update copyright notice / whitespace

Fix various bugs reported by valgrind --tool=memcheck (#46978) (cherry picked from commit f96133826e3f70efea237b7fe6a47a45a35a6ab0) (cherry picked from commit 0374e1c3fdc13a20648d9c9de5601ad042e6044d)

fix the IPv6 address length in compute_cookie. [RT #46538] (cherry picked from commit b231ddc65d838b3aa64c5b41724054511ec2f5f5)

silence VC compiler warning (cherry picked from commit e09b9e7a91a52dbd9ae2a43de44a21de5aad682f)

fix merge error

4759. [func] Add logging channel "trust-anchor-telementry" to record trust-anchor-telementry in incoming requests. Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options are logged. [RT #46124] (cherry picked from commit b41c1aacbc550fa67bfa62df3114b1d668b9c8d8)

[master] cleanup strcat/strcpy 4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of strlcpy() and strlcat() for safety. [RT #45981] (cherry picked from commit 114f95089c4db619ee723e4146639700afa17b5e)

update copyright notice / whitespace

[v9_11] store local and remote addresses in dnstap 4569. [func] Store both local and remote addresses in dnstap logging, and modify dnstap-read output format to print them. [RT #43595] (cherry picked from commit 650b5e7592be43d6994ba425bc1fa654d538cd7e)

4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared when reusing the event structure. [RT #43885] (cherry picked from commit a678e70481c72e28cf8a2818ef4f7ab5b214a103)

4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879] (cherry picked from commit def6b33badb2ef286ece376c57db84250be163b2)

[v9_11] render querylog format consistent, and add a release note 4471. [cleanup] Render client/query logging format consistent for ease of log file parsing. (Note that this affects "querylog" format: there is now an additional field indicating the client object address.) [RT #43238] (cherry picked from commit c4b7db49326be650fa95a7ede6e066bbe1268561)

4468. [bug] Address ECS option handling issues. [RT #43191] (cherry picked from commit df1729011335b7991e748c2ad185309cb3f8e945)

[v9_11] fix tcp client memory leak 4459. [bug] TCP client objects created to handle pipeline queries were not cleaned up correctly, causing uncontrolled memory growth. [RT #43106] (cherry picked from commit a26a62cef2adba0520c5955d740fc75fa7f2c7f5)

4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message will not fit into a single IPv4 encapsulated IPv6 UDP packet when transmitted over a Ethernet link. [RT #42871] (cherry picked from commit 31ffec154117cd33d8b300ec8ac9cddfe83cbb68)

Make fixes for GCC 6 (#42721) (cherry picked from commit 4116177ac4f17ad0fc54c0fae7d0a8603a855bf6)

4410. [bug] Address use after free and memory leak with dnstap. [RT #42746] (cherry picked from commit a2101037d98490d8ba8f0a8a86744c46c3e57b88)

4401. [misc] Change LICENSE to MPL 2.0.

update copyright notice / whitespace

4402. [func] Collect statistics for RSSAC02v3 traffic-volume, traffic-sizes and rcode-volume reporting. [RT #41475]

simplify poorly written conditional

explict conversion

4358. [test] Added American Fuzzy Lop harness that allows feeding fuzzed packets into BIND. [RT #41723]

[master] ECS family 0 handling was still broken

[master] fix ECS with family==0 4341. [bug] Correct the handling of ECS options with address family 0. [RT #41377]

4322. [security] Duplicate EDNS COOKIE options in a response could trigger an assertion failure. (CVE-2016-2088) [RT #41809]

[master] cacluate TCP packet sizes correctly 4296. [bug] TCP packet sizes were calculated incorrectly in the stats channel; they could be counted in the wrong histogram bucket. [RT #40587]

update copyright notice / whitespace

[master] silence noisy logging 4287. [bug] Silence an overly noisy log message when message parsing fails. [RT #41374]

Merged VS 2015 64 bit warnings (#40373)

4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726]

[master] dnstap 4235. [func] Added support in named for "dnstap", a fast method of capturing and logging DNS traffic, and a new command "dnstap-read" to read a dnstap log file. Use "configure --enable-dnstap" to enable this feature (note that this requires libprotobuf-c and libfstrm). See the ARM for configuration details. Thanks to Robert Edmonds of Farsight Security. [RT #40211]

make macro name match category name

4201. [func] The default preferred-glue is now the address record type of the transport the query was received over. [RT #40468]

[master] timing safe memory comparisons 4183. [cleanup] Use timing-safe memory comparisons in cryptographic code. Also, the timing-safe comparison functions have been renamed to avoid possible confusion with memcmp(). [RT #40148]

[master] errors in pipelined queries could assert 4180. [bug] Error responses in pipelined queries could cause a crash in client.c. [RT #40289]

return notimp for qcount=0 unimplemeneted opcodes (cherry picked from commit 7c10dc502a34f88f11c6b6469bb234c72e61fec8)

[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]

allow named to build w/o openssl

[master] traffic size stats 4156. [func] Added statistics counters to track the sizes of incoming queries and outgoing responses in histogram buckets, as specified in RSSAC002. [RT #39049]

4154. [bug] A OPT record should be included with the FORMERR response when there is a malformed EDNS option. [RT #39647] 4153. [bug] Dig should zero non significant +subnet bits. Check that non significant ECS bits are zero on receipt. [RT #39647]

4152. [func] Implement DNS COOKIE option. This replaces the experimental SIT option of BIND 9.10. The following named.conf directives are avaliable: send-cookie, cookie-secret, cookie-algorithm and nocookie-udp-size. The following dig options are available: +[no]cookie[=value] and +[no]badcookie. [RT #39928]

4108. [func] A additional nxdomain redirect (nxdomain-redirect) method is now supported. [RT #37989]

misc x64 VS 2015 CTP fixes [#39308]

misc fixes for VS 2015 CTP #39267

4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]

[master] reduce rrl logging noise 4067. [cleanup] Reduce noise from RRL when query logging is disabled. [RT #38648]

Fix a leak of query fetchlock (#38454) 4052. [bug] Fix a leak of query fetchlock. [RT #38454]

[master] add TCP pipelining support 4040. [func] Added server-side support for pipelined TCP queries. TCP connections are no longer closed after the first query received from a client. (The new "keep-response-order" option allows clients to be specified for which the old behavior will still be used.) [RT #37821]

update copyright notice / whitespace

[master] clean up gcc -Wshadow warnings 4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]

3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with BADSIG. [RT #37216]

silence signed/unsigned warning

3949. [experimental] Experimental support for draft-andrews-edns1 by sending EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when building). Add support for limiting the EDNS version advertised to servers: server { edns-version 0; }; Log the EDNS version received in the query log. [RT #35864]

[master] servfail cache 3943. [func] SERVFAIL responses can now be cached for a limited time (configured by "servfail-ttl", default 10 seconds, limit 30). This can reduce the frequency of retries when an authoritative server is known to be failing, e.g., due to ongoing DNSSEC validation problems. [RT #21347]

[master] ECS authoritative support 3936. [func] Added authoritative support for the EDNS Client Subnet (ECS) option. ACLs can now include "ecs" elements which specify an address or network prefix; if an ECS option is included in a DNS query, then the address encoded in the option will be matched against "ecs" ACL elements. Also, if an ECS address is included in a query, then it will be used instead of the client source address when matching "geoip" ACL elements. This behavior can be overridden with "geoip-use-ecs no;". When "ecs" or "geoip" ACL elements are used to select a view for a query, the response will include an ECS option to indicate which client network the answer is valid for. (Thanks to Vincent Bernat.) [RT #36781]

3862. [cleanup] Return immediately if we are not going to log the message in ns_client_dumpmessage.

silence signed/unsigned comparision warning

adjust SIT computation

3755. [func] Add stats counters for known EDNS options + others. [RT #35447]

encrypt nonce and time

silence compiler warning

add EDNS EXPIRE processing on ixfr and axfr out

3750. [experimental] Partially implement EDNS EXPIRE option as described in draft-andrews-dnsext-expire-00. Retrivial of remaining time to expiry from slave zones is supported. EXPIRE uses an experimental option code (65002) and is subject to change. [RT #35416]

s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/

define DNS_OPT_EDNSOPTIONS

WIN32 master fixes

add client cookie in hmacsha*

3744. [experimental] SIT: send and process Source Identity Tokens (which are similar to DNS Cookies by Donald Eastlake) and are designed to help clients detect off path spoofed responses and for servers to detect legitimate clients. SIT use a experimental EDNS option code (65001). SIT can be enabled via --enable-developer or --enable-sit. It is on by default in Windows. RRL processing as been updated to know about SIT with legitimate clients not being rate limited. [RT #35389]

[master] tcp and udp stats counters 3739. [func] Added per-zone stats counters to track TCP and UDP queries. [RT #35375]

update copyright notice

[master] add no-case-compress 3731. [func] Added a "no-case-compress" ACL, which causes named to use case-insensitive compression (disabling change #3645) for specified clients. (This is useful when dealing with broken client implementations that use case-sensitive name comparisons, rejecting responses that fail to match the capitalization of the query that was sent.) [RT #35300]

3681. [port] Update the Windows build system to support feature selection and WIN64 builds. This is a work in progress. [RT #34160]

3645. [protocol] Use case sensitive compression when responding to queries. [RT #34737]

3633. [cleanup] Refactor OPT processing in named to make it easier to support new EDNS options. [RT #34414]

[master] change RRL log category 'query-errors' 3575. [func] Changed the logging category for RRL events from 'queries' to 'query-errors'. [RT #33540]

[master] fixed several RRL issues 3554. [bug] RRL failed to correctly rate-limit upward referrals and failed to count dropped error responses in the statistics. [RT #33225]

[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]

[master] DNS RRL 3494. [func] DNS RRL: Blunt the impact of DNS reflection and amplification attacks by rate-limiting substantially- identical responses. [RT #28130]

update copyright notice

[master] truncate logged rdata if too long 3490. [bug] When logging RDATA during update, truncate if it's too long. [RT #32365] cherry picked from: commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3 commit d087fa982649c081d58c5bb16e63da3428e2b89d commit d0795bdffef57612dd7654ffd09c9f4216eee2c8

silence clang --analyze warnings

[master] silence coverity warnings 3401. [bug] Addressed Coverity warnings. [RT #31484]

add test support for dropping edns messages (-T dropedns); ignoring edns in queries (-T noedns); variable max UDP (-T maxudp=value)

3390. [bug] Silence clang compiler warnings. [RT #30417]

update copyright notice

Add undocumented '-T delay=value' to allow for simulation of remote servers

3370. [bug] Address use after free while shutting down. [RT #30241]

merged filter-aaaa-on-v6 (ATT SoW) 3327. [func] Added 'filter-aaaa-on-v6' option; this is similar to 'filter-aaaa-on-v4' but applies to IPv6 connections. (Use "configure --enable-filter-aaaa" to enable this option.) [RT #27308]

Merge statistics code (ATT SoW, rt24117) This includes the following changes: 3326. [func] Added task list statistics: task model, worker threads, quantum, tasks running, tasks ready. [RT #27678] 3325. [func] Report cache statistics: memory use, number of nodes, number of hash buckets, hit and miss counts. [RT #27056] 3324. [test] Add better tests for ADB stats [RT #27057] 3323. [func] Report the number of buckets the resolver is using. [RT #27020] 3322. [func] Monitor the number of active TCP and UDP dispatches. [RT #27055] 3321. [func] Monitor the number of recursive fetches and the number of open sockets, and report these values in the statistics channel. [RT #27054] 3320. [func] Added support for monitoring of recursing client count. [RT #27009] 3319. [func] Added support for monitoring of ADB entry count and hash size. [RT #27057]

3296. [bug] Named could die with a INSIST failure in client.c:exit_check. [RT #28346]

update copyright notice

3273. [bug] AAAA responses could be returned in the additional section even when filter-aaaa-on-v4 was in use. [RT #27292]

3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]

3210. [bug] Canceling the oldest query due to recursive-client overload could trigger an assertion failure. [RT #26463]

3199. [func] When logging client information, include the name being queried. [RT #25944]

3178. [bug] A race condition introduced by change #3163 could cause an assertion failure on shutdown. [RT #26271]

update copyright notice

3164. [func] Enable DLZ modules to retrieve client information, so that responses can be changed depending on the source address of the query. [RT #25768]

3163. [bug] Use finer-grained locking in client.c to address concurrency problems with large numbers of threads. [RT #26044]

3159. [bug] On some platforms, named could assert on startup when running in a chrooted environment without /proc. [RT #25863] 3158. [bug] Recursive servers would prefer a particular UDP socket instead of using all available sockets. [RT #26038]

update copyright notice

3138. [bug] Address memory leaks and out-of-order operations when shutting named down. [RT #25210]

3137. [func] Improve hardware scalability by allowing multiple worker threads to process incoming UDP packets. This can significantly increase query throughput on some systems. [RT #22992]

set/reset client->signer. change 3106 used it before it was set

3106. [func] When logging client requests, include the name of the TSIG key if any. [RT #23619]

update copyright notice

3006. [func] Allow dynamically generated TSIG keys to be preserved across restarts of named. Initially this is for TSIG keys generated using GSSAPI. [RT #22639]

2963. [security] The allow-query acl was being applied instead of the allow-query-cache acl to cache lookups. [RT #22114]

update copyright notice

2955. [func] Provide more detail in the recursing log. [RT #22043]

2732. [func] Add optional filter-aaaa-on-v4 option, available if built with './configure --enable-filter-aaaa'. Filters out AAAA answers to clients connecting via IPv4. (This is NOT recommended for general use.) [RT #20339]

comment fixes (rt19624)

update copyright notice

2570. [func] Log the destination address the query was sent to. [RT #19209]

2537. [func] Added more statistics counters including those on socket I/O events and query RTT histograms. [RT #18802]

update copyright notice

spelling

2496. [bug] Add sanity length checks to NSID option. [RT #18813]

2375. [security] Fully randomize UDP query ports to improve forgery resilience. [RT #17949, #18098]

update copyright notice

2355. [func] Extend the number statistics counters available. [RT #17590]

2353. [func] Add support for Name Server ID (RFC 5001). 'dig +nsid' requests NSID from server. 'request-nsid yes;' causes recursive server to send NSID requests to upstream servers. Server responds to NSID requests with the string configured by 'server-id' option. [RT #17091]

2346. [func] Memory statistics now cover all active memory contexts in increased detail. [RT #17580]

update copyright notice

update copyright notice

2285. [func] Test framework for client memory context management. [RT #17377]

2266. [bug] client.c:get_clientmctx() returned the same mctx once the pool of mctx's was filled. [RT #17218]

2213. [bug] SIG0 diagnostic failure messages were looking at the wrong status code. [RT #17101]

2203. [security] Query id generation was cryptographically weak. [RT # 16915]

update copyright notice

s/ENDS/EDNS/