...
invalid argument for IPv6 link local addresses.
2024-05-08 16:40:41 +02:00
W.C.A. Wijngaards
c085a53268
- Fix for #1062 : declaration before statement, avoid print of null,
...
and redundant check for array size.
And changelog note for merge of #1062 .
2024-05-07 14:05:21 +02:00
zhailiangliang
4497e8a154
Fix potential overflow bug while parsing port in function cfg_mark_ports
2024-05-07 11:35:52 +00:00
W.C.A. Wijngaards
c3206f4568
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
...
from the Network and Information Security Lab of Tsinghua University
for reporting it.
2024-05-01 10:10:58 +02:00
W.C.A. Wijngaards
9abed3fc83
- Fix doxygen comment for errinf_to_str_bogus.
2024-04-29 13:42:26 +02:00
Yorgos Thessalonikefs
63a6b7b255
- Cleanup unnecessary strdup calls for EDE strings.
2024-04-29 10:15:19 +02:00
W.C.A. Wijngaards
7c5e765b3b
- Fix cachedb with serve-expired-client-timeout disabled. The edns
...
subnet module deletes global cache and cachedb cache when it
stores a result, and serve-expired is enabled, so that the global
reply, that is older than the ecs reply, does not return after
the ecs reply expires.
2024-04-26 13:32:15 +02:00
Wouter Wijngaards and GitHub
ced9762b14
Merge pull request #1041 from NLnetLabs/stubfwd-unshare
...
Stub and Forward unshare
2024-04-25 11:11:00 +02:00
W.C.A. Wijngaards
cccf5e73c0
- Fixup compile without cachedb.
2024-04-10 11:33:52 +02:00
W.C.A. Wijngaards
f3f85e5a11
- Fixup compile without cachedb.
2024-04-10 11:29:10 +02:00
W.C.A. Wijngaards
d98c7b9ae3
- Implement cachedb-check-when-serve-expired: yes option, default
...
is enabled. When serve expired is enabled with cachedb, it first
checks cachedb before serving the expired response.
2024-04-10 11:21:28 +02:00
zhailiangliang
411e843fc4
Add loongarch support:
...
1. update config.guess(2024-01-01) and config.sub(2024-01-01)
2. add loongarch to little endian support
2024-04-09 11:15:14 +08:00
Yorgos Thessalonikefs
708d5229ae
- Merge #1027 : Introduce 'cache-min-negative-ttl' option.
2024-04-05 11:44:37 +02:00
W.C.A. Wijngaards
48113cfaba
- fast-reload, unshared stub hints, making the structure locked, with an rwlock.
2024-04-03 13:55:57 +02:00
W.C.A. Wijngaards
f2fb498c69
- fast-reload, unshare forwards, making the structure locked, with an rwlock.
2024-04-03 13:55:54 +02:00
Yorgos Thessalonikefs
91e8e0e511
- Fix #1035 : Potential Bug while parsing port from the "stub-host"
...
string; also affected forward-zones and remote-control host
directives.
2024-04-03 13:37:57 +02:00
W.C.A. Wijngaards
dfff8d23cf
- For #1040 : adjust error text and disallow negative ports in other
...
parts of cfg_mark_ports.
2024-04-03 10:16:18 +02:00
zhailiangliang
193401e754
fix heap-buffer-overflow issue in function cfg_mark_ports of file util/config_file.c
2024-04-03 15:40:58 +08:00
W.C.A. Wijngaards
e1aeabde44
- Fix for crypto related failures to have a better error string.
2024-03-28 09:58:57 +01:00
W.C.A. Wijngaards
fe393ac355
- Fix comment in lruhash space function.
2024-03-27 12:30:00 +01:00
W.C.A. Wijngaards
3ea078baf6
- Fix for #1032 , add safeguard to make table space positive.
2024-03-27 11:49:20 +01:00
W.C.A. Wijngaards
eb3e1ae24f
- Fix #1032 : The size of subnet_msg_cache calculation mistake cause
...
memory usage increased beyond expectations.
2024-03-27 11:45:34 +01:00
W.C.A. Wijngaards
2993437eaa
- Fix that addrinfo is not kept around but copied and freed, so that
...
log-destaddr uses a copy of the information, much like NSD does.
2024-03-15 13:39:49 +01:00
Yorgos Thessalonikefs
025881d0e9
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
...
negative answers overriding 'cache-min-ttl'.
2024-03-12 11:24:59 +01:00
W.C.A. Wijngaards
ccbe31c21f
- Fix trim of EDE text from large udp responses from spinning cpu.
2024-02-22 16:22:31 +01:00
W.C.A. Wijngaards
56a2b564ef
Merge commit '92f2a1ca690a44880f4c4fa70a4b5a4b029aaf1c'
2024-02-13 13:58:09 +01:00
W.C.A. Wijngaards
9a00877af9
Merge commit '882903f2fa800c4cb6f5e225b728e2887bb7b9ae'
2024-02-13 13:57:56 +01:00
W.C.A. Wijngaards
92f2a1ca69
- Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
2024-02-13 13:02:43 +01:00
W.C.A. Wijngaards
882903f2fa
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
...
exhaust CPU resources and stall DNS resolvers.
2024-02-13 13:02:08 +01:00
W.C.A. Wijngaards
1f46d5945b
- Fix for #997 : Print details for SSL certificate failure.
2024-01-22 09:40:36 +01:00
dyunwei
eb7eb5ce68
Fix NLnetLabs#981: dump_cache truncates large records.
2024-01-09 14:17:31 +08:00
Wouter Wijngaards and GitHub
f80f65d58c
Merge pull request #985 from k-akashi/dnstap_dot_doh
...
Add DoH and DoT to dnstap message
2024-01-03 10:36:38 +01:00
