Commit Graph

19 Commits

Author SHA1 Message Date
W.C.A. Wijngaards
f6753a0f10 - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. 2022-08-01 13:24:40 +02:00
Dimitris Apostolou
c21d6af617
Fix typos 2021-11-13 16:56:15 +02:00
W.C.A. Wijngaards
ecb8aed2f2 - Add that log-servfail prints an IP address and more information
about one of the last failures for that query.
2021-04-29 10:24:35 +02:00
George Thessalonikefs
7f25bb4730 - ipsecmod: Better logging for detecting a cycle when attaching the
A/AAAA subquery.
2021-02-24 13:59:31 +01:00
W.C.A. Wijngaards
f3c2d05728 - Fix ipsecmod compile. 2019-12-06 07:59:55 +01:00
W.C.A. Wijngaards
2a4e840be4 - Fix Unchecked NULL Pointer in dns64_inform_super()
and ipsecmod_new(), reported by X41 D-Sec.
2019-11-19 15:48:18 +01:00
W.C.A. Wijngaards
09845779d5 - Fix CVE-2019-18934, shell execution in ipsecmod. 2019-11-19 10:05:18 +01:00
Wouter Wijngaards
000e75581b Fixup that it does not set prefetch_ttl twice, but sets the new serve_expired_ttl member of the reply ttls.
git-svn-id: file:///svn/unbound/trunk@4877 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-30 08:03:29 +00:00
Ralph Dolmans
2e5e31e8ac - Added serve-expired-ttl and serve-expired-ttl-reset options.
git-svn-id: file:///svn/unbound/trunk@4876 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-08-28 14:21:56 +00:00
Wouter Wijngaards
a40e8ae321 commentfix.
git-svn-id: file:///svn/unbound/trunk@4170 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 13:26:26 +00:00
George Thessalonikefs
95544096bf - Use qstate's region for IPSECKEY rrset (ipsecmod).
git-svn-id: file:///svn/unbound/trunk@4169 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 13:22:06 +00:00
Wouter Wijngaards
58fc4b8ea8 slightly more generic for rcodes that are not SERVFAIL.
git-svn-id: file:///svn/unbound/trunk@4168 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:51:45 +00:00
Wouter Wijngaards
cf2da96a28 don't accidentally increase repttl if it was small because of another (short-ttl) RRset in the reply. There would be cache replies trying to work with expired RRsets if this extra if wasn't there.
git-svn-id: file:///svn/unbound/trunk@4167 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:43:48 +00:00
Wouter Wijngaards
e1b6145e5c descript can have NULL _name for unknown types (even though only A, AAAA at this point), but the type_buf() routine works all the time.
git-svn-id: file:///svn/unbound/trunk@4166 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:39:43 +00:00
Wouter Wijngaards
903fe8db7e but my fix for the comment was wrong, remove this part of the fix.
git-svn-id: file:///svn/unbound/trunk@4165 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:20:58 +00:00
Wouter Wijngaards
39be1377e2 cast size_t to long for print as %ld.
git-svn-id: file:///svn/unbound/trunk@4164 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:19:35 +00:00
Wouter Wijngaards
de4c7bd317 fixup comment.
git-svn-id: file:///svn/unbound/trunk@4163 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-17 12:13:45 +00:00
Wouter Wijngaards
305f6f0295 compiler warning fixes.
git-svn-id: file:///svn/unbound/trunk@4160 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 13:25:49 +00:00
George Thessalonikefs
491b0a26e4 - Implemented opportunistic IPsec support module (ipsecmod).
- Some whitespace fixup.


git-svn-id: file:///svn/unbound/trunk@4158 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-05-16 12:39:24 +00:00