4874. [bug] Wrong time display when reporting new keywarntime. [RT #47042] (cherry picked from commit 83d005de61c6153cfd9fac957ac2cd2863419e7d)

Fix various bugs reported by valgrind --tool=memcheck (#46978) (cherry picked from commit f96133826e3f70efea237b7fe6a47a45a35a6ab0) (cherry picked from commit 0374e1c3fdc13a20648d9c9de5601ad042e6044d)

update copyright notice / whitespace

missing newline in comment (cherry picked from commit 7258b852cf08a21706e3b235fe597375deafacb1)

4839. [bug] zone.c:zone_sign was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned with one or more DNSKEY algorithms. [RT #46774] (cherry picked from commit 00f5ea91cf6d3897f24efb2ba097bda1df24082f)

4838. [bug] zone.c:add_sigs was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned with one or more DNSKEY algorithms. [RT #46754] (cherry picked from commit 6fa2a0691e1d701b361611069ab97471b8cd29bd)

4833. [bug] isc_event_free should check that the event is not linked when called. [RT #46725] 4832. [bug] Events were not being removed from zone->rss_events. [RT #46725] (cherry picked from commit 9ddf7d6c4cb5a99ef21f606cf865fd500d04da87)

[v9_11] Prevent bogus warning from being logged 4825. [bug] Prevent a bogus "error during managed-keys processing (no more)" warning from being logged. [RT #46645] (cherry picked from commit 165df18f7500b203f0ab845dedfc0fc8ba03c1e3)

4821. [bug] When resigning ensure that the SOA's expire time is always later that the resigning time of other records. [RT #46473] 4820. [bug] dns_db_subtractrdataset should transfer the resigning information to the new header. [RT #46473] 4819. [bug] Fully backout the transaction when adding a RRset to the resigning / removal heaps fail. [RT #46473] (cherry picked from commit 656eed7c9bd1ee735777f4d2a11294b68e6e9e17)

[v9_11] Minor improvements to code handling managed keys 4812. [bug] Minor improvements to stability and consistency of code handling managed keys. [RT #46468] (cherry picked from commit 312c84c73aaffff6d13bb56eef688be68aea3392)

[v9_11] Prevent junk from being logged when using "also-notify { <ip> key <keyname>; };" (cherry picked from commit 4034b098d80f269d70906cc8cddefd8831ddde6d)

[v9_11] Backport fix for RT #46055 and mkeys system test improvements 4803. [bug] Backport parts of RT #45293 and RT #46267, specifically the fix for RT #46055 and mkeys system test improvements. [RT #46430]

[v9_11] Rename nsec3param_salt_totext() to dns_nsec3param_salttotext(), make it public, add unit tests 4786. [cleanup] Turn nsec3param_salt_totext() into a public function, dns_nsec3param_salttotext(), and add unit tests for it. [RT #46289] (cherry picked from commit 910a01550a95bd0b40a778f759534991c92257d4)

[v9_11] ignore cache when sending 5011 refresh queries 4771. [bug] When sending RFC 5011 refresh queries, disregard cached DNSKEY rrsets. [RT #46251] (cherry picked from commit b2597ce86bbd95baf56a3cf422bfd55e5d148c79)

4754. [bug] dns_zone_setview needs a two stage commit to properly handle errors. [RT #45841]

cast to unsigned int (cherry picked from commit 34efd9ad93490281104d127d89fb0dbfe6b35837)

[v9_11] Comment NSEC3-related code and fix a few minor issues 4736. [cleanup] (a) Added comments to NSEC3-related functions in lib/dns/zone.c. (b) Refactored NSEC3 salt formatting code. (c) Minor tweaks to lock and result handling. [RT #46053] (cherry picked from commit acc3728c47fa8e04713bb5fea4bbf41db864e508)

[v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3 4727. [bug] Retransferring an inline-signed slave using NSEC3 around the time its NSEC3 salt was changed could result in an infinite signing loop. [RT #45080] (cherry picked from commit f665c724e4ec7fb48100e808a08788904ddd74b6)

more str{n}{cat,cpy} corrections rt45981_stage2 (cherry picked from commit cb629cdeda09bb5a0be90e491b22c4b58d28f900)

[v9_11] cast char *

[v9_11] clean up bufsize errors (cherry picked from commit 9b729a06b015165aacca2ed6f471eec41bef6ae1)

[master] cleanup strcat/strcpy 4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of strlcpy() and strlcat() for safety. [RT #45981] (cherry picked from commit 114f95089c4db619ee723e4146639700afa17b5e)

4682. [bug] Don't report errors on records below a DNAME. [RT #44880] (cherry picked from commit 615b961e0223c16d6611e016a4939ced023a7c38)

[v9_11] silence gcc 7 warnings 4673. [port] Silence GCC 7 warnings. [RT #45592] (cherry picked from commit cdacec1dcb93149b8efc7af38ec916adcdd706f3)

[v9_11] race condition when reloading while resigning 4661. [bug] A race condition could occur if a zone was reloaded while resigning, triggering a crash in rbtdb.c:closeversion(). [RT #45276] (cherry picked from commit 036305f00de671ea8f03056e642136a82436c4ae)

4654. [cleanup] Don't use C++ keywords delete, new and namespace. [RT #45538] (cherry picked from commit 4bf32aa58774452b05433716f8fa298257dd7fda)

[v9_11] enhanced rfc 5011 logging 4642. [cleanup] Add more logging of RFC 5011 events affecting the status of managed keys: newly observed keys, deletion of revoked keys, etc. [RT #45354] (cherry picked from commit 0d90835d2a5df335f398f131589c5c8e266dcd5f)

4587. [bug] named-checkzone failed to handle occulted data below DNAMEs correctly. [RT #44877] (cherry picked from commit 600b0277316e2e34d48c9dbbcad2cf759abfc1be)

4563. [bug] Modified zones would occasionally fail to reload. [RT #39424] (cherry picked from commit dfe3068ef390b5bbc706530afff33d5722531f68)

update copyright notice / whitespace

4553. [bug] Named could deadlock there were multiple changes to NSEC/NSEC3 parameters for a zone being processed at the same time. [RT #42770] (cherry picked from commit d2e1b47d4fc7f2e12ea91cc59dc5f951a9df5fbc)

update copyright notice / whitespace

4504. [security] Allow the maximum number of records in a zone to be specified. This provides a control for issues raised in CVE-2016-6170. [RT #42143] (cherry picked from commit 5f8412a4cb5ee14a0e8cddd4107854b40ee3291e)

4461. [bug] win32: not all external data was properly marked as external data for windows dll. [RT #43161] (cherry picked from commit 8eceb0bffe4ab4ccf72f71bb69d2b8106743af5d)

4439. [bug] Address race conditions getting ownernames of nodes. [RT #43005] (cherry picked from commit c7e021e2e64a73f665a3a57b6eb06670d2a21603)

4438. [func] Use LIFO rather than FIFO when processing startup notify and refresh queries. [RT #42825] (cherry picked from commit 5734cd3943e2eb11afefbd34bf715d044ee01d42)

[v9_11] remove spurious newline in EDNS EXPIRE logging Patch submitted by Tony Finch (dot@dotat.at).

update copyright notice / whitespace

4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries to provide feedback to the trust-anchor administrators about how key rollovers are progressing as per draft-ietf-dnsop-edns-key-tag-02. This can be disabled using 'trust-anchor-telemetry no;'. [RT #40583] (cherry picked from commit f20179857a8512441c3be7ad33f1c84e367de041)

4401. [misc] Change LICENSE to MPL 2.0.

4387. [test] Rewritten test suite for catalog zones. [RT #42676] 4386. [func] Support for master entries with TSIG keys in catalog zones. [RT #42577]

4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]

4367. [bug] Remove unnecessary assignment of loadtime in zone_touched. [RT #42440]

[master] fix mkeys TTL 0 issue 4337. [bug] The previous change exposed a latent flaw in key refresh queries for managed-keys when a cached DNSKEY had TTL 0. [RT #41986]

update copyright notice / whitespace

4336. [bug] Don't emit records with zero ttl unless the records were learnt with a zero ttl. [RT #41687]

4335. [bug] zone->view could be detached too early. [RT #41942]

[master] disallow map zones in response-policy 4269. [bug] Zones using "map" format master files currently don't work as policy zones. This limitation has now been documented; attempting to use such zones in "response-policy" statements is now a configuration error. [RT #38321]

4264. [bug] Check const of strchr/strrchr assignments match argument's const status. [RT #41150]

4254. [bug] Address missing lock when getting zone's serial. [RT #41072]

4252. [func] Add support for automating the generation CDS and CDNSKEY rrsets to named and dnssec-signzone. [RT #40424]

[master] fix theoretical shutdown race 4226. [bug] Address a theoretical shutdown race in zone.c:notify_send_queue(). [RT #38958]

4181. [bug] Queued notify messages could be dequeued from the wrong rate limiter queue. [RT #40350]

4164. [bug] Don't rename slave files and journals on out of memory. [RT #40033] 4163. [bug] Address compiler warnings. [RT #40024]

Fix a bug printing zone names with '/' character in XML and JSON stats (#39873)

[master] further RPZ fixes 4131. [bug] Addressed further problems with reloading RPZ zones. [RT #39649]

4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]

update copyright notice / whitespace

4127. [protocol] CDS and CDNSKEY need to be signed by the key signing key as per RFC 7344, Section 4.1. [RT #37215]

[master] address regression 4126. [bug] Addressed a regression introduced in change #4121. [RT #39611]

4104. [bug] Address uninitialized elements. [RT #39252]

misc fixes for VS 2015 CTP #39267

4095. [bug] zone->options2 was not being properly initalized. [RT #39228]

Send notifies immediately for slave zones during startup (#38843)

Fix a crash due to use-after-free (#38495)

4082. [bug] Incrementally sign large inline zone deltas. [RT #37927]

4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]

4079. [func] Preserve the case of the ownername of records to the RRset level. [RT #37442]

4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]

[master] additional mkeys tests 4065. [test] Additional RFC 5011 tests. [RT #38569]

[master] fix LOADPENDING issues 4063. [bug] Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573]

update copyright notice / whitespace

[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]

[master] avoid crash due to managed-key rollover 4053. [security] Revoking a managed trust anchor and supplying an untrusted replacement could cause named to crash with an assertion failure. (CVE-2015-1349) [RT #38344]

4045. [bug] Skip to next master on dns_request_createvia4 failure. [RT #25185]

update copyright notice / whitespace

[master] clean up gcc -Wshadow warnings 4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]

4037. [bug] also-notify was ignoring the tsig key when checking for duplicates resulting in some expected notify messages not being sent. [RT #38369]

Add a TCP only option to server/peer

[master] reference leak with AAAA glue but not A 4004. [bug] When delegations had AAAA glue but not A, a reference could be leaked causing an assertion failure on shutdown. [RT #37796]

update copyright notice

3995. [bug] receive_secure_serial holds the zone lock for too long. [RT #37626]

3989. [cleanup] Remove redundent dns_db_resigned calls. [RT #35748]

update copyright notice

3987. [func] Allow the zone serial of a dynamically updatable zone to be updated via rndc. [RT #37404]

[master] correctly validate 5011 trust anchors 3976. [bug] When refreshing managed-key trust anchors, clear any cached trust so that they will always be revalidated with the current set of secure roots. [RT #37506]

3966. [bug] Missing dns_db_closeversion call in receive_secure_db. [RT #35746]

update copyright notice

3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with BADSIG. [RT #37216]

update copyright notice

3956. [func] Notify messages are now rate limited by notify-rate and startup-notify-rate instead of serial-query-rate. [RT #24454] 3955. [bug] Notify messages due to changes are no longer queued behind startup notify messages. [RT #24454]

update named-checkzone manpage for SPF changes

update copyright notice

3939. [func] Improve UPDATE forwarding performance by allowing TCP connections to be shared. [RT #37039]

3911. [func] Implement EDNS EXPIRE option client side. [RT #35925]

silence coverity, explicitly ignore dns_peer_gettransferdscp result

3888. [func] 'rndc status' now reports the number of automatic zones. [RT #36015]

3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]

suppress clang static analysis warning

3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt. [RT #35924]

3819. [bug] NSEC3 hashes need to be able to be entered and displayed without padding. This is not a issue for currently defined algorithms but may be for future hash algorithms. [RT #27925]

[master] masterfile-style 3814. [func] The "masterfile-style" zone option controls the formatting of dumped zone files. Options are "relative" (multiline format) and "full" (one record per line). The default is "relative". [RT #20798]

[master] fix possible assertion in save_nsec3param() 3793. [bug] zone.c:save_nsec3param() could assert when out of memory. [RT #35621]

silence clang compiler warnings

3753. [bug] allow-notify was ignoring keys. [RT #35425]

update copyright notice

[master] max-zone-ttl 3746. [func] New "max-zone-ttl" option enforces maximum TTLs for zones. If loading a zone containing a higher TTL, the load fails. DDNS updates with higher TTLs are accepted but the TTL is truncated. (Note: Currently supported for master zones only; inline-signing slaves will be added.) [RT #38405]

[master] tcp and udp stats counters 3739. [func] Added per-zone stats counters to track TCP and UDP queries. [RT #35375]

update copyright notice

3737. [bug] 'rndc retransfer' could trigger a assertion failure with inline zones. [RT #35353] (cherry picked from commit 8e30a7e9fdef51b53448aff26b9f4f339b023a38)

update copyright notice

[master] replace memcpy() with memmove(). 3698. [cleanup] Replaced all uses of memcpy() with memmove(). [RT #35120]

3687. [bug] Address null pointer dereference in zone_xfrdone. [RT #35042]

3684. [bug] The list of included files would grow on reload. [RT 35090]

update copyright notice

3682. [bug] Correct the behavior of rndc retransfer to allow inline-signing slave zones to retain NSEC3 parameters instead of reverting to NSEC [RT #34745]

3681. [port] Update the Windows build system to support feature selection and WIN64 builds. This is a work in progress. [RT #34160]

[master] "in-view" zone option 3673. [func] New "in-view" zone option allows direct sharing of zones between views. [RT #32968]

3665. [bug] Failure to release lock on error in receive_secure_db. [RT #34944]

address memory leak in change #3662, force format matching, attempt to address coverity false positives

be consistent in how ISC_PLATFORM_USETHREADS is defined and used

call isc_mutex_trylock rather than pthread_mutex_trylock

3661. [bug] Address lock order reversal deadlock with inline zones. [RT #34856]

3654. [bug] Address race condition with manual notify requests. [RT #34806]

3651. [tuning] Adjust when a master server is deemed unreachable. [RT #27075]

3650. [tuning] Use separate rate limiting queues for refresh and notify requests. [RT #30589]

refresh_callback needs to check if the zone is exiting (cherry picked from commit 2e314abcf0a47acfbab55e5ef0463c04c08476be)

call zone_settimer; sub test failure was not being detected (cherry picked from commit ebd790067032e52678a8eef94c6373b9d40ab273)

[master] fix to change #3647

3647. [bug] Address a race condition when shutting down a zone. [RT #34750]

[master] deprecate dns_journal_rollforward2 no longer needed since change #3641

3642. [func] Allow externally generated DNSKEY to be imported into the DNSKEY management framework. A new tool dnssec-importkey is used to this. [RT #34698]

3641. [bug] Handle changes to sig-validity-interval settings better. [RT #34625]

3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used in a key zone. [RT #34238]

3635. [bug] Signatures were not being removed from a zone with only KSK keys for a algorithm. [RT #24439]

3632. [bug] Signature from newly inactive keys were not being removed. [RT #32178]

3627. [bug] RPZ changes were not effective on slaves. [RT #34450]

remove dead code

fix unchecked null; value not read

update copyright notice

[master] check include file mtimes 3618. [func] "rndc reload" now checks modification times of include files as well as master files to determine whether to skip reloading a zone. [RT #33936]

[master] address zone->db races 3616. [bug] Change #3613 was incomplete. [RT #34177]

[master] address race conditions with removing inline zones 3513. [bug] named could crash when deleting inline-signing zones with "rndc delzone". [RT #34066]

[master] rebuild resigning heaps when loading map files 3597. [bug] Ensure automatic-resigning heaps are reconstructed when loading zones in map format. [RT #33381]

3589. [func] Report serial numbers in when starting zone transfers. Report accepted NOTIFY requests including serial. [RT# 33037]

assert if zone and zone->raw are the same; this should help coverity static analysis

[master] silence ccc-analyzer 3567. [bug] Silence clang static analyzer warnings. [RT #33365]

[master] log forwarded updates 3566. [func] Log when forwarding updates to master. [RT #33240]

update copyright notice

3559. [func] Check that both forms of Sender Policy Framework records exist or do not exist. [RT #33355]

3557. [bug] Reloading redirect zones was broken. [RT #33292]

[master] unify internal and export libraries 3550. [func] Unified the internal and export versions of the BIND libraries, allowing external clients to use the same libraries as BIND. [RT #33131]

address warnings

update copyright notice

[master] slaves notify before writing to disk 3537. [tuning] Slave zones, when updated, now send NOTIFY messages to peers before being dumped to disk rather than after. [RT #27242]

[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]

3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]

[master] better zone-statistics syntax 3501. [func] zone-statistics now takes three options: full, terse, and none. "yes" and "no" are retained as synonyms for full and terse, respectively. [RT #29165]

[master] RPZ speedup (phase 2, multiple RPZ's) 3495. [func] Support multiple response-policy zones, while improving RPZ performance. [RT #32476]

[master] add zone memory context pools 3492. [bug] Fixed a regression in zone loading performance due to lock contention. [RT #30399]

[master] silence logging noise 3480. [bug] Silence logging noise when setting up zone statistics. [RT #32525]

[master] dump masterfile after successful xfrin 3470. [bug] Slave zones could fail to dump when successfully refreshing after an initial failure. [RT #31276]

silence compiler warning

update copyright notice

3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;' failed. [RT #31960]

[master] pass client info to DLZ findzone method 3434. [bug] Pass client info to the DLZ findzone() entry point in addition to lookup(). This makes it possible for a database to answer differently whether it's authoritative for a name depending on the address of the client. [RT #31775]

[master] multiple-dlz/dlz-nxdomain 3432. [func] Multiple DLZ databases can now be configured. DLZ databases are searched in the order configured, unless set to "search no", in which case a zone can be configured to be retrieved from a particular DLZ database by using a "dlz <name>" option in the zone statement. DLZ databases can support type "master" and "redirect" zones. [RT #27597]

3429. [bug] dns_zone_getserial2 could a return success without returning a valid serial. [RT #32007] Squashed commit of the following: commit 0057f4b6e843c3998b987dbc7f32ceeee8afc150 Author: Mark Andrews <marka@isc.org> Date: Fri Nov 30 08:13:15 2012 +1100 zone_get_from_db could return success without setting return valuses; serial is only valid if soacount is none zero

3421. [bug] Named loops when re-signing if all keys are offline. [RT #31916] Squashed commit of the following: commit f47af0ca6793687b9c8d08fd44b0c091ba5a4f9a Author: Mark Andrews <marka@isc.org> Date: Wed Nov 21 17:45:21 2012 +1100 dns_dns_zonediff_t -> dns_zonediff_t, clarify comment commit 344edefc3ee90856a7ff990abe7971925ba843b2 Author: Mark Andrews <marka@isc.org> Date: Tue Nov 20 13:12:26 2012 +1100 commit the zone changes if a keep was marked as being offline commit cad2c2446ebfc20b6d8c4f6dd0d6596d7106cc0f Author: Mark Andrews <marka@isc.org> Date: Tue Nov 20 13:08:29 2012 +1100 check for looping when re-signing expiring.example

3418. [func] New XML schema (version 3.0) for the statistics channel adds query type statistics at the zone level, and flattens the XML tree and uses compressed format to optimize parsing. Includes new XSL that permits charting via the Google Charts API on browsers that support javascript in XSL. The old XML schema has been deprecated. [RT #30023] 3417. [placeholder]

spelling

3414. [bug] Address locking issues found by Coverity. [RT #31626]

more: 3410. [bug] Addressed Coverity warnings. [RT #31626] move set_refreshkeytimer call within loop so that keydata is valid.

check more dns_rdata_tostruct returns

3410. [bug] Addressed Coverity warnings. [RT #31626] Squashed commit of the following: commit bce2efe66d69d60b746b85df49974ca341723169 Author: Mark Andrews <marka@isc.org> Date: Mon Oct 29 12:59:25 2012 +1100 use 'static dns_rdata_xxxx_t xxxx' commit 704d3c29acbf2dd350a26f2df82a57cb077ba72e Author: Mark Andrews <marka@isc.org> Date: Mon Oct 29 12:35:16 2012 +1100 return ISC_R_NOTFOUND if private record length does not make sense commit 7596610c12c5685336fc0909860173d2fae359af Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 21:41:17 2012 +1100 check private->length == 5 commit 3836365a3e3e83b057bd940350f032279e080296 Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 21:40:50 2012 +1100 properly set private->length commit a295778ac53109d39ef3a8b233751100edae678b Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 21:13:30 2012 +1100 check dns_rdata_tostruct result commit e33c37ca9112159e0b2363615bb018d27fa7d1a5 Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 21:10:43 2012 +1100 check remove/fopen/chmod return values commit 3a675e0666aae25d1c51f51ec7bd3fbe25545aae Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:59:10 2012 +1100 check isc_socket_accept result commit 696923344f4b07ce0dba4cf2675b1cbb6eba7e8e Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:55:40 2012 +1100 change variable scopes commit b9e9d9ad58270271003e463f10744e0ceaf9ad97 Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:53:19 2012 +1100 check inet_pton return value commit 70698e9589da77e3745efb6ea24b8830addd6ae4 Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:52:40 2012 +1100 break -> /* NOTREACHED */ commit 88de9de2e8e201ab2fef16a868f241e8206ea826 Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:52:06 2012 +1100 strcpy -> strlcpy commit 6ba79c7cec0e48014cdfa76e8a9406b7a921556e Author: Mark Andrews <marka@isc.org> Date: Sat Oct 27 20:51:26 2012 +1100 check dns_rdata_tostruct return values

[master] silence coverity warnings 3401. [bug] Addressed Coverity warnings. [RT #31484]

3399. [port] netbsd: rename 'bool' parameter to avoid namespace clash. [RT #31515]

update copyright notice

3398. [bug] SOA parameters were not being updated with inline signed zones if the zone was modified while the server was offline. [RT #29272]

fix coverity issues 3388. [bug] Fixed several Coverity warnings. [RT #30996]

white space; move pause to before comment.

3386. [bug] Address locking violation when generating new NSEC / NSEC3 chains. [RT #31224]

handle nonexistent managed-keys-directory 3378. [bug] Handle missing 'managed-keys-directory' better. [RT #30625]

3372. [bug] Silence spurious "deleted from unreachable cache" messages. [RT #30501]

unsigned constants

remove spurious newlines in zone.c logging 3365. [bug] Removed spurious newlines from log messages in zone.c [RT #30675]

update copyright notice

3342. [bug] Change #3314 broke saving of stub zones to disk resulting in excessive cpu usage in some cases. [RT #29952]

merging fast format zone files Conflicts: .gitignore bin/named/zoneconf.c bin/tests/.gitignore bin/tests/system/autosign/tests.sh bin/tests/system/masterformat/clean.sh bin/tests/system/masterformat/ns1/compile.sh bin/tests/system/masterformat/tests.sh configure lib/dns/db.c lib/dns/include/dns/db.h lib/dns/include/dns/types.h lib/dns/master.c lib/dns/masterdump.c lib/dns/rbt.c lib/dns/rbtdb.c lib/dns/sdb.c lib/dns/sdlz.c lib/dns/tests/.cvsignore lib/dns/tests/Makefile.in lib/dns/win32/libdns.def lib/dns/xfrin.c lib/dns/zone.c lib/export/dns/Makefile.in lib/isc/include/isc/file.h lib/isc/unix/file.c lib/isc/win32/file.c lib/isccfg/namedconf.c

TRUE -> ISC_TRUE

3314. [bug] The masters list could be updated while refesh_callback and stub_callback were using it. [RT #26732]

3311. [bug] Abort the zone dump if zone->db is NULL in zone.c:zone_gotwritehandle. [RT #29028]

3298. [bug] Named could dereference a NULL pointer in zmgr_start_xfrin_ifquota if the zone was being removed. [RT #28419]

set $Id$

set $Id$

Revert "Re-created rt27597a for ongoing DLZ work" This reverts commit d731ee9121c3864839c3bdcd3b7ee603ec3999ff.

Re-created rt27597a for ongoing DLZ work