summaryrefslogtreecommitdiffstats
path: root/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* lib/dnssec: rename 'check_crypto_limit' to 'account_crypto_limit'Oto Šťáva2024-03-051-4/+7
* lib/cache: bump CACHE_VERSIONVladimír Čunát2024-02-231-1/+1
* lib/dnssec: fix imprecise assertionVladimír Čunát2024-02-231-1/+1
* mitigate KeyTrap DoS = CVE-2023-50387Vladimír Čunát2024-02-133-4/+11
* mitigate KeyTrap DoS = CVE-2023-50387Vladimír Čunát2024-02-136-0/+47
* lib/resolve kr_request_set_extended_error(): tweak prioritiesVladimír Čunát2024-02-131-1/+1
* lib/dnssec kr_rrset_validate_with_key(): deduplicate cleanupVladimír Čunát2024-02-131-6/+5
* validator: compatibility with older libknot versionsVladimír Čunát2024-02-121-1/+1
* validator: refuse to validate answers with more than 8 NSEC3 recordsVladimír Čunát2024-02-121-0/+18
* validator: limit the amount of work on SHA1 in NSEC3 proofsVladimír Čunát2024-02-121-0/+12
* lib/cache: limit the amount of work on SHA1Vladimír Čunát2024-02-122-0/+26
* validator: similarly also limit excessive NSEC3 salt lengthVladimír Čunát2024-02-125-11/+36
* validator: lower the NSEC3 iteration limit (150 -> 50)Vladimír Čunát2024-02-121-5/+2
* compatibility with libknot's master (3.4 WIP)Vladimír Čunát2024-02-062-1/+12
* lib/zonecut.c fetch_addr(): resurrect filtering by NO_IPV*Vladimír Čunát2023-11-031-2/+5
* avoid knot_pkt_default_padding_size()Vladimír Čunát2023-07-101-1/+9
* treewide: fix -Wstrict-prototypesVladimír Čunát2023-06-085-6/+6
* lib/cache pkt_renew(): fix an edge-case bugVladimír Čunát2023-05-291-2/+2
* improve handling of SERVFAIL from forwardersVladimír Čunát2023-03-103-1/+27
* lib/resolve: when forwarding, prefer to send CD=0 upstreamVladimír Čunát2023-03-101-11/+27
* lib/resolve query_finalize: handle RD flag even if NO_EDNSVladimír Čunát2023-03-101-4/+3
* lib/utils: fix timestamp format in dumps of recordsVladimír Čunát2023-02-261-0/+5
* daemon/worker: call server_selection.error() moreVladimír Čunát2023-01-261-0/+2
* Copyright notices: remove years and replace e-mailOto Šťáva2022-12-1475-75/+79
* TTL bounds: improve the logicVladimír Čunát2022-12-136-15/+41
* cache.max_ttl(): lower the default from six days to one dayVladimír Čunát2022-12-131-1/+1
* lib/cache: tweak TTL computation for packetsVladimír Čunát2022-12-132-17/+4
* iterate: no longer accept DNS messages with trailing dataVladimír Čunát2022-12-061-6/+10
* policy.STUB: avoid copying +dnssec flag from client to upstreamVladimír Čunát2022-12-061-4/+1
* policy.STUB: avoid applying aggressive DNSSEC denial proofsVladimír Čunát2022-12-061-0/+6
* doc nit: tweak the link to dnsflagday.netVladimír Čunát2022-11-071-1/+1
* lib/zonecut + iterator: limit large NS setsVladimír Čunát2022-09-163-2/+52
* lib/generic/array: avoid quadratic work for long arraysVladimír Čunát2022-08-082-9/+12
* lib/log: Coverity Scan nitsOto Šťáva2022-08-082-4/+11
* lib/utils: drop long unused partsVladimír Čunát2022-08-011-7/+0
* drop unused #include linesVladimír Čunát2022-08-011-1/+0
* adapt to libknot 3.2 lower-casing knot_pkt_qname()Vladimír Čunát2022-07-263-5/+19
* tweak inliningVladimír Čunát2022-06-094-40/+46
* lib/selection debug logs: print one more lineVladimír Čunát2022-06-093-5/+26
* lib/selection: improve IPv6 avoidance if brokenVladimír Čunát2022-06-091-1/+3
* drop unused #include linesVladimír Čunát2022-06-037-15/+0
* replace some occurrences of abort() by kr_require()Vladimír Čunát2022-06-033-4/+4
* lib/utils nit: deduplicate one lineVladimír Čunát2022-05-301-2/+2
* lib/cache: handle posix_fallocate returning EOPNOTSUPP (Linux/musl)Jakub Jirutka2022-05-281-2/+3
* lib/dnssec: nitsVladimír Čunát2022-05-181-5/+2
* lib/dnssec: rewrite kr_nsec_ref_to_unsigned()Vladimír Čunát2022-05-183-61/+27
* lib/dnssec: drop kr_nsec_name_error_response_check()Vladimír Čunát2022-05-183-105/+9
* lib/dnssec: replace kr_nsec_existence_denial()Vladimír Čunát2022-05-183-206/+103
* lib/generic/map: removeOto Šťáva2022-05-139-933/+0
* lib/utils kr_sockaddr_key_same_addr(): more precisionVladimír Čunát2022-05-131-2/+4