4401. [misc] Change LICENSE to MPL 2.0.

4358. [test] Added American Fuzzy Lop harness that allows feeding fuzzed packets into BIND. [RT #41723]

update copyright notice / whitespace

4318. [security] Malformed control messages can trigger assertions in named and rndc. (CVE-2016-1285) [RT #41666]

Allow non-destructive control channel access using a "read-only" clause (#40498)

Limit rndc query message sizes to 32 KiB (#41073)

update copyright notice / whitespace

[master] add "rndc -r" to print result code 4115. [func] "rndc -r" now prints the result code (e.g., ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after running the requested command. [RT #38913]

[master] allow arbitrary-size rndc output 4005. [func] The buffer used for returning text from rndc commands is now dynamically resizable, allowing arbitrarily large amounts of text to be sent back to the client. (Prior to this change, it was possible for the output of "rndc tsig-list" to be truncated.) [RT #37731]

[master] log when using rndc.key 3767. [func] Log explicitly when using rndc.key to configure command channel. [RT #35316]

update copyright notice

[master] replace memcpy() with memmove(). 3698. [cleanup] Replaced all uses of memcpy() with memmove(). [RT #35120]

[master] buffer could overflow in rndc zonestatus 3680. [bug] Ensure buffer space is available in "rndc zonestatus". [RT #35084]

[master] algorithm flexibility for rndc 3525. [func] Support for additional signing algorithms in rndc: hmac-sha1, -sha224, -sha256, -sha384, and -sha512. The -A option to rndc-confgen can be used to select the algorithm for the generated key. (The default is still hmac-md5; this may change in a future release.) [RT #20363]

3520. [bug] 'mctx' was not being referenced counted in some places where it should have been. [RT #32794]

update copyright notice

[master] fix rndc replay protection 3519. [func] Full replay protection via four-way handshake is now mandatory for rndc clients. Very old versions of rndc will no longer work. [RT #32798]

3337. [bug] Change #3294 broke support for the multiple keys in controls. [RT #29694]

update copyright notice

3294. [bug] isccc/cc.c:table_fromwire failed to free alist on error. [RT #28265]

3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels. [RT #22249]

update copyright notice

3069. [cleanup] Silence warnings messages from clang static analysis. [RT #20256]

2396. [bug] Don't set SO_REUSEADDR for randomized ports. [RT #18336] part 2

2396. [bug] Don't set SO_REUSEADDR for randomized ports. [RT #18336]

update copyright notice

update copyright notice

2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c. [RT #17495]

Add support for O(1) ACL processing, based on radix tree code originally written by kevin brintnall. [RT #16288]

update copyright notice

update copyright notice

2134. [func] Additional statistics support. [RT #16666]

2111. [bug] Fix a number of errors reported by Coverity. [RT #16507]

1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]

update copyright notice

1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]

silence ambigious else

1940. [bug] Fixed a number of error conditions reported by Coverity.

1914. [bug] Strings returned from cfg_obj_asstring() should be treated as read-only. The prototype for cfg_obj_asstring() has been updated to reflect this. [RT #15256]

1851. [doc] Doxygen comment markup. [RT #11398]

1814. [func] UNIX domain controls are now supported.

update copyrights

1797. [func] named-checkconf now check acls to verify that they only refer to existing acls. [RT #13101]

update copyright notice

1480. [bug] Provide replay protection for rndc commands. Full replay protection requires both rndc and named to be updated. Partial replay protection (limited exposure after restart) is provided if just named is updated.

copyrights

Split off the named.conf grammar into a source module separate from the configuration parser, to facilitate reuse of the latter for parsing non-BIND configuration files

1141. [bug] When named rejected a control message, it would leak a file descriptor and memory.

1083. [bug] The default control channel listened on the wildcard adress, not the loopback as documented.

1062. [bug] If the control channel listener socket was shut down before server exit, the listener object could be freed twice. [RT #1916]

removed unnecessary includes

controls->shuttingdown should not be set on server reload.

deuglify #1010 [RT #1766]