| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | correctly handle read(2) return value. |   eric | 2019-09-28 | 1 | -3/+10 |
| | | | | | | | fix issue reported by Mikolaj Kucharski. ok martijn@ deraadt@ | ||||
| * | Unbreak tree. Last minute changes are evil. |   otto | 2019-01-14 | 1 | -2/+2 |
| | | |||||
| * | There are cases where a program doing dns requests wants to set the | otto | 2019-01-14 | 1 | -1/+3 |
| | | | | | | Checking Disabled flag. Introduce a RES flag to do so. ok krw@ deraadt@ eric@ | ||||
| * | use recallocarray to resize buffer - ensures that detritus from previous |   deraadt | 2017-03-15 | 1 | -2/+2 |
| | | | | | | lookups isn't left lying around the address space. ok eric | ||||
| * | don't need to handle the malloc case special, since realloc works | deraadt | 2017-03-14 | 1 | -9/+1 |
| | | | | | | with NULL ok eric | ||||
| * | Add support for RES_USE_DNSSEC |   jca | 2017-02-27 | 1 | -4/+5 |
| | | | | | | | | | | | | | RES_USE_DNSSEC is implemented by setting the DNSSEC DO bit in outgoing queries. The resolver is then supposed to set the AD bit in the reply if it managed to validate the answer through DNSSEC. Useful when the application doesn't implement validation internally. This scheme assumes that the validating resolver is trusted and that the communication channel between the validating resolver and and the client is secure. ok eric@ gilles@ | ||||
| * | Put a common flags field in the query struct, rather than in some | jca | 2017-02-27 | 1 | -3/+3 |
| | | | | | | | | | | elements of the union. This field is for internal asr flags. The flags in "struct rrset" and "struct ni" are different kinds of flags. ok eric@ | ||||
| * | Use more specific error codes for invalid packets. | eric | 2017-02-18 | 1 | -4/+15 |
| | | | | | | | | | In particular, truncated packets without the TC flag set (non-compliant server sending too large packets) now fail with EOVERFLOW instead of EINVAL, so the TCP fallback mechanism can work. feedback and ok krw@ jca@ benno@ | ||||
| * | Add EDNS0 support. | jca | 2017-02-18 | 1 | -3/+5 |
| | | | | | | | | EDNS allows for various DNS extensions, among which UDP DNS packets size bigger than 512 bytes. The default is still to not advertize anything. ok eric@ | ||||
| * | Increase UDP packet buffer to 4096 bytes from 512. There are some really |   krw | 2017-02-17 | 1 | -2/+4 |
| | | | | | | | | | | | broken DNS servers out there that send packets >512 bytes w/o even the courtesy of trying to use EDNS0. A partial workaround as more complete packet parsing solutions are worked on. ok jca@ eric@ | ||||
| * | Switch to using SOCK_DNS flag, rather than the dnssocket() and | deraadt | 2015-10-23 | 1 | -3/+4 |
| | | | | | | | dnssonnect() calls. Be a bit careful crossing over this, need a kernel no older than Monday. ok guenther tedu semarie | ||||
| * | libc DNS functions will now use the new dnssocket() / dnsconnect() | deraadt | 2015-10-18 | 1 | -3/+3 |
| | | | | | | | | | | | | system calls. These signal to the pledge kernel code that a DNS transaction is happening. These special sockets only work well with port 53 (there are some cute plans...). Programs calling pledge "inet" will not work! You need pledge "dns", and of course, you need a fairly fresh kernel. ok guenther kettenis tedu | ||||
| * | remove bogus includes of err.h | eric | 2015-09-20 | 1 | -2/+1 |
| | | |||||
| * | Wrap <asr.h> so internal calls go direct and all the symbols are weak |   guenther | 2015-09-14 | 1 | -1/+3 |
| | | |||||
| * | Hide all unnecessary asr / resolver related API with _ prefixes. | deraadt | 2015-09-09 | 1 | -27/+27 |
| | | | | | direction & ok guenther | ||||
| * | Use SOCK_NONBLOCK in a couple more places | guenther | 2015-09-09 | 1 | -11/+3 |
| | | | | | ok deraadt@ | ||||
| * | Rename print_sockaddr() to avoid symbol visibility problems | jca | 2015-06-20 | 1 | -3/+3 |
| | | | | | | | print_sockaddr is internal to asr, and conflicts with ports/net/samba4. ok eric@ | ||||
| * | Make the asr API public. Install asr.h to /usr/include.h and manpages. | eric | 2014-03-26 | 1 | -2/+4 |
| | | | | | | | Include tweaks suggested by mpi@ ok deraadt@ | ||||
| * | Cleanup and simplify the API to be exposed. Use better names for | eric | 2014-03-25 | 1 | -35/+34 |
| | | | | | | | structures, functions and defines. discussed with and ok deraadt@ guenther@ | ||||
| * | prefix structure names to avoid ambiguity and possible collisions when | eric | 2014-03-14 | 1 | -15/+15 |
| | | | | | | | the API gets public. ok deraadt@ | ||||
| * | Make some symbols static and prefix all visible symbols with asr_ | eric | 2013-07-12 | 1 | -22/+22 |
| | | | | | | | to prevent collisions with third-party programs. suggested by sthen@, ok theo@ | ||||
| * | iterating over the ns list only matters for res_send_async.c, so move | eric | 2013-06-01 | 1 | -3/+32 |
| | | | | | things around. | ||||
| * | Do not take external buffers for storing DNS responses in the internal | eric | 2013-04-30 | 1 | -48/+13 |
| | | | | | | async API. That is actually useless and it makes the code more complicated. The required buffers are always allocated when needed. | ||||
| * | spacing | deraadt | 2013-04-14 | 1 | -2/+2 |
| | | |||||
| * | do not fail on EINTR | eric | 2013-04-05 | 1 | -4/+16 |
| | | | | | suggested by deraadt@ | ||||
| * | Use MSG_NOSIGNAL when writing DNS queries over TCP sockets to ensure |   matthew | 2013-04-03 | 1 | -2/+7 |
| | | | | | | | we don't trigger SIGPIPE. ok millert | ||||
| * | add comment for how EINPROGRESS is handled there. | eric | 2013-04-02 | 1 | -1/+6 |
| | | |||||
| * | better implementation for tcp_read() that can get the packet length in | eric | 2013-04-02 | 1 | -22/+33 |
| | | | | | | | multiple read. prodded by deraadt@ | ||||
| * | space cleanup; ok eric | deraadt | 2013-04-01 | 1 | -2/+2 |
| | | |||||
| * | space cleanup; ok eric | deraadt | 2013-04-01 | 1 | -2/+2 |
| | | |||||
| * | simpler and saner implementation for tcp_write(). now fully handles | eric | 2013-04-01 | 1 | -38/+15 |
| | | | | | | | short writes. prodded by deraadt@ | ||||
| * | Principle of least astonishment: implement nameserver retry/backoff as | eric | 2013-03-31 | 1 | -5/+1 |
| | | | | | in the former resolver. | ||||
| * | Only use the search domains for DNS lookups, as the current resolver does. | eric | 2013-03-27 | 1 | -2/+2 |
| | | | | | | Better not diverge too much in behavior at this point. Typo fix and doc update while there. | ||||
| * | knf | eric | 2012-11-24 | 1 | -7/+6 |
| | | |||||
| * | make separate structures for pack and unpack | eric | 2012-11-24 | 1 | -7/+7 |
| | | |||||
| * | cleanup asr_debug.c | eric | 2012-09-09 | 1 | -3/+3 |
| | | |||||
| * | use proper macros for debug traces. | eric | 2012-09-09 | 1 | -65/+25 |
| | | |||||
| * | rename function to avoid symbol clash | eric | 2012-07-07 | 1 | -6/+3 |
| | | |||||
| * | Import asr, an experimental async resolver implementation. | eric | 2012-04-14 | 1 | -0/+809 |
| The idea is to eventually replace the existing resolver with something better. Time to start working on it in tree. ok deraadt@ | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |