Age | Commit message (Expand) | Author |
2019-04-01 | if inet6 is not available, warn, but carry on | Ted Unangst |
2018-12-27 | fifo isn't really the right data structure for varying expirations. | Ted Unangst |
2018-12-20 | zap whitespace | anton |
2018-12-18 | Rework previous: use getopt(3) to parse options passed to the worker process. | anton |
2018-12-18 | Rework how socket fds are passed around internally. This will allow | Ted Unangst |
2018-12-06 | add very experimental support for dns over https. (RFC 8484) | Ted Unangst |
2018-11-20 | move a magic constant into a magic define | Ted Unangst |
2018-10-26 | Unveil should work because this only opens the configuration file, | Theo de Raadt |
2018-09-10 | logmsg(LOG_ERR) -> logerr(); ok tedu@ | anton |
2018-09-08 | Check for malloc() failures. | anton |
2018-05-01 | Remove extraneous new line from error message. | anton |
2018-05-01 | The length field of a DNS packet must be network byte order encoded; ok tedu@ | anton |
2018-04-30 | allow limited setting of permanent A records. like unbound local-data. | Ted Unangst |
2018-02-11 | sysctl.h is no longer needed | Theo Buehler |
2018-02-10 | Pledge monitoring process; ok tedu@ | anton |
2018-02-07 | remove the magic dns port hijacking feature. it's complicated and | Ted Unangst |
2018-02-06 | when we get SIGHUP, close conffd so it's reopened (and rewound). | Ted Unangst |
2017-08-22 | Use waitpid()/EINTR idiom for the specific pid, rather than generic wait(), | Theo de Raadt |
2017-08-12 | stop pretending that qnames are always strings. treat everything as a | Ted Unangst |
2017-07-19 | there's no nul byte after a name that ends in a crazy compression pointer. | Ted Unangst |
2017-07-13 | add an option to listen to an address other than localhost, | Ted Unangst |
2017-07-04 | properly adjust the ttl of replies instead of freezing them in time | Ted Unangst |
2017-07-03 | don't bother caching invalid or very short lived responses | Ted Unangst |
2017-07-03 | check that a cachehit hasn't expired before using it. | Ted Unangst |
2017-05-31 | use strerror; from Edgar Pettijohn | Theo de Raadt |
2017-04-27 | clang warns about some of the strlcpy arguments here, which aren't the | Ted Unangst |
2017-04-13 | moving some code into a switch meant that break no longer stopped the loop. | Ted Unangst |
2017-04-06 | replace some long if/else chains with a switch | Ted Unangst |
2016-10-23 | unbreak by fixing obvious pastos | Christian Weisgerber |
2016-10-23 | listen on inet6 sockets as well. we need this because stolen inet6 sockets | Ted Unangst |
2016-10-16 | switch to a re-exec model instead of plain forking to reduce sharing. | Ted Unangst |
2016-10-15 | refactor the worker and monitor loops a little to make room for re-exec | Ted Unangst |
2016-10-15 | be more cautious about inspecting packets. use integer offsets instead of | Ted Unangst |
2016-10-15 | implement random casing for query names, also known as 0x20 hardening. | Ted Unangst |
2016-10-08 | a little more precision about reloading config. only reopen if it changed | Ted Unangst |
2016-10-08 | too many blank lines | Ted Unangst |
2016-10-07 | the parent mostly never crashes, but the child might. or the config file | Ted Unangst |
2016-10-07 | several big changes, tied together. | Ted Unangst |
2016-09-01 | naming a union 'sockthing' was a bit silly. sockun will do for now. | Ted Unangst |
2016-09-01 | print regular messages to stdout, not err | Ted Unangst |
2016-09-01 | scan responses for minimum ttl, and cache for min(ttl, 300) instead of | Ted Unangst |
2016-08-21 | introduce a union of sockaddr types and eliminate a lot of casts. | Ted Unangst |
2016-08-06 | reset timeout to null when relooping | Ted Unangst |
2016-07-02 | check cache tree for collisions when inserting replies. | Ted Unangst |
2016-06-05 | previous change (r1.27) converted to using non blocking sockets and | Ted Unangst |
2016-05-31 | with the kernel perm check fixed, we can do this kevent after setuid, | Ted Unangst |
2016-05-13 | fix logging. | Ted Unangst |
2016-05-02 | prepare userland for removing chroot(2) from allowed syscalls under pledge(2). | Sebastien Marie |
2016-01-03 | forgot to call RB_INIT. but yet things mostly worked... | Ted Unangst |
2015-12-17 | add return code to newrequest to distinguish between cache hit and error. | Ted Unangst |