update copyright notice / whitespace

4719. [bug] Address PVS static analyzer warnings. [RT #45946] (cherry picked from commit 34130ee25a904d34062ea1197bf5ac6c2e53c132)

4403. [bug] Rename variables and arguments that shadow: basename, clone and gai_error. (cherry picked from commit ecfa005085e9f23d95d3ca1fc23211284a919423)

4401. [misc] Change LICENSE to MPL 2.0.

[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]

update copyright notice / whitespace

4152. [func] Implement DNS COOKIE option. This replaces the experimental SIT option of BIND 9.10. The following named.conf directives are avaliable: send-cookie, cookie-secret, cookie-algorithm and nocookie-udp-size. The following dig options are available: +[no]cookie[=value] and +[no]badcookie. [RT #39928]

4145. [bug] Not all unassociated adb entries where being printed. [RT #37125]

added print.h includes, updated copyrights

Fix a crash due to use-after-free (#38495)

4076. [bug] Named could crash on shutdown with outstanding reload / reconfig events. [RT #38622]

update copyright notice / whitespace

4048. [bug] adb hash table was not being grown. [RT #38470]

[master] adjust max-recursion-queries 4021. [bug] Adjust max-recursion-queries to accommodate the need for more queries when the cache is empty. [RT #38104]

[master] refactor max-recursion-queries - the counters weren't set correctly when fetches timed out. instead we now pass down a counter object.

[master] limit recursion depth and iterative queries 4006. [security] A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500). The recursion depth limit is configured via the "max-recursion-depth" option. [RT #35780]

3912. [bug] Address some unrecoverable lookup failures. [RT #36330]

[rt36341] 3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]

silence coverity warning

update copyright notice

3855. [bug] Limit smoothed round trip time aging to no more than once a second. [RT #32909]

dec_adbstats should decrement rather than increment

[master] SIT/max-cache-size flag collision 3824. [bug] A collision between two flag values could cause problems with cache cleaning when SIT was enabled. [RT #35858]

adjust SIT computation

WIN32 master fixes

3744. [experimental] SIT: send and process Source Identity Tokens (which are similar to DNS Cookies by Donald Eastlake) and are designed to help clients detect off path spoofed responses and for servers to detect legitimate clients. SIT use a experimental EDNS option code (65001). SIT can be enabled via --enable-developer or --enable-sit. It is on by default in Windows. RRL processing as been updated to know about SIT with legitimate clients not being rate limited. [RT #35389]

[master] delve 3741. [func] "delve" (domain entity lookup and validation engine): A new tool with dig-like semantics for performing DNS lookups, with internal DNSSEC validation, using the same resolver and validator logic as named. This allows easy validation of DNSSEC data in environments with untrustworthy resolvers, and assists with troubleshooting of DNSSEC problems. (Note: not yet available on win32.) [RT #32406]

update copyright notice

[master] replace memcpy() with memmove(). 3698. [cleanup] Replaced all uses of memcpy() with memmove(). [RT #35120]

add partial legend for Address database dump

[master] "rndc flushtree -all <name>" 3606. [func] "rndc flushtree -all" flushes matching records in the ADB and bad cache as well as the DNS cache. (Without the "-all" option, flushtree will still only flush records from the DNS cache.) [RT #33970]

[master] fix win32 build 3595. [port] win32: Fix build problems introduced by change #3550. [RT #33807]

3593. [func] Update EDNS processing to better track remote server capabilities. [RT #30655]

add insist to try to prevent coverity false positive

3541. [bug] The parts if libdns was not being properly initialized in when built in libexport mode. [RT #33028]

[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]

silence compiler warnings

update copyrights

[master] accept >4g max-{,a}cache-size 3506. [func] When setting "max-cache-size" and "max-acache-size", the keyword "unlimited" is no longer defined as equal to 4 gigabytes (except on 32-bit platforms); it means literally unlimited. [RT #32358] 3505. [bug] When setting "max-cache-size" and "max-acache-size", larger values than 4 gigabytes could not be set explicitly, though larger sizes were available when setting cache size to 0. This has been corrected; the full range is now available. [RT #32358]

check the returns from isc_task_beginexclusive

[master] silence coverity warnings 3401. [bug] Addressed Coverity warnings. [RT #31484]

3353. [bug] Use a single task for task exclusive operations. [RT #29872]

3352. [bug] Ensure that learned server attributes timeout of the adb cache. [RT #29856]

update copyright notice

Merge statistics code (ATT SoW, rt24117) This includes the following changes: 3326. [func] Added task list statistics: task model, worker threads, quantum, tasks running, tasks ready. [RT #27678] 3325. [func] Report cache statistics: memory use, number of nodes, number of hash buckets, hit and miss counts. [RT #27056] 3324. [test] Add better tests for ADB stats [RT #27057] 3323. [func] Report the number of buckets the resolver is using. [RT #27020] 3322. [func] Monitor the number of active TCP and UDP dispatches. [RT #27055] 3321. [func] Monitor the number of recursive fetches and the number of open sockets, and report these values in the statistics channel. [RT #27054] 3320. [func] Added support for monitoring of recursing client count. [RT #27009] 3319. [func] Added support for monitoring of ADB entry count and hash size. [RT #27057]

Back out changes #3182 and #3202

Fix problem identified by CLANG: local variable not passed back to struct.

style, remove redudant assignment

update copyright notice

move declarations to start of block

fix edns0 retry issues (rt #23393/24964).

3074. [bug] Make the adb cache read through for zone data and glue learn for zone named is authoritative for. [RT #22842]

3069. [cleanup] Silence warnings messages from clang static analysis. [RT #20256]

update copyright notice

3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET). [RT #22521]

update copyright notice

2993. [func] Dynamically grow adb hash tables. [RT #21186]

2947. [func] Add new zone type "static-stub". It's like a stub zone, but the nameserver names and/or their IP addresses are statically configured. [RT #21474] (for 9.8.0)

remove accidental commit

INSIST that bucket in no longer ISC_ADB_INVALIDBUCKET after find_*_and_lock calls

update copyright notice

2937. [bug] Worked around an apparent race condition in over memory conditions. Without this fix a DNS cache DB or ADB could incorrectly stay in an over memory state, effectively refusing further caching, which subsequently made a BIND 9 caching server unworkable. This fix prevents this problem from happening by polling the state of the memory context, rather than making a copy of the state, which appeared to cause a race. This is a "workaround" in that it doesn't solve the possible race per se, but several experiments proved this change solves the symptom. Also, the polling overhead hasn't been reported to be an issue. This bug should only affect a caching server that specifies a finite max-cache-size. It's also quite likely that the bug happens only when enabling threads, but it's not confirmed yet. [RT #21818]

2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]

2538. [bug] cache/ADB memory could grow over max-cache-size, especially with threads and smaller max-cache-size values. [RT #19240]

update copyright notice

2537. [func] Added more statistics counters including those on socket I/O events and query RTT histograms. [RT #18802]

2465. [bug] Adb's handling of lame addresses was different for IPv4 and IPv6. [RT #18738]

silence coverity false positive

add lock comment

2366. [bug] Adb shutdown race. [RT #18021]

cleanups for LRU-caching code [RT #18018]

update copyright notice

2355. [func] Extend the number statistics counters available. [RT #17590]

2343. [bug] (Seemingly) duplicate IPv6 entries could be created in ADB. [RT #17837] (plan to merge to 9.[345])

update copyright notice

2330. [bug] Remove potential race condition when handling over memory events. [RT #17572] WARNING: API CHANGE: over memory callback function now needs to call isc_mem_waterack(). See <isc/mem.h> for details.

commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit

2232. [bug] dns_adb_findaddrinfo() could fail and return ISC_R_SUCCESS. [RT #17137]

update copyright notice

update copyright notice

2139. [bug] dns_view_find() was being called with wrong type in adb.c. [RT #16670]

update copyright notice

2079. [bug] The lame cache was not handling multiple types correctly. [RT #16361]

1940. [bug] Fixed a number of error conditions reported by Coverity.

silence compiler

1930. [port] HPUX: ia64 support. [RT #15473] 1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.

1900. [port] freebsd: pthread_mutex_init can fail if it runs out of memory. [RT #14995]

1889. [func] The lame cache is now done on a <qname,qclass,qtype> basis as some servers only appear to be lame for certain query types. [RT #14916]

1851. [doc] Doxygen comment markup. [RT #11398]

update copyright

1830. [bug] adb lame cache has sence of test reversed. [RT #13600]

1761. [bug] 'rndc dumpdb' didn't report unassociated entries. [RT #12971]

1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash() for conformance to the name space convention. Binary backward compatibility to the old function name is provided. [RT #12376]

1661. [bug] Restore dns_name_concatenate() call in adb.c:set_target(). [RT #11582]

1589. [func] DNSSEC lookaside validation. enable-dnssec -> dnssec-enable

update copyright notice