CHANGES revision 07b7a3eadeda94eddd50977c9582dae2f955b638
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews4569. [func] Store both local and remote addresses in dnstap
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews logging, and modify dnstap-read output format to
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer print them. [RT #43595]
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews4568. [contrib] Added a --with-bind option to the dnsperf configure
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews script to specify BIND prefix path.
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews4567. [port] Call getprotobyname and getservbyname prior to calling
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews chroot so that shared libraries get loaded. [RT #44537]
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews4565. [cleanup] The inline macro versions of isc_buffer_put*()
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews did not implement automatic buffer reallocation.
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews4564. [maint] Update the built in managed keys to include the
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews upcoming root KSK. [RT #44579]
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews4563. [bug] Modified zones would occasionally fail to reload.
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews4561. [port] Silence a warning in strict C99 compilers. [RT #44414]
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews4560. [bug] mdig: add -m option to enable memory debugging rather
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews than having it on all the time. [RT #44509]
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews4559. [bug] openssl_link.c didn't compile if ISC_MEM_TRACKLINES
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews was turned off. [RT #44509]
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews4558. [bug] Synthesised CNAME before matching DNAME was still
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews being cached when it should not have been. [RT #44318]
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews4557. [security] Combining dns64 and rpz can result in dereferencing
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews a NULL pointer (read). (CVE-2017-3135) [RT#44434]
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews4553. [bug] Named could deadlock there were multiple changes to
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews NSEC/NSEC3 parameters for a zone being processed at
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews the same time. [RT #42770]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4552. [bug] Named could trigger a assertion when sending notify
e412f05a4e5ab7727f024c95e2a7515c07107b02Mark Andrews messages. [RT #44019]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4551. [test] Add system tests for integrity checks of MX and
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews SRV records. [RT #43953]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4550. [cleanup] Increased the number of available master file
c54c1eaf26d5a7fc123c4af3712353156a766df1Mark Andrews output style flags from 32 to 64. [RT #44043]
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews4547. [port] Add support for --enable-native-pkcs11 on the AEP
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews Keyper HSM. [RT #42463]
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews --- 9.11.1b1 released ---
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews4545. [func] Expand YAML output from dnstap-read to include
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews a detailed breakdown of the DNS message contents.
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews4544. [bug] Add message/payload size to dnstap-read YAML output.
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews4543. [bug] dns_client_startupdate now delays sending the update
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews request until isc_app_ctxrun has been called.
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews4541. [bug] rndc addzone should properly reject non master/slave
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews zones. [RT #43665]
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4539. [bug] Referencing a nonexistent zone with RPZ could lead
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews to a assertion failure when configuring. [RT #43787]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews4538. [bug] Call dns_client_startresolve from client->task.
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews4537. [bug] Handle timeouts better in dig/host/nslookup. [RT #43576]
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews when reusing the event structure. [RT #43885]
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews4535. [bug] Address race condition in setting / testing of
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews DNS_REQUEST_F_SENDING. [RT #43889]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews4533. [bug] dns_client_update should terminate on prerequisite
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews and also on BADZONE. [RT #43865]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
33c538015323f4576679e427088372eea614feebMark Andrews4531. [security] 'is_zone' was not being properly updated by redirect2
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews and subsequently preserved leading to an assertion
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews failure. (CVE-2016-9778) [RT #43837]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews in responses resulting in SERVFAIL being returned.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4529. [cleanup] Silence noisy log warning when DSCP probe fails
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews due to firewall rules. [RT #43847]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4528. [bug] Only set the flag bits for the i/o we are waiting
5758e9adfb009286b2b719ff83eb284f1019c589Mark Andrews for on EPOLLERR or EPOLLHUP. [RT #43617]
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews4526. [doc] Corrected errors and improved formatting of
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews grammar definitions in the ARM. [RT #43739]
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews4525. [doc] Fixed outdated documentation on managed-keys.
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews4524. [bug] The net zero test was broken causing IPv4 servers
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews with addresses ending in .0 to be rejected. [RT #43776]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4523. [doc] Expand config doc for <querysource4> and
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews <querysource6>. [RT #43768]
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews4522. [bug] Handle big gaps in log file version numbers better.
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews4521. [cleanup] Log it as an error if an entropy source is not
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews found and there is no fallback available. [RT #43659]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4520. [cleanup] Alphabetize more of the grammar when printing it
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews out. Fix unbalanced indenting. [RT #43755]
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews4517. [security] Named could mishandle authority sections that were
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews missing RRSIGs triggering an assertion failure.
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews (CVE-2016-9444) [RT # 43632]
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews4516. [bug] isc_socketmgr_renderjson was missing from the
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews windows build. [RT #43602]
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews4515. [port] FreeBSD: Find readline headers when they are in
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews edit/readline/ instead of readline/. [RT #43658]
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews4510. [security] Named mishandled some responses where covering RRSIG
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews records are returned without the requested data
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews resulting in a assertion failure. (CVE-2016-9147)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4509. [test] Make the rrl system test more reliable on slower
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews machines by using mdig instead of dig. [RT #43280]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4508. [security] Named incorrectly tried to cache TKEY records which
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews could trigger a assertion failure when there was
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews a class mismatch. (CVE-2016-9131) [RT #43522]
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews4507. [bug] Named could incorrectly log 'allows updates by IP
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews address, which is insecure' [RT #43432]
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4504. [security] Allow the maximum number of records in a zone to
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews be specified. This provides a control for issues
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews raised in CVE-2016-6170. [RT #42143]
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews4503. [cleanup] "make uninstall" now removes files installed by
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews BIND. (This currently excludes Python files
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews due to lack of support in setup.py.) [RT #42912]
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews4502. [func] Report multiple and experimental options when printing
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews grammar. [RT #43134]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4499. [port] MacOSX: silence deprecated function warning
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews by using arc4random_stir() when available
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews instead of arc4random_addrandom(). [RT #43503]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4498. [test] Simplify prerequisite checks in system tests.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4496. [func] dig: add +idnout to control whether labels are
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews display in punycode or not. Requires idn support
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews to be enabled at compile time. [RT #43398]
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews4495. [bug] A isc_mutex_init call was not being checked.
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews4494. [bug] Look for <editline/readline.h>. [RT #43429]
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews SO_TARGETS. [RT# 43336]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4492. [bug] irs_resconf_load failed to initialize sortlistnxt
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews causing bad writes if resolv.conf contained a
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews sortlist directive. [RT #43459]
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews4491. [bug] Improve message emitted when testing whether sendmsg
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews works with TOS/TCLASS fails. [RT #43483]
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews4489. [security] It was possible to trigger assertions when processing
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews a response containing a DNAME answer. (CVE-2016-8864)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews4487. [test] Make system tests work on Windows. [RT #42931]
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews the python modules we install. [RT #43330]
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews4485. [bug] Failure to find readline when requested should be
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews fatal to configure. [RT #43328]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4484. [func] Check prefixes in acls to make sure the address and
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews prefix lengths are consistent. Warn only in
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews BIND 9.11 and earlier. [RT #43367]
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews4483. [bug] Address use before require check and remove extraneous
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews dns_message_gettsigkey call in dns_tsig_sign.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4482. [cleanup] Change #4455 was incomplete. [RT #43252]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4478. [func] Add +continue option to mdig, allow continue on socket
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews errors. [RT #43281]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4477. [test] Fix mkeys test timing issues. [RT #41028]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews4476. [test] Fix reclimit test on slower machines. [RT #43283]
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews4475. [doc] Update named-checkconf documentation. [RT #43153]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews getprotobyname and getservbyname work. [RT #43197]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews4472. [bug] Named could fail to find the correct NSEC3 records when
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews a zone was updated between looking for the answer and
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews looking for the NSEC3 records proving nonexistence
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews of the answer. [RT #43247]
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews --- 9.11.0 released ---
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews --- 9.11.0rc3 released ---
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews4471. [cleanup] Render client/query logging format consistent for
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews ease of log file parsing. (Note that this affects
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews "querylog" format: there is now an additional field
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews indicating the client object address.) [RT #43238]
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews4470. [bug] Reset message with intent parse before
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews calling dns_dispatch_getnext. [RT #43229]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews --- 9.11.0rc2 released ---
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews4468. [bug] Address ECS option handling issues. [RT #43191]
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews4467. [security] It was possible to trigger an assertion when
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews rendering a message. (CVE-2016-2776) [RT #43139]
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews4466. [bug] Interface scanning didn't work on a Windows system
94323de0419d68fe8c48af7ae14a2f1a1cd274a8Mark Andrews without a non local IPv6 addresses. [RT #43130]
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews4465. [bug] Don't use "%z" as Windows doesn't support it.
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews4464. [bug] Fix windows python support. [RT #43173]
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews4463. [bug] The dnstap system test failed on some systems.
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews4462. [bug] Don't describe a returned EDNS COOKIE as "good"
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews when there isn't a valid server cookie. [RT #43167]
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews4461. [bug] win32: not all external data was properly marked
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews as external data for windows dll. [RT #43161]
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews --- 9.11.0rc1 released ---
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews4460. [test] Add system test for dnstap using unix domain sockets.
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews4459. [bug] TCP client objects created to handle pipeline queries
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews were not cleaned up correctly, causing uncontrolled
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews memory growth. [RT #43106]
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews4458. [cleanup] Update assertions to be more correct, and also remove
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews use of a reserved word. [RT #43090]
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews4455. [cleanup] Allow dyndb modules to correctly log the filename
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews and line number when processing configuration text
75e184e4b80c499859574257dd5781d62cfed0b3Mark Andrews from named.conf. [RT #43050]
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews4453. [bug] Prefetching of DS records failed to update their
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews RRSIGs. [RT #42865]
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews4452. [bug] The default key manager policy file is now
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews <sysdir>/dnssec-policy.conf (usually
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews4451. [cleanup] Log more useful information if a PKCS#11 provider
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews library cannot be loaded. [RT #43076]
81e302788a444b81231a7cda721548a020ae5660Brian Wellington4450. [port] Provide more nuanced HSM support which better matches
81e302788a444b81231a7cda721548a020ae5660Brian Wellington the specific PKCS11 providers capabilities. [RT #42458]
c00a1eb423623442aff428336bb55590f79013bbMark Andrews4449. [test] Fix catalog zones test on slower systems. [RT #42997]
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews4448. [bug] win32: ::1 was not being found when iterating
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews interfaces. [RT #42993]
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington4447. [tuning] Allow the fstrm_iothr_init() options to be set using
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington named.conf to control how dnstap manages the data
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington flow. [RT #42974]
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington4446. [bug] The cache_find() and _findrdataset() functions
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews could find rdatasets that had been marked stale.
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews4445. [cleanup] isc_errno_toresult() can now be used to call the
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews formerly private function isc__errno2result().
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews4444. [bug] Fixed some issues related to dyndb: A bug caused
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews braces to be omitted when passing configuration text
94323de0419d68fe8c48af7ae14a2f1a1cd274a8Mark Andrews from named.conf to a dyndb driver, and there was a
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews use-after-free in the sample dyndb driver. [RT #43050]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews TCP sockets. [RT #42864]
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews tree data structure with overlapping networks
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews (longest prefix match was ineffective).
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews4441. [cleanup] Alphabetize host's help output. [RT #43031]
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews4440. [func] Enable TCP fast open support when available on the
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews server side. [RT #42866]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews4439. [bug] Address race conditions getting ownernames of nodes.
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews4438. [func] Use LIFO rather than FIFO when processing startup
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews notify and refresh queries. [RT #42825]
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews4437. [func] Minimal-responses now has two additional modes
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews no-auth and no-auth-recursive which suppress
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews adding the NS records to the authority section
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews as well as the associated address records for the
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews nameservers. [RT #42005]
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews4436. [func] Return TLSA records as additional data for MX and SRV
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews lookups. [RT #42894]
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews will not fit into a single IPv4 encapsulated IPv6
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews UDP packet when transmitted over a Ethernet link.
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews4434. [protocol] Return EDNS EXPIRE option for master zones in addition
faf23095be9a0b5e2696f2b1f1a260af16e9ebeaMark Andrews to slave zones. [RT #43008]
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews4433. [cleanup] Report an error when passing an invalid option or
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews view name to "rndc dumpdb". [RT #42958]
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews4432. [test] Hide rndc output on expected failures in logfileconfig
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews system test. [RT #27996]
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews4431. [bug] named-checkconf now checks the rate-limit clause.
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews4430. [bug] Lwresd died if a search list was not defined.
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews Found by 0x710DDDD At Alibaba Security. [RT #42895]
986be654feec852eb9da0d15599f18d0035e569bMark Andrews4429. [bug] Address potential use after free on fclose() error.
3703473c4a2672af58b4f141e92067e969fd978eBrian Wellington4428. [bug] The "test dispatch getnext" unit test could fail
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews in a threaded build. [RT #42979]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews4427. [bug] The "query" and "response" parameters to the
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews "dnstap" option had their functions reversed.
86e71d7e8626de37559265f0edac8451bef6d001Andreas Gustafsson --- 9.11.0b3 released ---
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews4426. [bug] Addressed Coverity warnings. [RT #42908]
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews4425. [bug] arpaname, dnstap-read and named-rrchecker were not
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews being installed into ${prefix}/bin. Tidy up
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews installation issues with CHANGE 4421. [RT #42910]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson to provide feedback to the trust-anchor administrators
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews about how key rollovers are progressing as per
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews draft-ietf-dnsop-edns-key-tag-02. This can be
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews disabled using 'trust-anchor-telemetry no;'.
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews4423. [maint] Added missing IPv6 address 2001:500:84::b for
eeede5be4b3ff940b622799a04951e0dc45ad45fAndreas Gustafsson4422. [port] Silence clang warnings in dig.c and dighost.c.
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews4421. [func] When built with LMDB (Lightning Memory-mapped
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews Database), named will now use a database to store
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews the configuration for zones added by "rndc addzone"
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews instead of using a flat NZF file. This improves
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews performance of "rndc delzone" and "rndc modzone"
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews significantly. Existing NZF files will
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews automatically by converted to NZD databases.
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews To view the contents of an NZD or to roll back to
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews NZF format, use "named-nzd2nzf". To disable
c1567cb58cbf2eb816320ff49f000afafea02a85Mark Andrews this feature, use "configure --without-lmdb".
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews4420. [func] nslookup now looks for AAAA as well as A by default.
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington4419. [bug] Don't cause undefined result if the label of an
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington entry in catalog zone is changed. [RT #42708]
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson4417. [bug] dnssec-keymgr could fail to create successor keys
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson if the prepublication interval was set to a value
0b809e3e23f9f3d9697def5f447aa57d5aeef56bAndreas Gustafsson smaller than the default. [RT #42820]
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington4416. [bug] dnssec-keymgr: Domain names in policy files could
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington fail to match due to trailing dots. [RT #42807]
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington excluded. [RT #42884]
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington4414. [bug] Corrected a bug in the MIPS implementation of
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington isc_atomic_xadd(). [RT #41965]
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington was returned. [RT #42733]
683f10428e292811317df38fa324f242abbf7384Mark Andrews --- 9.11.0b2 released ---
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews removed. [RT #42721]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews4411. [func] "rndc dnstap -roll" automatically rolls the
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews dnstap output file; the previous version is
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews saved with ".0" suffix, and earlier versions
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews with ".1" and so on. An optional numeric argument
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews indicates how many prior files to save. [RT #42830]
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington4410. [bug] Address use after free and memory leak with dnstap.
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington4409. [bug] DNS64 should exclude mapped addresses by default when
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington an exclude acl is not defined. [RT #42810]
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington4408. [func] Continue waiting for expected response when we the
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington response we get does not match the request. [RT #41026]
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington4407. [performance] Use GCC builtin for clz in RPZ lookup code.
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington4406. [security] getrrsetbyname with a non absolute name could
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews trigger an infinite recursion bug in lwresd
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews and named with lwres configured if when combined
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews with a search list entry the resulting name is
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews too long. (CVE-2016-2775) [RT #42694]
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews4405. [bug] Change 4342 introduced a regression where you could
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington not remove a delegation in a NSEC3 signed zone using
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington OPTOUT via nsupdate. [RT #42702]
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews4404. [misc] Allow krb5-config to be used when configuring gssapi.
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews4403. [bug] Rename variables and arguments that shadow: basename,
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews clone and gai_error.
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews --- 9.11.0b1 released ---
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews4401. [misc] Change LICENSE to MPL 2.0.
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews4400. [bug] ttl policy was not being inherited in policy.py.
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson 'ECDSAP384SHA384' don't have settable keysize.
b938d2af619822a8262c86223cad958511e716a9Andreas Gustafsson4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews4397. [bug] Update Windows python support. [RT #42538]
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
3036da01090c0d1e11cddc26af16630d6d9c1f39Mark Andrews4395. [bug] Improve out-of-tree installation of python modules.
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews4394. [func] Add rndc command "dnstap-reopen" to close and
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews reopen dnstap output files. [RT #41803]
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson4393. [bug] Address potential NULL pointer dereferences in
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews dnstap code.
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson traffic-sizes and rcode-volume reporting. [RT #41475]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
23fb770906bf1fd98210f16ad660078274242963Mark Andrews4390. [doc] Description of masters with TSIG, allow-query and
23fb770906bf1fd98210f16ad660078274242963Mark Andrews allow-transfer options in catalog zones. [RT #42692]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington4389. [test] Rewritten test suite for catalog zones. [RT #42676]
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews4388. [func] Support for master entries with TSIG keys in catalog
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews zones. [RT #42577]
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews4387. [bug] Change 4336 was not complete leading to SERVFAIL
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews being return as NS records expired. [RT #42683]
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson4385. [func] Add support for allow-query and allow-transfer ACLs
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson to catalog zones. [RT #42578]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson4384. [bug] Change 4256 accidentally disabled logging of the
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews rndc command. [RT #42654]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews4383. [bug] Correct spelling error in stats channel description of
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews "EDNS client subnet option received". [RT #42633]
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews compare the zone name using a canonical format.
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews4381. [bug] Missing "zone-directory" option in catalog zone
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews definition caused BIND to crash. [RT #42579]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson --- 9.11.0a3 released ---
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson4380. [experimental] Added a "zone-directory" option to "catalog-zones"
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson syntax, allowing local masterfiles for slaves
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson that are provisioned by catalog zones to be stored
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson in a directory other than the server's working
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson directory. [RT #42527]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson4379. [bug] An INSIST could be triggered if a zone contains
f2c49862fb348586bb4b95a5388c86e0c0cbfa2cAndreas Gustafsson RRSIG records with expiry fields that loop
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews using serial number arithmetic. [RT #40571]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews4377. [bug] Don't reuse zero TTL responses beyond the current
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews client set (excludes ANY/SIG/RRSIG queries).
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews4376. [experimental] Added support for Catalog Zones, a new method for
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews provisioning secondary servers in which a list of
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews zones to be served is stored in a DNS zone and can
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews be propagated to slaves via AXFR/IXFR. [RT #41581]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson4375. [func] Add support for automatic reallocation of isc_buffer
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson to isc_buffer_put* functions. [RT #42394]
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington probability of reference counting errors as seen
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington in 4365. [RT #42405]
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington4372. [bug] Address undefined behavior in libt_api. [RT #42480]
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington4371. [func] New "minimal-any" option reduces the size of UDP
8bb79fc9b9952172d10f56f31739730e38d4b013Brian Wellington responses for qtype ANY by returning a single
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson arbitrarily selected RRset instead of all RRsets.
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson Thanks to Tony Finch. [RT #41615]
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson4370. [bug] Address python3 compatibility issues with RNDC module.
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson [RT #42499] [RT #42506]
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews --- 9.11.0a2 released ---
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews4369. [bug] Fix 'make' and 'make install' out-of-tree python
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson support. [RT #42484]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson4368. [bug] Fix a crash when calling "rndc stats" on some
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews Windows builds because some Visual Studio compilers
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson generated crashing code for the "%z" printf()
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson format specifier. [RT #42380]
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson4367. [bug] Remove unnecessary assignment of loadtime in
892476530f3971aff52f25103d488ece9b01f673Andreas Gustafsson zone_touched. [RT #42440]
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson4366. [bug] Address race condition when updating rbtnode bit
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews fields. [RT #42379]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews4365. [bug] Address zone reference counting errors involving
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson nxdomain-redirect. [RT #42258]
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson4363. [port] win32: Disable explicit triggering UAC when running
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews BINDInstall.
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews4362. [func] Changed rndc reconfig behavior so that newly added
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson zones are loaded asynchronously and the loading does
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson not block the server. [RT #41934]
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson4361. [cleanup] Where supported, file modification times returned
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson by isc_file_getmodtime() are now accurate to the
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson nanosecond. [RT #41968]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson4360. [bug] Silence spurious 'bad key type' message when there is
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson a existing TSIG key. [RT #42195]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson4359. [bug] Inherited 'also-notify' lists were not being checked
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson by named-checkconf. [RT #42174]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson4358. [test] Added American Fuzzy Lop harness that allows
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington feeding fuzzed packets into BIND.
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson4357. [func] Add the python RNDC module. [RT #42093]
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson4356. [func] Add the ability to specify whether to wait for
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson nameserver addresses to be looked up or not to
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson RPZ with a new modifying directive 'nsip-wait-recurse'.
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews4355. [func] "pkcs11-list" now displays the extractability
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson attribute of private or secret keys stored in
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews an HSM, as either "true", "false", or "never"
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews Thanks to Daniel Stirnimann. [RT #36557]
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson4354. [bug] Check that the received HMAC length matches the
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson expected length prior to check the contents on the
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson control channel. This prevents a OOB read error.
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson This was reported by Lian Yihan, <lianyihan@360.cn>.
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson4353. [cleanup] Update PKCS#11 header files. [RT #42175]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer is scheduled to be disabled in 2017. A warning is
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer now logged when named is configured to use it,
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer either explicitly or via "dnssec-lookaside auto;"
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson4351. [bug] 'dig +noignore' didn't work. [RT #42273]
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson4349. [contrib] kasp2policy: A python script to create a DNSSEC
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson policy file from an OpenDNSSEC KASP XML file.
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews4348. [func] dnssec-keymgr: A new python-based DNSSEC key
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews management utility, which reads a policy definition
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson file and can create or update DNSSEC keys as needed
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews to ensure that a zone's keys match policy, roll over
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews correctly on schedule, etc. Thanks to Sebastian
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews Castro for assistance in development. [RT #39211]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews4346. [bug] Fixed a regression introduced in change #4337 which
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews caused signed domains with revoked KSKs to fail
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson validation. [RT #42147]
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson4345. [contrib] perftcpdns mishandled the return values from
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson clock_nanosleep. [RT #42131]
9eec883bf871ee2235009e889440f986c98908b8Andreas Gustafsson4344. [port] Address openssl version differences. [RT #42059]
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson4342. [bug] 'rndc flushtree' could fail to clean the tree if there
088eaf3878580eebbbd2b020411532af278aae5aAndreas Gustafsson wasn't a node at the specified name. [RT #41846]
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews --- 9.11.0a1 released ---
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews4341. [bug] Correct the handling of ECS options with
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson address family 0. [RT #41377]
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson4340. [performance] Implement adaptive read-write locks, reducing the
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer overhead of locks that are only held briefly.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington4338. [bug] Reimplement change 4324 as it wasn't properly doing
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington all the required book keeping. [RT #41941]
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews4337. [bug] The previous change exposed a latent flaw in
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews key refresh queries for managed-keys when
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson a cached DNSKEY had TTL 0. [RT #41986]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson4336. [bug] Don't emit records with zero ttl unless the records
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson were learnt with a zero ttl. [RT #41687]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews4335. [bug] zone->view could be detached too early. [RT #41942]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews4334. [func] 'named -V' now reports zlib version. [RT #41913]
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews 2001:500:9f::42.
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews4332. [placeholder]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews4331. [func] When loading managed signed zones detect if the
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews RRSIG's inception time is in the future and regenerate
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews the RRSIG immediately. [RT #41808]
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews4330. [protocol] Identify the PAD option as "PAD" when printing out
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews4329. [func] Warn about a common misconfiguration when forwarding
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews RFC 1918 zones. [RT #41441]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews4327. [func] Log query and depth counters during fetches when
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews querytrace (./configure --enable-querytrace) is
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews enabled (helps in diagnosing). [RT #41787]
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews4326. [protocol] Add support for AVC. [RT #41819]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews4325. [func] Add a line to "rndc status" indicating the
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews hostname and operating system details. [RT #41610]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews4324. [bug] When deleting records from a zone database, interior
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews nodes could be left empty but not deleted, damaging
64e9b7eafb798c75e9a40948cf05d8847da59d9dAndreas Gustafsson search performance afterward. [RT #40997]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews4323. [bug] Improve HTTP header processing on statschannel.
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews4322. [security] Duplicate EDNS COOKIE options in a response could
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews trigger an assertion failure. (CVE-2016-2088)
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews4321. [bug] Zones using mapped files containing out-of-zone data
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews could return SERVFAIL instead of the expected NODATA
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews or NXDOMAIN results. [RT #41596]
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews4320. [bug] Insufficient memory allocation when handling
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews "none" ACL could cause an assertion failure in
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews named when parsing ACL configuration. [RT #41745]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson4319. [security] Fix resolver assertion failure due to improper
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson DNAME handling when parsing fetch reply messages.
5f4804c7e47e3cfe7237d27a354d268b0b7ea73bAndreas Gustafsson (CVE-2016-1286) [RT #41753]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson4318. [security] Malformed control messages can trigger assertions
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson in named and rndc. (CVE-2016-1285) [RT #41666]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson4316. [func] Add option to tools to print RRs in unknown
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson presentation format [RT #41595].
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson4315. [bug] Check that configured view class isn't a meta class.
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews testing tools provided by Nominum, Inc.
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson4313. [bug] Handle ns_client_replace failures in test mode.
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews was not consistent. [RT #41600]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson4311. [bug] Prevent "rndc delzone" from being used on
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson response-policy zones. [RT #41593]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson4310. [performance] Use __builtin_expect() where available to annotate
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson conditions with known behavior. [RT #41411]
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews4309. [cleanup] Remove the spurious "none" filename from log messages
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews when processing built-in configuration. [RT #41594]
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson4308. [func] Added operating system details to "named -V"
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson output. [RT #41452]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson4307. [bug] "dig +subnet" and "mdig +subnet" could send
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson incorrectly-formatted Client Subnet options
1c398fd83c444d61904d23431d3994139919b68eAndreas Gustafsson if the prefix length was not divisible by 8.
be9932698bf35d0f34e65b5ffbb81bedddd76636Mark Andrews Also fixed a memory leak in "mdig". [RT #45178]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson4306. [maint] Added a PKCS#11 openssl patch supporting
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson version 1.0.2f [RT #38312]
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews from the zone's apex. [RT #41483]
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews4304. [port] xfer system test failed as 'tail -n +value' is not
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews portable. [RT #41315]
479c6fc4584e062088ceee037690cdff85fc349bAndreas Gustafsson4303. [bug] "dig +subnet" was unable to send a prefix length of
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews zero, as it was incorrectly changed to 32 for v4
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson prefixes or 128 for v6 prefixes. In addition to
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson fixing this, "dig +subnet=0" has been added as a
1255d388f034dc556d235a002527101781dbeb29Mark Andrews short form for 0.0.0.0/0. The same changes have
1255d388f034dc556d235a002527101781dbeb29Mark Andrews also been made in "mdig". [RT #41553]
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews4300. [bug] A flag could be set in the wrong field when setting
f04c15adc7e62deb2f53cc53f32d890936007903Andreas Gustafsson up non-recursive queries; this could cause the
f04c15adc7e62deb2f53cc53f32d890936007903Andreas Gustafsson SERVFAIL cache to cache responses it shouldn't.
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews New querytrace logging has been added which
53c07ca2164f8a083aa97591345bf4339a8573bdAndreas Gustafsson identified this error. [RT #41155]
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews4299. [bug] Check that exactly totallen bytes are read when
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson reading a RRset from raw files in both single read
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson and incremental modes. [RT #41402]
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson4298. [bug] dns_rpz_add errors in loadzone were not being
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson propagated up the call stack. [RT #41425]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson4297. [test] Ensure delegations in RPZ zones fail robustly.
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews4296. [bug] TCP packet sizes were calculated incorrectly in the
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews stats channel; they could be counted in the wrong
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews histogram bucket. [RT #40587]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews could allow incorrect text formatting of EDNS EXPIRE
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews options. [RT #41437]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews4294. [bug] Fixed a regression in which "rndc stop -p" failed
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson to print the PID. [RT #41513]
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson4293. [bug] Address memory leak on priming query creation failure.
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews4292. [placeholder]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson4290. [func] The timers returned by the statistics channel
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson (indicating current time, server boot time, and
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson most recent reconfiguration time) are now reported
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson with millisecond accuracy. [RT #40082]
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson4289. [bug] The server could crash due to memory being used
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson after it was freed if a zone transfer timed out.
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews4288. [bug] Fixed a regression in resolver.c:possibly_mark()
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson which caused known-bogus servers to be queried
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews anyway. [RT #41321]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson4287. [bug] Silence an overly noisy log message when message
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson parsing fails. [RT #41374]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson4286. [security] render_ecs errors were mishandled when printing out
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson a OPT record resulting in a assertion failure.
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson (CVE-2015-8705) [RT #41397]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson4285. [security] Specific APL data could trigger a INSIST.
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson (CVE-2015-8704) [RT #41396]
9bdb01e6c382e897572791b12190472955994d87Mark Andrews4284. [bug] Some GeoIP options were incorrectly documented
9bdb01e6c382e897572791b12190472955994d87Mark Andrews using abbreviated forms which were not accepted by
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson named. The code has been updated to allow both
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson long and abbreviated forms. [RT #41381]
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson4282. [func] 'dig +[no]mapped' determine whether the use of mapped
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson IPv4 addresses over IPv6 is permitted or not. The
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson default is +mapped. [RT #41307]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews4280. [performance] Use optimal message sizes to improve compression
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews in AXFRs. This reduces network traffic. [RT #40996]
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson4279. [test] Don't use fixed ports when unit testing. [RT #41194]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson4277. [performance] Improve performance of the RBT, the central zone
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson datastructure: The aux hashtable was improved,
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson hash function was updated to perform more
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson uniform mapping, uppernode was added to
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson dns_rbtnode, and other cleanups and performance
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson improvements were made. [RT #41165]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson4276. [protocol] Add support for SMIMEA. [RT #40513]
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson4275. [performance] Lazily initialize dns_compress->table only when
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson compression is enabled. [RT #41189]
cf638fc378d74dd4afa59fe11d04da7b0cddca88Andreas Gustafsson4274. [performance] Speed up typemap processing from text. [RT #41196]
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson4273. [bug] Only call dns_test_begin() and dns_test_end() once each
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson in nsec3_test as it fails with GOST if called multiple
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson4272. [bug] dig: the +norrcomments option didn't work with +multi.
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson4270. [security] Update allowed OpenSSL versions as named is
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews potentially vulnerable to CVE-2015-3193.
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson4269. [bug] Zones using "map" format master files currently
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson don't work as policy zones. This limitation has
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews now been documented; attempting to use such zones
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson in "response-policy" statements is now a
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson configuration error. [RT #38321]
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson4268. [func] "rndc status" now reports the path to the
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson configuration file. [RT #36470]
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews4267. [test] Check sdlz error handling. [RT #41142]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews4266. [placeholder]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
f08782f0923d11227983a352c26301cf703383cfMark Andrews4264. [bug] Check const of strchr/strrchr assignments match
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson argument's const status. [RT #41150]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson4263. [contrib] Address compiler warnings in mysqldyn module.
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson4262. [bug] Fixed a bug in epoll socket code that caused
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson sockets to not be registered for ready
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson notification in some cases, causing named to not
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson read from or write to them, resulting in what
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson appear to the user as blocked connections.
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson4260. [security] Insufficient testing when parsing a message allowed
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson records with an incorrect class to be be accepted,
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews triggering a REQUIRE failure when those records
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson were subsequently cached. (CVE-2015-8000) [RT #40987]
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson4259. [func] Add an option for non-destructive control channel
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson access using a "read-only" clause. In such
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson cases, a restricted set of rndc commands are
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews allowed for querying information from named.
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson4258. [bug] Limit rndc query message sizes to 32 KiB. This should
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson not break any legitimate rndc commands, but will
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews prevent a rogue rndc query from allocating too
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson much memory. [RT #41073]
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson4256. [bug] Allow rndc command arguments to be quoted so as
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson to allow spaces. [RT #36665]
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson4255. [performance] Add 'message-compression' option to disable DNS
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson compression in responses. [RT #40726]
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson4254. [bug] Address missing lock when getting zone's serial.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson4253. [security] Address fetch context reference count handling error
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington on socket error. (CVE-2015-8461) [RT#40945]
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington4252. [func] Add support for automating the generation CDS and
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson CDNSKEY rrsets to named and dnssec-signzone.
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson4251. [bug] NTAs were deleted when the server was reconfigured
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson or reloaded. [RT #41058]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson4250. [func] Log the TSIG key in use during inbound zone
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson transfers. [RT #41075]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson4249. [func] Improve error reporting of TSIG / SIG(0) records in
595a14576ea14884c35b3726f054f2065365620bMark Andrews the wrong location. [RT #41030]
595a14576ea14884c35b3726f054f2065365620bMark Andrews4248. [performance] Add an isc_atomic_storeq() function, use it in
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson stats counters to improve performance.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson [RT #39972] [RT #39979]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson defined to report json library version. [RT #41045]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson4246. [test] Ensure the statschannel system test runs when BIND
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson is not built with libjson. [RT #40944]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson4245. [placeholder]
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews4244. [bug] The parser was not reporting that use-ixfr is obsolete.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson4242. [bug] Replace the client if not already replaced when
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson prefetching. [RT #41001]
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson the ARM. [RT #40955]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson4240. [port] Fix LibreSSL compatibility. [RT #40977]
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington4239. [func] Changed default servfail-ttl value to 1 second from 10.
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington Also, the maximum value is now 30 instead of 300.
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson4237. [doc] Upgraded documentation toolchain to use DocBook 5
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer and dblatex. [RT #40766]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson4236. [performance] On machines with 2 or more processors (CPU), the
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews default value for the number of UDP listeners
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews has been changed to the number of detected
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews processors minus one. [RT #40761]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson4235. [func] Added support in named for "dnstap", a fast method of
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews capturing and logging DNS traffic, and a new command
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews "dnstap-read" to read a dnstap log file. Use
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews "configure --enable-dnstap" to enable this
5c831a1a1b14470037de6d8bc0501aea5dc6cacdAndreas Gustafsson feature (note that this requires libprotobuf-c
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington and libfstrm). See the ARM for configuration details.
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews Thanks to Robert Edmonds of Farsight Security.
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews4234. [func] Add deflate compression in statistics channel HTTP
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews server. [RT #40861]
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson4232. [contrib] Address unchecked memory allocation calls in
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson query-loc and zone2ldap. [RT #40789]
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson uninitialized result. [RT #40839]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson4229. [bug] A variable could be used uninitialized in
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson dns_update_signaturesinc. [RT #40784]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson4228. [bug] Address race condition in dns_client_destroyrestrans.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson4227. [bug] Silence static analysis warnings. [RT #40828]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson4226. [bug] Address a theoretical shutdown race in
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson zone.c:notify_send_queue(). [RT #38958]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews shared libraries. [RT #39557]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson4224. [func] Added support for "dyndb", a new interface for loading
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson zone data from an external database, developed by
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson Red Hat for the FreeIPA project.
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson DynDB drivers fully implement the BIND database
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson API, and are capable of significantly better
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson performance and functionality than DLZ drivers,
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson while taking advantage of advanced database
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson features not available in BIND such as multi-master
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson Thanks to Adam Tkac and Petr Spacek of Red Hat.
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews4223. [func] Add support for setting max-cache-size to percentage
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson of available physical memory, set default to 90%.
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington4222. [func] Bias IPv6 servers when selecting the next server to
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson query. [RT #40836]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews4220. [doc] Improve documentation for zone-statistics.
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews EGAIN when these soft error are not retried for
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews isc_socket_send*().
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews4218. [bug] Potential null pointer dereference on out of memory
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews if mmap is not supported. [RT #40777]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson4217. [protocol] Add support for CSYNC. [RT #40532]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson4216. [cleanup] Silence static analysis warnings. [RT #40649]
5af0708e7fd78976a33de70f9380785f4086a1f0Andreas Gustafsson4215. [bug] nsupdate: skip to next request on GSSTKEY create
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson failure. [RT #40685]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews4214. [protocol] Add support for TALINK. [RT #40544]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews4213. [bug] Don't reuse a cache across multiple classes.
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson4212. [func] Re-query if we get a bad client cookie returned over
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews UDP. [RT #40748]
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews4211. [bug] Ensure that lwresd gets at least one task to work
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson with if enabled. [RT #40652]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson4210. [cleanup] Silence use after free false positive. [RT #40743]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson4209. [bug] Address resource leaks in dlz modules. [RT #40654]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson4208. [bug] Address null pointer dereferences on out of memory.
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer4207. [bug] Handle class mismatches with raw zone files.
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer4206. [bug] contrib: fixed a possible NULL dereference in
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer DLZ wildcard module. [RT #40745]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer4205. [bug] 'named-checkconf -p' could include unwanted spaces
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer when printing tuples with unset optional fields.
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson4204. [bug] 'dig +trace' failed to lookup the correct type if
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson the initial root NS query was retried. [RT #40296]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson4203. [test] The rrchecker system test now tests conversion
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson to and from unknown-type format. [RT #40584]
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews4202. [bug] isccc_cc_fromwire() could return an incorrect
539cad8f49b38540b7c20c64d1ef456cb2fa7914Andreas Gustafsson result. [RT #40614]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews4201. [func] The default preferred-glue is now the address record
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson type of the transport the query was received
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews over. [RT #40468]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4200. [cleanup] win32: update BINDinstall to be BIND release
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews independent. [RT #38915]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews [RT #40545] [RT #40547] [RT #40561] [RT #40563]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4198. [placeholder]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews4196. [doc] Improve how "enum + other" types are documented.
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer4194. [bug] named-checkconf -p failed to properly print a port
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson range. [RT #40634]
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson4193. [bug] Handle broken servers that return BADVERS incorrectly.
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews4192. [bug] The default rrset-order of random was not always being
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson applied. [RT #40456]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews as per RFC 6763. [RT #37889]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson valid with check-names. <forest> still needs to be
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson LDH. [RT #40399]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson4189. [cleanup] Don't exit on overly long tokens in named.conf.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson4188. [bug] Support HTTP/1.0 client properly on the statistics
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews channel. [RT #40261]
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews4187. [func] When any RR type implementation doesn't
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews implement totext() for the RDATA's wire
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson representation and returns ISC_R_NOTIMPLEMENTED,
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson such RDATA is now printed in unknown
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson presentation format (RFC 3597). RR types affected
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson include LOC(29) and APL(42). [RT #40317].
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson4186. [bug] Fixed an RPZ bug where a QNAME would be matched
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson against a policy RR with wildcard owner name
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson (trigger) where the QNAME was the wildcard owner
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington name's parent. For example, the bug caused a query
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson with QNAME "example.com" to match a policy RR with
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson "*.example.com" as trigger. [RT #40357]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson owner name (trigger) would prevent another policy RR
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson with its parent owner name from being
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson loaded. For example, the bug caused a policy RR
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson with trigger "example.com" to not have any
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews effect when a previous policy RR with trigger
4d77dbcfa052c065a87d2d35b116f17b74bae573Andreas Gustafsson "*.example.com" existed in that RPZ zone.
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews4184. [bug] Fixed a possible memory leak in name compression
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington when rendering long messages. (Also, improved
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson wire_test for testing such messages.) [RT #40375]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson4183. [cleanup] Use timing-safe memory comparisons in cryptographic
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson code. Also, the timing-safe comparison functions have
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington been renamed to avoid possible confusion with
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson memcmp(). Thanks to Loganaden Velvindron of
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington AFRINIC. [RT #40148]
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington4182. [cleanup] Use mnemonics for RR class and type comparisons.
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson4181. [bug] Queued notify messages could be dequeued from the
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington wrong rate limiter queue. [RT #40350]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews4180. [bug] Error responses in pipelined queries could
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews cause a crash in client.c. [RT #40289]
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson4179. [bug] Fix double frees in getaddrinfo() in libirs.
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson text. [RT #40274]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington4177. [bug] Fix assertion failure in parsing NSAP records from
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson text. [RT #40285]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington4176. [bug] Address race issues with lwresd. [RT #40284]
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews4175. [bug] TKEY with GSS-API keys needed bigger buffers.
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson4174. [bug] "dnssec-coverage -r" didn't handle time unit
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson suffixes correctly. [RT #38444]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews4173. [bug] dig +sigchase was not properly matching the trusted
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews key. [RT #40188]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
47d48791fc352fcdf9019200070221be41a8d77cMark Andrews4171. [bug] Fixed incorrect class checks in TSIG RR
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson implementation. [RT #40287]
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson4170. [security] An incorrect boundary check in the OPENPGPKEY
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson rdatatype could trigger an assertion failure.
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson (CVE-2015-5986) [RT #40286]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson4169. [test] Added a 'wire_test -d' option to read input as
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson raw binary data, for use as a fuzzing harness.
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington4168. [security] A buffer accounting error could trigger an
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington assertion failure when parsing certain malformed
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson DNSSEC keys. (CVE-2015-5722) [RT #40212]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson4167. [func] Update rndc's usage output to include recently added
c6de6524d777c90ae8011af8b10f5cac044081e5Mark Andrews commands. Thanks to Tony Finch for submitting a
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington patch. [RT #40010]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson4166. [func] Print informative output from rndc showzone when
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington allow-new-zones is not enabled for a view. Thanks to
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington Tony Finch for submitting a patch. [RT #40009]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington4165. [security] A failure to reset a value to NULL in tkey.c could
e9596e1fb3dfa560216776acdbfac3cf5ef97157Mark Andrews result in an assertion failure. (CVE-2015-5477)
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley4164. [bug] Don't rename slave files and journals on out of memory.
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley4163. [bug] Address compiler warnings. [RT #40024]
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson4161. [test] Add JSON test for traffic size stats; also test
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson for consistency between "rndc stats" and the XML
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington and JSON statistics channel contents. [RT #38700]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson4160. [placeholder]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson4159. [cleanup] Alphabetize dig's help output. [RT #39966]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson4158. [placeholder]
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson4157. [placeholder]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington4156. [func] Added statistics counters to track the sizes
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson of incoming queries and outgoing responses in
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington histogram buckets, as specified in RSSAC002.
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson4155. [func] Allow RPZ rewrite logging to be configured on a
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson per-zone basis using a newly introduced log clause in
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson the response-policy option. [RT #39754]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson4154. [bug] A OPT record should be included with the FORMERR
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson response when there is a malformed EDNS option.
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson4153. [bug] Dig should zero non significant +subnet bits. Check
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington that non significant ECS bits are zero on receipt.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson4152. [func] Implement DNS COOKIE option. This replaces the
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson experimental SIT option of BIND 9.10. The following
57188b5ff2397c0517e55f622879e69ee547918dAndreas Gustafsson named.conf directives are available: send-cookie,
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson cookie-secret, cookie-algorithm, nocookie-udp-size
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson and require-server-cookie. The following dig options
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson are available: +[no]cookie[=value] and +[no]badcookie.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson minimal fix. [RT #39667]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson4149. [bug] Fixed a race condition in the getaddrinfo()
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson implementation in libirs, which caused the delv
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews utility to crash with an assertion failure when using
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews the '@server' syntax with a hostname argument.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence4148. [bug] Fix a bug when printing zone names with '/' character
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence in XML and JSON statistics output. [RT #39873]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence was returning referrals rather than nodata responses
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence when the AAAA records were filtered. [RT #39843]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence4146. [bug] Address reference leak that could prevent a clean
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence shutdown. [RT #37125]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence4145. [bug] Not all unassociated adb entries where being printed.
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson4144. [func] Add statistics counters for nxdomain redirections.
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson4143. [placeholder]
f5ebf2f0c9e9d2068ace1dbcc2ef2ed3ebdbfde5Andreas Gustafsson4142. [bug] rndc addzone with view specified saved NZF config
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson that could not be read back by named. This has now
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington been fixed. [RT #39845]
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson4141. [bug] A formatting bug caused rndc zonestatus to print
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson negative numbers for large serial values. This has
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence now been fixed. [RT #39854]
112d9875bf33e2382f9a986d3e58fce08f1935fcOlafur Gudmundsson4140. [cleanup] Remove redundant nzf_remove() call during delzone.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson4138. [security] An uninitialized value in validator.c could result
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson in an assertion failure. (CVE-2015-4620) [RT #39795]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson4137. [bug] Make rndc reconfig report configuration errors the
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson same way rndc reload does. [RT #39635]
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson4136. [bug] Stale statistics counters with the leading
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson '#' prefix (such as #NXDOMAIN) were not being
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson updated correctly. This has been fixed. [RT #39141]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence4135. [cleanup] Log expired NTA at startup. [RT #39680]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence4134. [cleanup] Include client-ip rules when logging the number
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence of RPZ rules of each type. [RT #39670]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence4133. [port] Update how various json libraries are handled.
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence4132. [cleanup] dig: added +rd as a synonym for +recurse,
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence added +class as an unabbreviated alternative
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence to +cl. [RT #39686]
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence4131. [bug] Addressed further problems with reloading RPZ
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence zones. [RT #39649]
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence4130. [bug] The compatibility shim for *printf() misprinted some
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence large numbers. [RT #39586]
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson key as per RFC 7344, Section 4.1. [RT #37215]
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington4126. [bug] Addressed a regression introduced in change #4121.
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson4125. [test] Added tests for dig, renamed delv test to digdelv.
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson4124. [func] Log errors or warnings encountered when parsing the
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson internal default configuration. Clarify the logging
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson of errors and warnings encountered in rndc
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson addzone or modzone parameters. [RT #39440]
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington4123. [port] Added %z (size_t) format options to the portable
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson internal printf/sprintf implementation. [RT #39586]
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews4122. [bug] The server could match a shorter prefix than what was
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson available in CLIENT-IP policy triggers, and so, an
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews unexpected action could be taken. This has been
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews corrected. [RT #39481]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson4121. [bug] On servers with one or more policy zones
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson configured as slaves, if a policy zone updated
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson during regular operation (rather than at
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson startup) using a full zone reload, such as via
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson AXFR, a bug could allow the RPZ summary data to
711c2be7d9d99ee4415bc4e41ebe4f7f31947b3bAndreas Gustafsson fall out of sync, potentially leading to an
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson assertion failure in rpz.c when further
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson incremental updates were made to the zone, such
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson as via IXFR. [RT #39567]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson4120. [bug] A bug in RPZ could cause the server to crash if
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson policy zones were updated while recursion was
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson pending for RPZ processing of an active query.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson4119. [test] Allow dig to set the message opcode. [RT #39550]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson4118. [bug] Teach isc-config.sh about irs. [RT #39213]
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington4116. [bug] Fix a bug in RPZ that could cause some policy
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson zones that did not specifically require
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington recursion to be treated as if they did;
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington consequently, setting qname-wait-recurse no; was
99a8d30559834dc12bd80f4f164fa6375f73cb62Mark Andrews sometimes ineffective. [RT #39229]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence4115. [func] "rndc -r" now prints the result code (e.g.,
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence running the requested command. [RT #38913]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence4114. [bug] Fix a regression in radix tree implementation
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence introduced by ECS code. This bug was never
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence released, but it was reported by a user testing
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence master. [RT #38983]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence4113. [test] Check for Net::DNS is some system test
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence prerequisites. [RT #39369]
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews4112. [bug] Named failed to load when "root-delegation-only"
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson was used without a list of domains to exclude.
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews4111. [doc] Alphabetize rndc man page. [RT #39360]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4110. [bug] Address memory leaks / null pointer dereferences
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson on out of memory. [RT #39310]
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews4109. [port] linux: support reading the local port range from
fb13bc029f62193a07d92384a910a0317fc7e0b0Brian Wellington4108. [func] An additional NXDOMAIN redirect method (option
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews "nxdomain-redirect") has been added, allowing
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews redirection to a specified DNS namespace instead
fb13bc029f62193a07d92384a910a0317fc7e0b0Brian Wellington of a single redirect zone. [RT #37989]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4107. [bug] Address potential deadlock when updating zone content.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4106. [port] Improve readline support. [RT #38938]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4105. [port] Misc fixes for Microsoft Visual Studio
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence 2015 CTP6 in 64 bit mode. [RT #39308]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4104. [bug] Address uninitialized elements. [RT #39252]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4103. [port] Misc fixes for Microsoft Visual Studio
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence 2015 CTP6. [RT #39267]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4102. [bug] Fix a use after free bug introduced in change
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence #4094. [RT #39281]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4101. [bug] dig: the +split and +rrcomments options didn't
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence work with +short. [RT #39291]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4100. [bug] Inherited owernames on the line immediately following
74cc9d733ca94d43310ff3df84d7a4644c0950f9Andreas Gustafsson a $INCLUDE were not working. [RT #39268]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4099. [port] clang: make unknown commandline options hard errors
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence when determining what options are supported.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4098. [bug] Address use-after-free issue when using a
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence predecessor key with dnssec-settime. [RT #39272]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4097. [func] Add additional logging about xfrin transfer status.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4096. [bug] Fix a use after free of query->sendevent.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4095. [bug] zone->options2 was not being properly initialized.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence4094. [bug] A race during shutdown or reconfiguration could
5455f30a7532738d750252c00e649890c694ee30Brian Wellington cause an assertion in mem.c. [RT #38979]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington4093. [func] Dig now learns the SIT value from truncated
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson responses when it retries over TCP. [RT #39047]
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
89d03d4715120fd0c968775bf0724b5a2a647539Mark Andrews4090. [bug] Fix a crash while parsing malformed CAA RRs in
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews presentation format, i.e., from text such as
4fbd6a13a5ba6ec1e9bd080cba86c74b3b92c894Mark Andrews from master files. Thanks to John Van de
761a21dfab558235030ccfc3d61979146e2cf4b5Mark Andrews Meulebrouck Brendgard for discovering and
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson reporting this problem. [RT #39003]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson4089. [bug] Send notifies immediately for slave zones during
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson startup. [RT #38843]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson4088. [port] Fixed errors when building with libressl. [RT #38899]
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson4087. [bug] Fix a crash due to use-after-free due to sequencing
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson of tasks actions. [RT #38495]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson4084. [bug] Fix a possible race in updating stats counters.
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson4083. [cleanup] Print the number of CPUs and UDP listeners
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson consistently in the log and in "rndc status"
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson output; indicate whether threads are supported
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson in "named -V" output. [RT #38811]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson4082. [bug] Incrementally sign large inline zone deltas.
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington4080. [func] Completed change #4022, adding a "lock-file" option
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington to named.conf to override the default lock file,
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley in addition to the "named -X <filename>" command
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley line option. Setting the lock file to "none"
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley using either method disables the check completely.
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson4079. [func] Preserve the case of the owner name of records to
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson the RRset level. [RT #37442]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson CMSG_SPACE(sizeof(char)). [RT #38621]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson4077. [test] Add static-stub regression test for DS NXDOMAIN
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson return making the static stub disappear. [RT #38564]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson4076. [bug] Named could crash on shutdown with outstanding
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews reload / reconfig events. [RT #38622]
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews4075. [placeholder]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson4073. [cleanup] Add libjson-c version number reporting to
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington "named -V"; normalize version number formatting.
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington4072. [func] Add a --enable-querytrace configure switch for
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson very verbose query trace logging. (This option
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington has a negative performance impact and should be
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington used only for debugging.) [RT #37520]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson4071. [cleanup] Initialize pthread mutex attrs just once, instead of
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson doing it per mutex creation. [RT #38547]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley4070. [bug] Fix a segfault in nslookup in a query such as
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley4069. [doc] Reorganize options in the nsupdate man page.
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson4068. [bug] Omit unknown serial number from JSON zone statistics.
296253a3b9dec61190cce77e8b551e05ff514fcdAndreas Gustafsson4067. [cleanup] Reduce noise from RRL when query logging is
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence disabled. [RT #38648]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence4066. [doc] Reorganize options in the dig man page. [RT #38516]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence4065. [test] Additional RFC 5011 tests. [RT #38569]
1ac6cf2f7ae95e4c915cba7038e61930d7c4ba2aAndreas Gustafsson4064. [contrib] dnssec-keyset.sh: Generates a specified number
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence of DNSSEC keys with timing set to implement a
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson pre-publication key rollover strategy. Thanks
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson to Jeffry A. Spain. [RT #38459]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson4063. [bug] Asynchronous zone loads were not handled
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson correctly when the zone load was already in
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson progress; this could trigger a crash in zt.c.
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson4062. [bug] Fix an out-of-bounds read in RPZ code. If the
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson read succeeded, it doesn't result in a bug
47afc27c28aef95d94e8d1296498ba57a5f00b25Brian Wellington during operation. If the read failed, named
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson could segfault. [RT #38559]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4061. [bug] Handle timeout in legacy system test. [RT #38573]
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington4060. [bug] dns_rdata_freestruct could be called on a
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson uninitialized structure when handling a error.
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington4059. [bug] Addressed valgrind warnings. [RT #38549]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson4058. [bug] UDP dispatches could use the wrong pseudorandom
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson number generator context. [RT #38578]
4df51a8f53381d57b3dd75dd84615abd4cf9e969Andreas Gustafsson4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson4056. [bug] Expanded automatic testing of trust anchor
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson management and fixed several small bugs including
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson a memory leak and a possible loss of key state
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson information. [RT #38458]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington4055. [func] "rndc managed-keys" can be used to check status
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson of trust anchors or to force keys to be refreshed,
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington Also, the managed keys data file has easier-to-read
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington comments. [RT #38458]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4054. [func] Added a new tool 'mdig', a lightweight clone of
55ddb88e53838693370c213930beda1652b8a583Brian Wellington dig able to send multiple pipelined queries.
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington4053. [security] Revoking a managed trust anchor and supplying
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington an untrusted replacement could cause named
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson to crash with an assertion failure.
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington (CVE-2015-1349) [RT #38344]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4052. [bug] Fix a leak of query fetchlock. [RT #38454]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley4050. [bug] RPZ could send spurious SERVFAILs in response
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington to duplicate queries. [RT #38510]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4048. [bug] adb hash table was not being grown. [RT #38470]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence4047. [cleanup] "named -V" now reports the current running versions
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence of OpenSSL and the libxml2 libraries, in addition to
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence the versions that were in use at build time.
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington4046. [bug] Accounting of "total use" in memory context
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington statistics was not correct. [RT #38370]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4045. [bug] Skip to next master on dns_request_createvia4 failure.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson4044. [bug] Change 3955 was not complete, resulting in an assertion
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington failure if the timing was just right. [RT #38352]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington4043. [func] "rndc modzone" can be used to modify the
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington configuration of an existing zone, using similar
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson syntax to "rndc addzone". [RT #37895]
c1ff0308f3f67bf148f96ca952db081eb5fd8383Brian Wellington4042. [bug] zone.c:iszonesecure was being called too late.
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson4041. [func] TCP sockets can now be shared while connecting.
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson (This will be used to enable client-side support
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson of pipelined queries.) [RT #38231]
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson4040. [func] Added server-side support for pipelined TCP
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson queries. Clients may continue sending queries via
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson TCP while previous queries are being processed
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson in parallel. (The new "keep-response-order"
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington option allows clients to be specified for which
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington the old behavior will still be used.) [RT #37821]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson4038. [bug] Add 'rpz' flag to node and use it to determine whether
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson to call dns_rpz_delete. This should prevent unbalanced
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington add / delete calls. [RT #36888]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson4037. [bug] also-notify was ignoring the tsig key when checking
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson for duplicates resulting in some expected notify
48565891e8f2f8c77b87908b4893f693a08e9ba9Brian Wellington messages not being sent. [RT #38369]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson4036. [bug] Make call to open a temporary file name safe during
b0390aab30438a13f533cccae9389945214b1421Brian Wellington NZF creation. [RT #38331]
b0390aab30438a13f533cccae9389945214b1421Brian Wellington4035. [bug] Close temporary and NZF FILE pointers before moving
b0390aab30438a13f533cccae9389945214b1421Brian Wellington the former into the latter's place, as required on
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson Windows. [RT #38332]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson4034. [func] When added, negative trust anchors (NTA) are now
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson saved to files (viewname.nta), in order to
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson persist across restarts of the named server.
91e35ded544576b671606779143d7fbffaf451d2Andreas Gustafsson4033. [bug] Missing out of memory check in request.c:req_send.
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson4032. [bug] Built-in "empty" zones did not correctly inherit the
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson "allow-transfer" ACL from the options or view.
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson4031. [bug] named-checkconf -z failed to report a missing file
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington with a hint zone. [RT #38294]
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington4030. [func] "rndc delzone" is now applicable to zones that were
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews configured in named.conf, as well as zones that
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews were added via "rndc addzone". (Note, however, that
02e7e0ba65a26a5f8728b0ee256f7253795cf839Brian Wellington if named.conf is not also modified, the deleted zone
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson will return when named is reloaded.) [RT #37887]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence4029. [func] "rndc showzone" displays the current configuration
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence of a specified zone. [RT #37887]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence4028. [bug] $GENERATE with a zero step was not being caught as a
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson error. A $GENERATE with a / but no step was not being
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson caught as a error. [RT #38262]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
88a790c39176f72a8f98f134b83df92e09a8c56bAndreas Gustafsson4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington4025. [port] bsdi: failed to build. [RT #38047]
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews dns_rdata_opt_current, dns_rdata_txt_first,
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews dns_rdata_txt_next and dns_rdata_txt_current were
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley documented but not implemented. These have now been
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley implemented.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley dns_rdata_spf_first, dns_rdata_spf_next and
76b3ec5e0c3ae856bc1000270bf3df13580673ebBrian Wellington dns_rdata_spf_current were documented but not
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley implemented. The prototypes for these
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley functions have been removed. [RT #38068]
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington4023. [bug] win32: socket handling with explicit ports and
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington invoking named with -4 was broken for some
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington configurations. [RT #38068]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson4022. [func] Stop multiple spawns of named by limiting number of
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson processes to 1. This is done by using a lockfile and
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson checking whether we can listen on any configured
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson TCP interfaces. [RT #37908]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson4021. [bug] Adjust max-recursion-queries to accommodate
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson the need for more queries when the cache is
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson empty. [RT #38104]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson resulting in updates being sent to the wrong server.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley4019. [func] If named is not configured to validate the answer
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley then allow fallback to plain DNS on timeout even
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley when we know the server supports EDNS. [RT #37978]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington4018. [placeholder]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson4017. [test] Add system test to check lookups to legacy servers
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson with broken DNS behavior. [RT #37965]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson4016. [bug] Fix a dig segfault due to bad linked list usage.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson4015. [bug] Nameservers that are skipped due to them being
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson CNAMEs were not being logged. They are now logged
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson to category 'cname' as per BIND 8. [RT #37935]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews4014. [bug] When including a master file origin_changed was
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews not being properly set leading to a potentially
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews spurious 'inherited owner' warning. [RT #37919]
a97b72bac75dd2b4294108f59e1273f50495583cAndreas Gustafsson4013. [func] Add a new tcp-only option to server (config) /
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson peer (struct) to use TCP transport to send
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson queries (in place of UDP transport with a
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson TCP fallback on truncated (TC set) response).
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington4012. [cleanup] Check returned status of OpenSSL digest and HMAC
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington functions when they return one. Note this applies
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington only to FIPS capable OpenSSL libraries put in
14c615e979f674aa61b0ca65c6a252009e521dd8Brian Wellington FIPS mode and MD5. [RT #37944]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson4011. [bug] master's list port and dscp inheritance was not
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson properly implemented. [RT #37792]
4d35b6836eb57387a9da6b103331b59cc988b827Mark Andrews4010. [cleanup] Clear the prefetchable state when initiating a
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews prefetch. [RT #37399]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson4009. [func] delv: added a +tcp option. [RT #37855]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley4007. [doc] Remove acl forward reference restriction. [RT #37772]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson4006. [security] A flaw in delegation handling could be exploited
4e605108c6533c2ec6311ee7a466582392656dddAndreas Gustafsson to put named into an infinite loop. This has
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson been addressed by placing limits on the number
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington of levels of recursion named will allow (default 7),
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington and the number of iterative queries that it will
762a538eed7f4de4c340090536553f9c73f6432aBrian Wellington send (default 50) before terminating a recursive
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington query (CVE-2014-8500).
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington The recursion depth limit is configured via the
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington "max-recursion-depth" option, and the query limit
c44ab73a0f37fa8c8a52069ca20dd060492dbafdAndreas Gustafsson via the "max-recursion-queries" option. [RT #37580]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson4005. [func] The buffer used for returning text from rndc
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley commands is now dynamically resizable, allowing
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley arbitrarily large amounts of text to be sent back
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley to the client. (Prior to this change, it was
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson possible for the output of "rndc tsig-list" to be
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley truncated.) [RT #37731]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson4004. [bug] When delegations had AAAA glue but not A, a
40c1177517ca5312371da6cc697d813576cfe5a8Andreas Gustafsson reference could be leaked causing an assertion
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson failure on shutdown. [RT #37796]
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington4003. [security] When geoip-directory was reconfigured during
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington named run-time, the previously loaded GeoIP
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington data could remain, potentially causing wrong
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington ACLs to be used or wrong results to be served
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington based on geolocation (CVE-2014-8680). [RT #37720]
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington4002. [security] Lookups in GeoIP databases that were not
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington loaded could cause an assertion failure
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington (CVE-2014-8680). [RT #37679]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington4001. [security] The caching of GeoIP lookups did not always
d77312050f1fb1d41b450d4fe6908ea155264d08Brian Wellington handle address families correctly, potentially
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington resulting in an assertion failure (CVE-2014-8680).
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson from the redirect zone. [RT #37722]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews3999. [func] "mkeys" and "nzf" files are now named after
80aba3d49a872ca11d7cf8550c3a993162e7939fMark Andrews their corresponding views, unless the view name
31039b15173fb3e375269991920e4843f664457eMark Andrews contains characters that would be incompatible
31039b15173fb3e375269991920e4843f664457eMark Andrews with use in a filename (i.e., slash, backslash,
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson or capital letters). If a view name does contain
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson these characters, the files will still be named
936af16e0dbac26c1ec2337e684ff6ca9b2fe1bbAndreas Gustafsson using a cryptographic hash of the view name.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson Regardless of this, if a file using the old name
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson format is found to exist, it will continue to be
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley used. [RT #37704]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3998. [bug] isc_radix_search was returning matches that were
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington too precise. [RT #37680]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington3996. [bug] Address use after free on out of memory error in
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington keyring_add. [RT #37639]
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews3995. [bug] receive_secure_serial holds the zone lock for too
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson long. [RT #37626]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson3994. [func] Dig now supports setting the last unassigned DNS
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson header flag bit (dig +zflag). [RT #37421]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson3993. [func] Dig now supports EDNS negotiation by default.
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington (dig +[no]ednsnegotiation).
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington Note: This is disabled by default in BIND 9.10
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington and enabled by default in BIND 9.11. [RT #37604]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson3992. [func] DiG can now send queries without questions
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson (dig +header-only). [RT #37599]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3991. [func] Add the ability to buffer logging output by specifying
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley "buffered yes;" when defining a channel. [RT #26561]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews3990. [test] Add tests for unknown DNSSEC algorithm handling.
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson3988. [func] Allow the zone serial of a dynamically updatable
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson zone to be updated via "rndc signing -serial".
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson3987. [port] Handle future Visual Studio 14 incompatible changes.
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson3986. [doc] Add the BIND version number to page footers
7427490a67b9547242b57c255254f7e146127c48Bob Halley in the ARM. [RT #37398]
7427490a67b9547242b57c255254f7e146127c48Bob Halley3985. [doc] Describe how +ndots and +search interact in dig.
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson3984. [func] Accept 256 byte long PINs in native PKCS#11
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson crypto. [RT #37410]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson3983. [bug] Change #3940 was incomplete: negative trust anchors
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson could be set to last up to a week, but the
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews "nta-lifetime" and "nta-recheck" options were
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews still limited to one day. [RT #37522]
b1b3495eba72ea2b7270c5cd62b0bb824de74e05Mark Andrews3982. [doc] Include release notes in product documentation.
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington3981. [bug] Cache DS/NXDOMAIN independently of other query types.
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington size. [RT #37187]
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson3979. [bug] Negative trust anchor fetches were not properly
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson managed. [RT #37488]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington3978. [test] Added a unit test for Diffie-Hellman key
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington computation, completing change #3974. [RT #37477]
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington3977. [cleanup] "rndc secroots" reported a "not found" error when
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson there were no negative trust anchors set. [RT #37506]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson3976. [bug] When refreshing managed-key trust anchors, clear
4b236540be165859390f05911eda86a39ee58eedAndreas Gustafsson any cached trust so that they will always be
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson revalidated with the current set of secure
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson roots. [RT #37506]
f6987630ce2d424a34bb9d373b3c08de48010287Andreas Gustafsson3975. [bug] Don't populate or use the bad cache for queries that
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson don't request or use recursion. [RT #37466]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews3974. [bug] Handle DH_compute_key() failure correctly in
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews3973. [test] Added hooks for Google Performance Tools CPU profiler,
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews including real-time/wall-clock profiling. Use
363cb30a83e8e57bc8874e621910f0e23dd84909Mark Andrews "configure --with-gperftools-profiler" to enable.
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington3972. [bug] Fix host's usage statement. [RT #37397]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3971. [bug] Reduce the cascading failures due to a bad $TTL line
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson in named-checkconf / named-checkzone. [RT #37138]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3969. [test] Added 'delv' system test. [RT #36901]
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson3968. [bug] Silence spurious log messages when using 'named -[46]'.
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington3967. [test] Add test for inlined signed zone in multiple views
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington with different DNSKEY sets. [RT #35759]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington3965. [func] Log outgoing packets and improve packet logging to
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington support logging the remote address. [RT #36624]
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington3964. [func] nsupdate now performs check-names processing.
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington3963. [test] Added NXRRSET test cases to the "dlzexternal"
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson system test. [RT #37344]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington conditions. [RT #34663]
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington BADSIG. [RT #37216]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
bfd14616fa53e2572e7492a21467fad239deeae7Andreas Gustafsson3959. [bug] Updates could be lost if they arrived immediately
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson after a rndc thaw. [RT #37233]
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews3958. [bug] Detect when writeable files have multiple references
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley and ECDSAP384SHA384. [RT #37183]
fb0663dbdd4811c6062fe602b511227be66aec56Mark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson startup-notify-rate instead of serial-query-rate.
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington3955. [bug] Notify messages due to changes are no longer queued
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington behind startup notify messages. [RT #24454]
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews two name pointers were the same. [RT #37176]
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews3951. [func] Add the ability to set yet-to-be-defined EDNS flags
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson to dig (+ednsflags=#). [RT #37142]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson3950. [port] Changed the bin/python Makefile to work around a
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews3949. [experimental] Experimental support for draft-andrews-edns1 by sending
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews building). Add support for limiting the EDNS version
5e16689bd396d261779526345a1c5207e3308477Andreas Gustafsson advertised to servers: server { edns-version 0; };
f7321615eaaf63461bd682513d2873d97ae31771Mark Andrews Log the EDNS version received in the query log.
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington --with-tuning=large. [RT #37059]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson3947. [cleanup] Set the executable bit on libraries when using
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson libtool. [RT #36786]
725fec8d79ff36402b0f90a7a05aafa7964e387fBrian Wellington3946. [cleanup] Improved "configure" search for a python interpreter.
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews3945. [bug] Invalid wildcard expansions could be incorrectly
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews accepted by the validator. [RT #37093]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson3944. [test] Added a regression test for "server-id". [RT #37057]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson3943. [func] SERVFAIL responses can now be cached for a
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson limited time (configured by "servfail-ttl",
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews default 10 seconds, limit 30). This can reduce
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews the frequency of retries when an authoritative
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews server is known to be failing, e.g., due to
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington ongoing DNSSEC validation problems. [RT #21347]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington3942. [bug] Wildcard responses from a optout range should be
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington marked as insecure. [RT #37072]
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington3941. [doc] Include the BIND version number in the ARM. [RT #37067]
12acad068846c11ad7bb9adb23f02a6fc37b4e17Andreas Gustafsson3940. [func] "rndc nta" now allows negative trust anchors to be
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington set for up to one week. [RT #37069]
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews connections to be shared. [RT #37039]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington3938. [func] Added quotas to be used in recursive resolvers
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington that are under high query load for names in zones
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington whose authoritative servers are nonresponsive or
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington are experiencing a denial of service attack.
3f8ad70264645ebd6a2a8bc7e923271eb5bf8416Brian Wellington - "fetches-per-server" limits the number of
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington simultaneous queries that can be sent to any
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington single authoritative server. The configured
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington value is a starting point; it is automatically
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington adjusted downward if the server is partially or
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson completely non-responsive. The algorithm used to
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson adjust the quota can be configured via the
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson "fetch-quota-params" option.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson - "fetches-per-zone" limits the number of
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson simultaneous queries that can be sent for names
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson within a single domain. (Note: Unlike
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson "fetches-per-server", this value is not
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson - New stats counters have been added to count
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson queries spilled due to these quotas.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington See the ARM for details of these options. [RT #37125]
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson3937. [func] Added some debug logging to better indicate the
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson conditions causing SERVFAILs when resolving.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington3936. [func] Added authoritative support for the EDNS Client
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington Subnet (ECS) option.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington ACLs can now include "ecs" elements which specify
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington an address or network prefix; if an ECS option is
175ba246fb074ae8caca0e76ecc8055517ab486cBrian Wellington included in a DNS query, then the address encoded
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington in the option will be matched against "ecs" ACL
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington Also, if an ECS address is included in a query,
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington then it will be used instead of the client source
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington address when matching "geoip" ACL elements. This
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews behavior can be overridden with "geoip-use-ecs no;".
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews (Note: to enable "geoip" ACLs, use "configure
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews --with-geoip". This requires libGeoIP version
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer 1.5.0 or higher.)
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer When "ecs" or "geoip" ACL elements are used to
61470ed14b20c55c0730461165faa582a3775eb8Mark Andrews select a view for a query, the response will include
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson an ECS option to indicate which client network the
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer answer is valid for.
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews (Thanks to Vincent Bernat.) [RT #36781]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington3935. [bug] "geoip asnum" ACL elements would not match unless
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington the full organization name was specified. They
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington can now match against the AS number alone (e.g.,
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington AS1234). [RT #36945]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley sit-secret documentation. [RT #36980]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3933. [bug] Corrected the implementation of dns_rdata_casecompare()
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley for the HIP rdata type. [RT #36911]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3932. [test] Improved named-checkconf tests. [RT #36911]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3930. [bug] "rndc nta -r" could cause a server hang if the
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson NTA was not found. [RT #36909]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson3928. [test] Improve rndc system test. [RT #36898]
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence3927. [bug] dig: report PKCS#11 error codes correctly when
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence compiled with --enable-native-pkcs11. [RT #36956]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3926. [doc] Added doc for geoip-directory. [RT #36877]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews3923. [bug] Sanity check the xml2-config output. [RT #22246]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews3922. [bug] When resigning, dnssec-signzone was removing
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson all signatures from delegation nodes. It now
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson retains DS and (if applicable) NSEC signatures.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington3919. [bug] dig: continue to next line if a address lookup fails
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington in batch mode. [RT #36755]
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence3918. [doc] Update check-spf documentation. [RT #36910]
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence3917. [bug] dig, nslookup and host now continue on names that are
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence too long after applying a search list elements.
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3916. [contrib] zone2sqlite checked wrong result code. Address
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence compiler warnings. [RT #36931]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence3915. [bug] Address a assertion if a route event arrived while
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence shutting down. [RT #36887]
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington3914. [bug] Allow the URI target and CAA value fields to
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington be zero length. [RT #36737]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence3913. [bug] Address race issue in dispatch. [RT #36731]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence3911. [func] Implement EDNS EXPIRE option client side, allowing
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence a slave server to set the expiration timer correctly
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson when transferring zone data from another slave
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson server. [RT #35925]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3910. [bug] Fix races to free event during shutdown. [RT #36720]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3909. [bug] When computing the number of elements required for a
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson acl count_acl_elements could have a short count leading
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews to a assertion failure. Also zero out new acl elements
a06df85974344892431b14bec51c1beeee971eccAndreas Gustafsson in dns_acl_merge. [RT #36675]
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson3908. [bug] rndc now differentiates between a zone in multiple
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington views and a zone that doesn't exist at all. [RT #36691]
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington3907. [cleanup] Alphabetize rndc help. [RT #36683]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3906. [protocol] Update URI record format to comply with
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence draft-faltstrom-uri-08. [RT #36642]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson3904. [func] Add the RPZ SOA to the additional section. [RT36507]
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington3903. [bug] Improve the accuracy of DiG's reported round trip
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington time. [RT 36611]
732f883c12f171186d7f3331ebdf5d16044b14b0Brian Wellington3902. [bug] liblwres wasn't handling link-local addresses in
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson nameserver clauses in resolv.conf. [RT #36039]
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson3901. [protocol] Added support for CAA record type (RFC 6844).
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson3899. [bug] "request-ixfr" is only applicable to slave and redirect
f53848e17123569387b279578f0100dca5407da5Mark Andrews zones. [RT #36608]
f53848e17123569387b279578f0100dca5407da5Mark Andrews3898. [bug] Too small a buffer in tohexstr() calls in test code.
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington3897. [bug] RPZ summary information was not properly being updated
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington after a AXFR resulting in changes sometimes being
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews ignored. [RT #35885]
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews3896. [bug] Address performance issues with DSCP code on some
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson platforms. [RT #36534]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington3895. [func] Add the ability to set the DSCP code point to dig.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson3894. [bug] Buffers in isc_print_vsnprintf were not properly
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson initialized leading to potential overflows when
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson printing out quad values. [RT #36505]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson3893. [bug] Peer DSCP values could be returned without being set.
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson3892. [bug] Setting '-t aaaa' in .digrc had unintended side
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson effects. [RT #36452]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson to install python programs.
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson3890. [bug] RRSIG sets that were not loaded in a single transaction
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson at start up where not being correctly added to
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson re-signing heaps. [RT #36302]
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence3889. [port] hurd: configure fixes as per:
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3888. [func] 'rndc status' now reports the number of automatic
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence zones. [RT #36015]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence they are easier to use in a debugger. [RT #36373]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3886. [bug] rbtdb_write_header should use a once to initialize
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence FILE_VERSION. [RT #36374]
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington3885. [port] Use 'open()' rather than 'file()' to open files in
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington3883. [placeholder]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington3882. [func] By default, negative trust anchors will be tested
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington periodically to see whether data below them can be
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington validated, and if so, they will be allowed to
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington expire early. The "rndc nta -force" option
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson overrides this behavior. The default NTA lifetime
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson and the recheck frequency can be configured by the
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson "nta-lifetime" and "nta-recheck" options. [RT #36146]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson3881. [bug] Address memory leak with UPDATE error handling.
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington3880. [test] Update ans.pl to work with new TSIG support in
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington Net::DNS; add additional Net::DNS version prerequisite
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer checks. [RT #36327]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer3879. [func] Add version printing option to various BIND utilities.
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence3878. [bug] Using the incorrect filename for a DLZ module
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington caused a segmentation fault on startup. [RT #36286]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington3877. [bug] Inserting and deleting parent and child nodes
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer in response policy zones could trigger an assertion
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer failure. [RT #36272]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson3876. [bug] Improve efficiency of DLZ redirect zones by
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence suppressing unnecessary database lookups. [RT #35835]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson3875. [cleanup] Clarify log message when unable to read private
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington key files. [RT #24702]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington3874. [test] Check that only "check-names master" is needed for
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington updates to be accepted.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington3872. [bug] Address issues found by static analysis. [RT #36209]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington3871. [bug] Don't publish an activated key automatically before
833535ea78ec7a15376b862fd288ffd00f808666Brian Wellington its publish time. [RT #35063]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington3870. [func] Updated the random number generator used in
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington the resolver to use the updated ChaCha based one
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington (similar to OpenBSD's changes). Also moved the
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson RNG to libisc and added unit tests for it.
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson3869. [doc] Document that in-view zones cannot be used for
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington response policy zones. [RT #35941]
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington3868. [bug] isc_mem_setwater incorrectly cleared hi_called
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson potentially leaving over memory cleaner running.
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington3867. [func] "rndc nta" can now be used to set a temporary
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington negative trust anchor, which disables DNSSEC
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington validation below a specified name for a specified
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson period of time (not exceeding 24 hours). This
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson can be used when validation for a domain is known
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson to be failing due to a configuration error on
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson the part of the domain owner rather than a
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson spoofing attack. [RT #29358]
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson3866. [bug] Named could die on disk full in generate_session_key.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3865. [test] Improved testability of the red-black tree
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson implementation and added unit tests. [RT #35904]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3864. [bug] RPZ didn't work well when being used as forwarder.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3863. [bug] The "E" flag was missing from the query log as a
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews unintended side effect of code rearrangement to
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews support EDNS EXPIRE. [RT #36117]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3862. [cleanup] Return immediately if we are not going to log the
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews message in ns_client_dumpmessage.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson3861. [security] Missing isc_buffer_availablelength check results
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson in a REQUIRE assertion when printing out a packet
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson (CVE-2014-3859). [RT #36078]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson3860. [bug] ioctl(DP_POLL) array size needs to be determined
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson at run time as it is limited to {OPEN_MAX}.
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews3859. [placeholder]
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews3858. [bug] Disable GCC 4.9 "delete null pointer check".
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley3857. [bug] Make it harder for a incorrect NOEDNS classification
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson to be made. [RT #36020]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson3856. [bug] Configuring libjson without also configuring libxml
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson resulted in a REQUIRE assertion when retrieving
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews statistics using json. [RT #36009]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews3855. [bug] Limit smoothed round trip time aging to no more than
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson once a second. [RT #32909]
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews3854. [cleanup] Report unrecognized options, if any, in the final
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews configure summary. [RT #36014]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews the handling of a rdataset with no records. [RT #35968]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews3852. [func] Increase the default number of clients available
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews for servicing lightweight resolver queries, and
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson make them configurable via the "lwres-tasks" and
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson "lwres-clients" options. (Thanks to Tomas Hozza.)
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson3851. [func] Allow libseccomp based system-call filtering
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson on Linux; use "configure --enable-seccomp" to
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson turn it on. Thanks to Loganaden Velvindron
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson of AFRINIC for the contribution. [RT #35347]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3849. [doc] Alphabetized dig's +options. [RT #35992]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3848. [bug] Adjust 'statistics-channels specified but not effective'
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley error message to account for JSON support. [RT #36008]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3847. [bug] 'configure --with-dlz-postgres' failed to fail when
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley there is not support available.
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley ixfr query. [RT #35980]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3845. [placeholder]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3844. [bug] Use the x64 version of the Microsoft Visual C++
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson Redistributable when built for 64 bit Windows.
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington3842. [bug] Adjust RRL log-only logging category. [RT #35945]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson3840. [port] Check for arc4random_addrandom() before using it;
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson it's been removed from OpenBSD 5.5. [RT #35907]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3839. [test] Use only posix-compatible shell in system tests.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3837. [security] A NULL pointer is passed to query_prefetch resulting
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence a REQUIRE assertion failure when a fetch is actually
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence initiated (CVE-2014-3214). [RT #35899]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3836. [bug] Address C++ keyword usage in header file.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3835. [bug] Geoip ACL elements didn't work correctly when
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence referenced via named or nested ACLs. [RT #35879]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3834. [bug] The re-signing heaps were not being updated soon enough
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington leading to multiple re-generations of the same RRSIG
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington when a zone transfer was in progress. [RT #35273]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington3833. [bug] Cross compiling was broken due to calling genrandom at
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson build time. [RT #35869]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3832. [func] "named -L <filename>" causes named to send log
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson messages to the specified file by default instead
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington of to the system log. (Thanks to Tony Finch.)
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson3831. [cleanup] Reduce logging noise when EDNS state changes occur.
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson3830. [func] When query logging is enabled, log query errors at
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews the same level ('info') as the queries themselves.
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson3829. [func] "dig +ttlunits" causes dig to print TTL values
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson with time-unit suffixes: w, d, h, m, s for
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington weeks, days, hours, minutes, and seconds. (Thanks
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington to Tony Finch.) [RT #35823]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson3828. [func] "dnssec-signzone -N date" updates serial number
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson to the current date in YYYYMMDDNN format.
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews3827. [placeholder]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer3825. [bug] Address sign extension bug in isc_regex_validate.
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer3824. [bug] A collision between two flag values could cause
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer problems with cache cleaning when SIT was enabled.
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson3823. [func] Log the rpz cname target when rewriting. [RT #35667]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson3822. [bug] Log the correct type of static-stub zones when
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson removing them. [RT #35842]
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington update and transaction support. Thanks to Marty
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews Lee for the contribution. [RT #35656]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington3820. [func] The DLZ API doesn't pass the database version to
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington the lookup() function; this can cause DLZ modules
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews that allow dynamic updates to mishandle prerequisite
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews checks. This has been corrected by adding a
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews 'dbversion' field to the dns_clientinfo_t
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews structure. [RT #35656]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews displayed without padding. This is not a issue for
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews currently defined algorithms but may be for future
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews hash algorithms. [RT #27925]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3818. [bug] Stop lying to the optimizer that 'void *arg' is a
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence constant in isc_event_allocate.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3817. [func] The "delve" command is now spelled "delv" to avoid
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence a namespace collision with the Xapian project.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews Tony Finch.) [RT #35822]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3814. [func] The "masterfile-style" zone option controls the
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews formatting of dumped zone files. Options are
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews "relative" (multiline format) and "full" (one
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews record per line). The default is "relative".
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews "debug" options when set in /etc/resolv.conf.
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson (Thanks to Adam Tkac at RedHat.) [RT #21885]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews3812. [func] Dig now supports sending arbitrary EDNS options from
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews the command line (+ednsopt=code[:value]). [RT #35584]
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington3811. [func] "serial-update-method date;" sets serial number
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington on dynamic update to today's date in YYYYMMDDNN
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington format. (Thanks to Bradley Forschinger.) [RT #24903]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3810. [bug] Work around broken nameservers that fail to ignore
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews unknown EDNS options. [RT #35766]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3809. [doc] Fix SIT and NSID documentation.
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington3808. [doc] Clean up "prefetch" documentation. [RT #35751]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3807. [bug] Fix sign extension bug in dns_name_fromtext when
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson lowercase is set. [RT #35743]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3806. [test] Improved system test portability. [RT #35625]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3805. [contrib] Added contrib/perftcpdns, a performance testing tool
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington for DNS over TCP. [RT #35710]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington --- 9.10.0rc1 released ---
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington3804. [bug] Corrected a race condition in dispatch.c in which
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews portentry could be reset leading to an assertion
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews failure in socket_search(). (Change #3708
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews addressed the same issue but was incomplete.)
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson3803. [bug] "named-checkconf -z" incorrectly rejected zones
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington using alternate data sources for not having a "file"
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence option. [RT #35685]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3802. [bug] Various header files were not being installed.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3800. [bug] A pending event on the route socket could cause an
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley assertion failure when shutting down named. [RT #35674]
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington3799. [bug] Improve named's command line error reporting.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington time. [RT #35659]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3797. [port] netbsd: geoip support probing was broken. [RT #35642]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3795. [bug] Make named-checkconf detect raw masterfiles for
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson hint zones and reject them. [RT #35268]
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews3793. [bug] zone.c:save_nsec3param() could assert when out of
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews memory. [RT #35621]
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson3792. [func] Provide links to the alternate statistics views when
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer displaying in a browser. [RT #35605]
588b63e1a86fb707172830e14897da624ed380edMark Andrews3791. [placeholder]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington3790. [bug] Handle broken nameservers that send BADVERS in
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington response to unknown EDNS options. Maintain
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington statistics on BADVERS responses.
452d75b18f9d050086964fa39c326cf388517396Mark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews3788. [bug] dns_peer_getrequestsit was returning request_nsid by
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington --- 9.10.0b2 released ---
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews3787. [bug] The code that checks whether "auto-dnssec" is
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews allowed was ignoring "allow-update" ACLs set at
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews the options or view level. [RT #29536]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews3786. [func] Provide more detailed error codes when using
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington native PKCS#11. "pkcs11-tokens" now fails robustly
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington rather than asserting when run against an HSM with
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews an incomplete PKCS#11 API implementation. [RT #35479]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews3785. [bug] Debugging code dumphex didn't accept arbitrarily long
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews input (only compiled with -DDEBUG). [RT #35544]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews3784. [bug] Using "rrset-order fixed" when it had not been
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer enabled at compile time caused inconsistent
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer results. It now works as documented, defaulting
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer to cyclic mode. [RT #28104]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3783. [func] "tsig-keygen" is now available as an alternate
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer command name for "ddns-confgen". It generates
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson a TSIG key in named.conf format without comments.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3782. [func] Specifying "auto" as the salt when using
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer "rndc signing -nsec3param" causes named to
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer generate a 64-bit salt at random. [RT #35322]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3781. [tuning] Use adaptive mutex locks when available; this
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson has been found to improve performance under load
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson on many systems. "configure --with-locktype=standard"
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson restores conventional mutex locks. [RT #32576]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson3780. [bug] $GENERATE handled negative numbers incorrectly.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3779. [cleanup] Clarify the error message when using an option
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington that was not enabled at compile time. [RT #35504]
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington3778. [bug] Log a warning when the wrong address family is
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews DLZ queries. [RT #35493]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3776. [func] "rndc -q" suppresses output from successful
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews rndc commands. Errors are printed on stderr.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3775. [bug] dlz_dlopen driver could return the wrong error
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson code on API version mismatch, leading to a segfault.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3774. [func] When using "request-nsid", log the NSID value in
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson printable form as well as hex. [RT #20864]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3773. [func] "host", "nslookup" and "nsupdate" now have
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson options to print the version number and exit.
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington (Based in part on a contribution from Tim Tessier.)
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer3771. [cleanup] Adjusted log level for "using built-in key"
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer messages. [RT #24383]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer3770. [bug] "dig +trace" could fail with an assertion when it
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer needed to fall back to TCP due to a truncated
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer response. [RT #24660]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer3769. [doc] Improved documentation of "rndc signing -list".
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson algorithm. [RT #34000]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3767. [func] Log explicitly when using rndc.key to configure
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson command channel. [RT #35316]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews3766. [cleanup] Fixed problems with building outside the source
e412ae947df6de858883564b8676a9650df70d9aMark Andrews tree when using native PKCS#11. [RT #35459]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3765. [bug] Fixed a bug in "rndc secroots" that could crash
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews named when dumping an empty keynode. [RT #35469]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews (to set up a successor key and set the prepublication
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson interval) were missing from dnssec-keyfromlabel.
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson3763. [bug] delve: Cache DNSSEC records to avoid the need to
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson re-fetch them when restarting validation. [RT #35476]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson3762. [bug] Address build problems with --pkcs11-native +
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson --with-openssl with ECDSA support. [RT #35467]
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3760. [bug] Improve SIT with native PKCS#11 and on Windows.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3759. [port] Enable delve on Windows. [RT #35441]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3758. [port] Enable export library APIs on Windows. [RT #35382]
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson3757. [port] Enable Python tools (dnssec-coverage,
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson dnssec-checkds) to run on Windows. [RT #34355]
dc2e45d08d73fdaefd92dbfa4d69b4d3f3b0f249Andreas Gustafsson3756. [bug] GSSAPI Kerberos realm checking was broken in
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson check_config leading to spurious messages being
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson logged. [RT #35443]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson --- 9.10.0b1 released ---
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson3755. [func] Add stats counters for known EDNS options + others.
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson3754. [cleanup] win32: Installer now places files in the
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington Program Files area rather than system services.
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews3752. [bug] Address potential REQUIRE failure if
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews3751. [tuning] The default setting for the -U option (setting
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews the number of UDP listeners per interface) has
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews been adjusted to improve performance. [RT #35417]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence the remaining time until expiry for slave zones
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence is supported.
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence EXPIRE uses an experimental option code (65002),
051beeafa6547440da17985665b31952b85ede56Brian Wellington which is subject to change. [RT #35416]
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3749. [func] "dig +subnet" sends an EDNS client subnet option
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson containing the specified address/prefix when
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer querying. (Thanks to Wilmer van der Gaast.)
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson3748. [test] Use delve to test dns_client interfaces. [RT #35383]
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson3747. [bug] A race condition could lead to a core dump when
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence destroying a resolver fetch object. [RT #35385]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington3746. [func] New "max-zone-ttl" option enforces maximum
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson TTLs for zones. If loading a zone containing a
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer higher TTL, the load fails. DDNS updates with
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson higher TTLs are accepted but the TTL is truncated.
8357e90fba97010a86356a41c8a961d5d602d7d0Michael Sawyer (Note: Currently supported for master zones only;
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer inline-signing slaves will be added.) [RT #38405]
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson3745. [func] "configure --with-tuning=large" adjusts various
abb38b673379d6dae7cbb495f814d73a4afe5c8bAndreas Gustafsson compiled-in constants and default settings to
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer values suited to large servers with abundant
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews memory. [RT #29538]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson (similar to DNS Cookies by Donald Eastlake 3rd),
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson which are designed to help clients detect off-path
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews spoofed responses and for servers to identify
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews legitimate clients.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews SIT uses an experimental EDNS option code (65001),
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews which will be changed to an IANA-assigned value
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews if the experiment is deemed a success.
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson SIT can be enabled via "configure --enable-sit" (or
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson --enable-developer). It is enabled by default in
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson Servers can be configured to send smaller responses
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson to clients that have not identified themselves via
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson SIT. RRL processing has also been updated;
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews legitimate clients are not subject to rate
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews limiting. [RT #35389]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley3743. [bug] delegation-only flag wasn't working in forward zone
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley declarations despite being documented. This is
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley needed to support turning off forwarding and turning
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley on delegation only at the same name. [RT #35392]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3742. [port] linux: libcap support: declare curval at start of
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer block. [RT #35387]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3741. [func] "delve" (domain entity lookup and validation engine):
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer A new tool with dig-like semantics for performing DNS
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews lookups, with internal DNSSEC validation, using the
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews same resolver and validator logic as named. This
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley allows easy validation of DNSSEC data in environments
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley with untrustworthy resolvers, and assists with
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley troubleshooting of DNSSEC problems. [RT #32406]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff3740. [contrib] Minor fixes to configure --with-dlz-bdb,
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff3739. [func] Added per-zone stats counters to track TCP and
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff UDP queries. [RT #35375]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson3737. [bug] 'rndc retransfer' could trigger a assertion failure
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson with inline zones. [RT #35353]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson3736. [bug] nsupdate: When specifying a server by name,
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson fall back to alternate addresses if the first
ba43c53451d5c38765f376eeede457178b36951aBob Halley address for that name is not reachable. [RT #25784]
ba43c53451d5c38765f376eeede457178b36951aBob Halley3735. [cleanup] Merged the libiscpk11 library into libisc
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews to simplify dependencies. [RT #35205]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews3734. [bug] Improve building with libtool. [RT #35314]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews3733. [func] Improve interface scanning support. Interface
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews information will be automatically updated if the
668278867ba063995988507b6b28724ebb9f9391Mark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff Use "automatic-interface-scan no;" to disable.
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson Add "rndc scan" to trigger a scan. [RT #23027]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
2053a53eeac7f069311d8ed67333503c7d3a2e2bAndreas Gustafsson driver to dump core on 64-bit systems. [RT #35324]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson3731. [func] Added a "no-case-compress" ACL, which causes
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson named to use case-insensitive compression
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson (disabling change #3645) for specified
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson clients. (This is useful when dealing
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson with broken client implementations that
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson use case-sensitive name comparisons,
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson rejecting responses that fail to match the
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson capitalization of the query that was sent.)
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson3730. [cleanup] Added "never" as a synonym for "none" when
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson configuring key event dates in the dnssec tools.
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson3729. [bug] dnssec-keygen could set the publication date
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson incorrectly when only the activation date was
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson specified on the command line. [RT #35278]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3728. [doc] Expanded native-PKCS#11 documentation,
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff specifically pkcs11: URI labels. [RT #35287]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3727. [func] The isc_bitstring API is no longer used and
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff has been removed from libisc. [RT #35284]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3726. [cleanup] Clarified the error message when attempting
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff to configure more than 32 response-policy zones.
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington3725. [contrib] Updated zkt and nslint to newest versions,
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington cleaned up and rearranged the contrib
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson directory, and added a README.
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley --- 9.10.0a2 released ---
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley3724. [bug] win32: Fixed a bug that prevented dig and
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington host from exiting properly after completing
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington a UDP query. [RT #35288]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington3723. [cleanup] Imported keys are now handled the same way
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson regardless of DNSSEC algorithm. [RT #35215]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson3722. [bug] Using geoip ACLs in a blackhole statement
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley could cause a segfault. [RT #35272]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley3721. [doc] Improved documentation of the EDNS processing
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson enhancements introduced in change #3593. [RT #35275]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff3720. [bug] Address compiler warnings. [RT #35261]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff3719. [bug] Address memory leak in in peer.c. [RT #35255]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson probing to see if it is possible to set dscp values
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff on a per packet basis. [RT #35252]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3716. [bug] The dns_request code was setting dcsp values when not
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff requested. [RT #35252]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff3715. [bug] The region and city databases could fail to
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson initialize when using some versions of libGeoIP,
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson causing assertion failures when named was
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson configured to use them. [RT #35427]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson3714. [test] System tests that need to test for cryptography
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson support before running can now use a common
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson "testcrypto.sh" script to do so. [RT #35213]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson3713. [bug] Save memory by not storing "also-notify" addresses
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson in zone objects that are configured not to send
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington notify requests. [RT #35195]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington3712. [placeholder]
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson3711. [placeholder]
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson3710. [bug] Address double dns_zone_detach when switching to
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson using automatic empty zones from regular zones.
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson3709. [port] Use built-in versions of strptime() and timegm()
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson on all platforms to avoid portability issues.
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson3708. [bug] Address a portentry locking issue in dispatch.c.
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington on a missing resolv.conf file and initializes the
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington structure as if it had been configured with:
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson nameserver ::1
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson nameserver 127.0.0.1
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson Note: Callers will need to be updated to treat
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson ISC_R_FILENOTFOUND as a qualified success or else
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson they will leak memory. The following code fragment
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson will work with both old and new versions without
ec4060d3104e8bec28406232eb7338c81bb1b1c1Mark Andrews changing the behaviour of the existing code.
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson resconf = NULL;
2c7097eac0aed3b0b3387082cb783db64f2d7765Andreas Gustafsson result = irs_resconf_load(mctx, "/etc/resolv.conf",
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson if (result != ISC_SUCCESS) {
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson if (resconf != NULL)
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson irs_resconf_destroy(&resconf);
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson3706. [contrib] queryperf: Fixed a possible integer overflow when
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson printing results. [RT #35182]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson3705. [func] "configure --enable-native-pkcs11" enables BIND
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson to use the PKCS#11 API for all cryptographic
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson functions, so that it can drive a hardware service
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington module directly without the need to use a modified
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington OpenSSL as intermediary (so long as the HSM's vendor
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington provides a complete-enough implementation of the
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington PKCS#11 interface). This has been tested successfully
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington with the Thales nShield HSM and with SoftHSMv2 from
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson the OpenDNSSEC project. [RT #29031]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson3703. [func] To improve recursive resolver performance, cache
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson records which are still being requested by clients
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson can now be automatically refreshed from the
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson authoritative server before they expire, reducing
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson or eliminating the time window in which no answer
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson is available in the cache. See the "prefetch" option
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson for more details. [RT #35041]
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson3702. [func] 'dnssec-coverage -l' option specifies a length
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews of time to check for coverage; events further into
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson the future are ignored. 'dnssec-coverage -z'
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson checks only ZSK events, and 'dnssec-coverage -k'
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson checks only KSK events. (Thanks to Peter Palfrader.)
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson3701. [func] named-checkconf can now obscure shared secrets
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews when printing by specifying '-x'. [RT #34465]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews the stylesheet can now be cached by the browser;
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews section headers are omitted from the stats display
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews when there is no data in those sections to be
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews displayed; counters are now right-justified for
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews easier readability. [RT #35117]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson3697. [bug] Handle "." as a search list element when IDN support
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson is enabled. [RT #35133]
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson3696. [bug] dig failed to handle AXFR style IXFR responses which
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson span multiple messages. [RT #35137]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson3695. [bug] Address a possible race in dispatch.c. [RT #35107]
e3402551ac9be809eeb3a4b7b30d023ba67dad28Brian Wellington3694. [bug] Warn when a key-directory is configured for a zone,
6d3f954c572db02159deedd444373161fda47a88Brian Wellington but does not exist or is not a directory. [RT #35108]
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington3693. [security] memcpy was incorrectly called with overlapping
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington ranges resulting in malformed names being generated
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson on some platforms. This could cause INSIST failures
3f31c8c2954f857e375db8e943a35f6aa5e230b4Andreas Gustafsson when serving NSEC3 signed zones (CVE-2014-0591).
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson was no data at the node. [RT #35080]
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence3691. [contrib] Address null pointer dereference in LDAP and
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson MySQL DLZ modules.
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington3690. [bug] Iterative responses could be missed when the source
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington port for an upstream query was the same as the
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson listener port (53). [RT #34925]
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson3689. [bug] Fixed a bug causing an insecure delegation from one
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington static-stub zone to another to fail with a broken
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington trust chain. [RT #35081]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington3688. [bug] loadnode could return a freed node on out of memory.
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson3687. [bug] Address null pointer dereference in zone_xfrdone.
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence3686. [func] "dnssec-signzone -Q" drops signatures from keys
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews that are still published but no longer active.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson3685. [bug] "rndc refresh" didn't work correctly with slave
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson zones using inline-signing. [RT #35105]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington3684. [bug] The list of included files would grow on reload.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson3683. [cleanup] Add a more detailed "not found" message to rndc
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson commands which specify a zone name. [RT #35059]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson3682. [bug] Correct the behavior of rndc retransfer to allow
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson inline-signing slave zones to retain NSEC3 parameters
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson instead of reverting to NSEC. [RT #34745]
d403e27f2b1c94f2b9349ddb68f50a141ae8d26dAndreas Gustafsson3681. [port] Update the Windows build system to support feature
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson selection and WIN64 builds. This is a work in
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson progress. [RT #34160]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson3680. [bug] Ensure buffer space is available in "rndc zonestatus".
e0a9b524614889ca9b75f846cb6101fc448a60dcAndreas Gustafsson3679. [bug] dig could fail to clean up TCP sockets still
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews waiting on connect(). [RT #35074]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3678. [port] Update config.guess and config.sub. [RT #35060]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
385a9cb48a70b329e507c39d043fa9a44c659913James Brister times. [RT #35073]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3676. [bug] "named-checkconf -z" now checks zones of type
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington hint and redirect as well as master. [RT #35046]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington3675. [misc] Provide a place for third parties to add version
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence information for their extensions in the version
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer file by setting the EXTENSIONS variable.
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence --- 9.10.0a1 released ---
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
47ddde42728034854444cf17e278cebaea06f666Michael Graff3673. [func] New "in-view" zone option allows direct sharing
47ddde42728034854444cf17e278cebaea06f666Michael Graff of zones between views. [RT #32968]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence3672. [func] Local address can now be specified when using
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence dns_client API. [RT #34811]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3671. [bug] Don't allow dnssec-importkey overwrite a existing
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence non-imported private key.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3670. [bug] Address read after free in server side of
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence lwres_getrrsetbyname. [RT #29075]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
529a6b5224d751504027293a766a4c8b81241869Brian Wellington3667. [test] dig: add support to keep the TCP socket open between
529a6b5224d751504027293a766a4c8b81241869Brian Wellington successive queries (+[no]keepopen). [RT #34918]
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson3666. [func] Add a tool, named-rrchecker, for checking the syntax
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson of individual resource records. This tool is intended
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington to be called by provisioning systems so that the front
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington end does not need to be upgraded to support new DNS
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington record types. [RT #34778]
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence3665. [bug] Failure to release lock on error in receive_secure_db.
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson locking and other bugs. [RT #34855]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson3663. [bug] Address bugs in dns_rdata_fromstruct and
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington3661. [bug] Address lock order reversal deadlock with inline zones.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson3659. [port] solaris: don't add explicit dependencies/rules for
ffea7c2e73a0771c80b32df93cf4547fcea64eaeAndreas Gustafsson python programs as make won't use the implicit rules.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson3658. [port] linux: Address platform specific compilation issue
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson when libcap-devel is installed. [RT #34838]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister3657. [port] Some readline clones don't accept NULL pointers when
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson calling add_history. [RT #34842]
48cddfee7c4d90b1901d03ccc0e67e08908a8f2fMark Andrews3656. [security] Treat an all zero netmask as invalid when generating
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer the localnets acl. (The prior behavior could
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer allow unexpected matches when using some versions
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer of Winsock: CVE-2013-6320.) [RT #34687]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer3655. [cleanup] Simplify TCP message processing when requesting a
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer zone transfer. [RT #34825]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson3654. [bug] Address race condition with manual notify requests.
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson3653. [func] Create delegations for all "children" of empty zones
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson except "forward first". [RT #34826]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3652. [bug] Address bug with rpz-drop policy. [RT #34816]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3651. [tuning] Adjust when a master server is deemed unreachable.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3650. [tuning] Use separate rate limiting queues for refresh and
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson notify requests. [RT #30589]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3649. [cleanup] Include a comment in .nzf files, giving the name of
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence the associated view. [RT #34765]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3648. [test] Updated the ATF test framework to version 0.17.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3647. [bug] Address a race condition when shutting down a zone.
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson3646. [bug] Journal filename string could be set incorrectly,
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson causing garbage in log messages. [RT #34738]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson3645. [protocol] Use case sensitive compression when responding to
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson queries. [RT #34737]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington3644. [protocol] Check that EDNS subnet client options are well formed.
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson3643. [doc] Clarify RRL "slip" documentation.
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson3642. [func] Allow externally generated DNSKEY to be imported
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson into the DNSKEY management framework. A new tool
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson dnssec-importkey is used to do this. [RT #34698]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington3641. [bug] Handle changes to sig-validity-interval settings
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington better. [RT #34625]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington3640. [bug] ndots was not being checked when searching. Only
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington continue searching on NXDOMAIN responses. Add the
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson ability to specify ndots to nslookup. [RT #34711]
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson in a key zone. [RT #34238]
da527e4ff6a013364826637963e7ac372e024f33David Lawrence3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson encountered. [RT #34668]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson3637. [bug] 'allow-query-on' was checking the source address
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson rather than the destination address. [RT #34590]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson3636. [bug] Automatic empty zones now behave better with
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence forward only "zones" beneath them. [RT #34583]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence3635. [bug] Signatures were not being removed from a zone with
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence only KSK keys for a algorithm. [RT #34439]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence3634. [func] Report build-id in rndc status. Report build-id
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister when building from a git repository. [RT #20422]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister3633. [cleanup] Refactor OPT processing in named to make it easier
adade77942b069127a7094df419b3ad39dafb385James Brister to support new EDNS options. [RT #34414]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence3632. [bug] Signature from newly inactive keys were not being
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence removed. [RT #32178]
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews qtype is SIG. [RT #34600]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson3629. [func] Allow the printing of cryptographic fields in DNSSEC
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson records by dig to be suppressed (dig +nocrypto).
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson3628. [func] Report DNSKEY key id's when dumping the cache.
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson3626. [func] dig: NSID output now easier to read. [RT #21160]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3625. [bug] Don't send notify messages to machines outside of the
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson3624. [bug] Look for 'json_object_new_int64' when looking for a
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson the json library. [RT #34449]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson3623. [placeholder]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson3622. [tuning] Eliminate an unnecessary lock when incrementing
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson cache statistics. [RT #34339]
5096958739769958dd7a6b69356bf41260033873David Lawrence3621. [security] Incorrect bounds checking on private type 'keydata'
5096958739769958dd7a6b69356bf41260033873David Lawrence can lead to a remotely triggerable REQUIRE failure
5096958739769958dd7a6b69356bf41260033873David Lawrence (CVE-2013-4854). [RT #34238]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence3620. [func] Added "rpz-client-ip" policy triggers, enabling
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence RPZ responses to be configured on the basis of
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence the client IP address; this can be used, for
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence example, to blacklist misbehaving recursive
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence or stub resolvers. [RT #33605]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence3618. [func] "rndc reload" now checks modification times of
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews include files as well as master files to determine
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews whether to skip reloading a zone. [RT #33936]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson3617. [bug] Named was failing to answer queries during
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews "rndc reload" [RT #34098]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence3616. [bug] Change #3613 was incomplete. [RT #34177]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington3615. [cleanup] "configure" now finishes by printing a summary
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson of optional BIND features and whether they are
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington active or inactive. ("configure --enable-full-report"
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington increases the verbosity of the summary.) [RT #31777]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington3614. [port] Check for <linux/types.h>. [RT #34162]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington3613. [bug] named could crash when deleting inline-signing
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington zones with "rndc delzone". [RT #34066]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3611. [bug] Improved resistance to a theoretical authentication
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister attack based on differential timing. [RT #33939]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3610. [cleanup] win32: Some executables had been omitted from the
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister installer. [RT #34116]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3609. [bug] Corrected a possible deadlock in applications using
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister the export version of the isc_app API. [RT #33967]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3608. [port] win32: added todos.pl script to ensure all text files
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister the win32 build depends on are converted to DOS
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister newline format. [RT #22067]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson message. [RT #34045]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson3606. [func] "rndc flushtree" now flushes matching
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson records in the address database and bad cache
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson as well as the DNS cache. (Previously only the
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson DNS cache was flushed.) [RT #33970]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson3605. [port] win32: Addressed several compatibility issues
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews with newer versions of Visual Studio. [RT #33916]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3604. [bug] Fixed a compile-time error when building with
96ab25294b028270eb1be867613df8a6c999b332David Lawrence JSON but not XML. [RT #33959]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3603. [bug] Install <isc/stat.h>. [RT #33956]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
e68de4a7dbf5b6a1b2ff3f4f4dd8adf80b80525bBrian Wellington integrate with named and serve DNS data.
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson (Contributed by John Eaglesham of Yahoo.)
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3601. [bug] Added to PKCS#11 openssl patches a value len
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson attribute in DH derive key. [RT #33928]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson3600. [cleanup] dig: Fixed a typo in the warning output when receiving
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson an oversized response. [RT #33910]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson3599. [tuning] Check for pointer equivalence in name comparisons.
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington3598. [cleanup] Improved portability of map file code. [RT #33820]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3597. [bug] Ensure automatic-resigning heaps are reconstructed
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson when loading zones in map format. [RT #33381]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3596. [port] Updated win32 build documentation, added
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson dnssec-verify. [RT #22067]
b6747cf19dea764e5acaa164f23b70d54348d64cMark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3594. [maint] Update config.guess and config.sub. [RT #33816]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3593. [func] Update EDNS processing to better track remote server
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence capabilities. [RT #30655]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3592. [doc] Moved documentation of rndc command options to the
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence rndc man page. [RT #33506]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence3591. [func] Use CRC-64 to detect map file corruption at load
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson time. [RT #33746]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson3590. [bug] When using RRL on recursive servers, defer
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson rate-limiting until after recursion is complete;
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson also, use correct rcode for slipped NXDOMAIN
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson responses. [RT #33604]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington3589. [func] Report serial numbers in when starting zone transfers.
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson Report accepted NOTIFY requests including serial.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson3588. [bug] dig: addressed a memory leak in the sigchase code
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson that could cause a shutdown crash. [RT #33733]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson3587. [func] 'named -g' now checks the logging configuration but
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson does not use it. [RT #33473]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson3585. [func] "rndc delzone -clean" option removes zone files
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson when deleting a zone. [RT #33570]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews3584. [security] Caching data from an incompletely signed zone could
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews trigger an assertion failure in resolver.c
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews (CVE-2013-3919). [RT #33690]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews3582. [bug] Silence false positive warning regarding missing file
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson directive for inline slave zones. [RT #33662]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson3580. [bug] Addressed a possible race in acache.c [RT #33602]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson3579. [maint] Updates to PKCS#11 openssl patches, supporting
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer3577. [bug] Handle zero TTL values better. [RT #33411]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3576. [bug] Address a shutdown race when validating. [RT #33573]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3575. [func] Changed the logging category for RRL events from
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence 'queries' to 'query-errors'. [RT #33540]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3574. [doc] The 'hostname' keyword was missing from server-id
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence description in the named.conf man page. [RT #33476]
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence zone names containing punctuation marks and other
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence nonstandard characters. [RT #33419]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson3572. [func] Threads are now enabled by default on most
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson operating systems. [RT #25483]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson3571. [bug] Address race condition in dns_client_startresolve().
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson3570. [bug] Check internal pointers are valid when loading map
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence files. [RT #33403]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson module, and added multithread support. [RT #33394]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson3568. [cleanup] Add a product description line to the version file,
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson to be reported by named -v/-V. [RT #33366]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence3567. [bug] Silence clang static analyzer warnings. [RT #33365]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3566. [func] Log when forwarding updates to master. [RT #33240]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3565. [placeholder]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington3564. [bug] Improved handling of corrupted map files. [RT #33380]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3562. [func] Update map file header format to include a SHA-1 hash
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of the database content, so that corrupted map files
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence can be rejected at load time. [RT #32459]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence or NOTIMP. Adjust usage message. [RT #33363]
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence3560. [bug] isc-config.sh did not honor includedir and libdir
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when set via configure. [RT #33345]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3559. [func] Check that both forms of Sender Policy Framework
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence records exist or do not exist. [RT #33355]
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson3555. [bug] Address theoretical race conditions in acache.c
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson (change #3553 was incomplete). [RT #33252]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3554. [bug] RRL failed to correctly rate-limit upward
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson referrals and failed to count dropped error
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson responses in the statistics. [RT #33225]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3553. [bug] Address suspected double free in acache. [RT #33252]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson3552. [bug] Wrong getopt option string for 'nsupdate -r'.
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington3550. [func] Unified the internal and export versions of the
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington BIND libraries, allowing external clients to use
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington the same libraries as BIND. [RT #33131]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews3549. [doc] Documentation for "request-nsid" was missing.
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson3548. [bug] The NSID request code in resolver.c was broken
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson resulting in invalid EDNS options being sent.
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson3547. [bug] Some malformed unknown rdata records were not properly
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson detected and rejected. [RT #33129]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer3546. [func] Add EUI48 and EUI64 types. [RT #33082]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3544. [contrib] check5011.pl: Script to report the status of
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews managed keys as recorded in managed-keys.bind.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews Contributed by Tony Finch <dot@dotat.at>
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3543. [bug] Update socket structure before attaching to socket
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews manager after accept. [RT #33084]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister3542. [placeholder]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister3541. [bug] Parts of libdns were not properly initialized when
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister built in libexport mode. [RT #33028]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister3540. [test] libt_api: t_info and t_assert were not thread safe.
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews3539. [port] win32: timestamp format didn't match other platforms.
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews3538. [test] Running "make test" now requires loopback interfaces
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington to be set up. [RT #32452]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington3537. [tuning] Slave zones, when updated, now send NOTIFY messages
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington to peers before being dumped to disk rather than
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister after. [RT #27242]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister3536. [func] Add support for setting Differentiated Services Code
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister Point (DSCP) values in named. Most configuration
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister options which take a "port" option (e.g.,
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister listen-on, forwarders, also-notify, masters,
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson notify-source, etc) can now also take a "dscp"
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson option specifying a code point for use with
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence outgoing traffic, if supported by the underlying
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson OS. [RT #27596]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3535. [bug] Minor win32 cleanups. [RT #32962]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3534. [bug] Extra text after an embedded NULL was ignored when
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson parsing zone files. [RT #32699]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson3531. [bug] win32: A uninitialized value could be returned on out
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson of memory. [RT #32960]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister3529. [func] Named now listens on both IPv4 and IPv6 interfaces
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence by default. Named previously only listened on IPv4
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister interfaces by default unless named was running in
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister IPv6 only mode. [RT #32945]
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson3528. [func] New "dnssec-coverage" command scans the timing
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister metadata for a set of DNSSEC keys and reports if a
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister lapse in signing coverage has been scheduled
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister inadvertently. (Note: This tool depends on python;
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister it will not be built or installed on systems that
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister do not have a python interpreter.) [RT #28098]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister3527. [compat] Add a URI to allow applications to explicitly
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister request a particular XML schema from the statistics
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister channel, returning 404 if not supported. [RT #32481]
47c196192afa37b2dea728e52579779f190bf07fJames Brister3526. [cleanup] Set up dependencies for unit tests correctly during
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister build. [RT #32803]
adf82221858138f295bce732e86dcac34645692eJames Brister3525. [func] Support for additional signing algorithms in rndc:
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson The -A option to rndc-confgen can be used to
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington select the algorithm for the generated key.
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson (The default is still hmac-md5; this may
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson change in a future release.) [RT #20363]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson3524. [func] Added an alternate statistics channel in JSON format,
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington when the server is built with the json-c library:
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister http://[address]:[port]/json. [RT #32630]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister3523. [contrib] Ported filesystem and ldap DLZ drivers to
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister dynamically-loadable modules, and added the
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister "wildcard" module based on a contribution from
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
0380c44d0238a88e167526954d630d071739ed28Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson they ought to. [RT #32685]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence where it should have been. [RT #32794]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington3519. [func] Full replay protection via four-way handshake is
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington now mandatory for rndc clients. Very old versions
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of rndc will no longer work. [RT #32798]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence so that all dns_rrl_rtype_t enum values fit regardless
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of whether it is teated as signed or unsigned by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the compiler. [RT #32792]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3516. [placeholder]
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister3515. [port] '%T' is not portable in strftime(). [RT #32763]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3514. [bug] The ranges for valid key sizes in ddns-confgen and
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence rndc-confgen were too constrained. Keys up to 512
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister bits are now allowed for most algorithms, and up
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence to 1024 bits for hmac-sha384 and hmac-sha512.
d5399cc351a549db957185993b320a3bffa40e41James Brister3513. [func] "dig -u" prints times in microseconds rather than
d5399cc351a549db957185993b320a3bffa40e41James Brister milliseconds. [RT #32704]
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister3512. [func] "rndc validation check" reports the current status
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister of DNSSEC validation. [RT #21397]
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews3511. [doc] Improve documentation of redirect zones. [RT #32756]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister3510. [func] "rndc status" and XML statistics channel now report
69b691c9624f31e59b8d128ada902a82127c15a3James Brister server start and reconfiguration times. [RT #21048]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister3509. [cleanup] Added a product line to version file to allow for
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington easy naming of different products (BIND
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington vs BIND ESV, for example). [RT #32755]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3508. [contrib] queryperf was incorrectly rejecting the -T option.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3507. [bug] Statistics channel XSL had a glitch when attempting
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister to chart query data before any queries had been
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister received. [RT #32620]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3506. [func] When setting "max-cache-size" and "max-acache-size",
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the keyword "unlimited" is no longer defined as equal
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to 4 gigabytes (except on 32-bit platforms); it
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence means literally unlimited. [RT #32358]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence3505. [bug] When setting "max-cache-size" and "max-acache-size",
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson larger values than 4 gigabytes could not be set
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence explicitly, though larger sizes were available
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when setting cache size to 0. This has been
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence corrected; the full range is now available.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3504. [func] Add support for ACLs based on geographic location,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence using MaxMind GeoIP databases. Based on code
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence contributed by Ken Brownfield <kb@slide.com>.
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence3503. [doc] Clarify size_spec syntax. [RT #32449]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3502. [func] zone-statistics: "no" is now a synonym for "none",
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence instead of "terse". [RT #29165]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence3501. [func] zone-statistics now takes three options: full,
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson terse, and none. "yes" and "no" are retained as
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson synonyms for full and terse, respectively. [RT #29165]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson3500. [security] Support NAPTR regular expression validation on
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson all platforms without using libregex, which
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson can be vulnerable to memory exhaustion attack
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff (CVE-2013-2266). [RT #32688]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff3499. [doc] Corrected ARM documentation of built-in zones.
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington3498. [bug] zone statistics for zones which matched a potential
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington empty zone could have their zone-statistics setting
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington3497. [func] When deleting a slave/stub zone using 'rndc delzone'
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson report the files that were being used so they can
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson be cleaned up if desired. [RT #27899]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3496. [placeholder]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson3495. [func] Support multiple response-policy zones (up to 32),
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson while improving RPZ performance. "response-policy"
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson syntax now includes a "min-ns-dots" clause, with
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson default 1, to exclude top-level domains from
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson NSIP and NSDNAME checking. --enable-rpz-nsip and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --enable-rpz-nsdname are now the default. [RT #32251]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson3494. [func] DNS RRL: Blunt the impact of DNS reflection and
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence amplification attacks by rate-limiting substantially-
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington identical responses. [RT #28130]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington contributed by Mark Goldfinch. [RT #32549]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson3492. [bug] Fixed a regression in zone loading performance
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson due to lock contention. [RT #30399]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson3491. [bug] Slave zones using inline-signing must specify a
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson file name. [RT #31946]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson3490. [bug] When logging RDATA during update, truncate if it's
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson too long. [RT #32365]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_dlzcreate() failed to properly initialize
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence dlzdb.link. When cloning a rdataset do not copy
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the link contents. [RT #32651]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3488. [bug] Use after free error with DH generated keys. [RT #32649]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington3487. [bug] Change 3444 was not complete. There was a additional
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence place where the NOQNAME proof needed to be saved.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3486. [bug] named could crash when using TKEY-negotiated keys
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence that had been deleted and then recreated. [RT #32506]
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3484. [bug] Some statistics were incorrectly rendered in XML.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3483. [placeholder]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington3482. [func] dig +nssearch now prints name servers that don't
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence have address records (missing AAAA or A, or the name
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence doesn't exist). [RT #29348]
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence3481. [cleanup] Removed use of const const in atf.
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson3480. [bug] Silence logging noise when setting up zone
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson statistics. [RT #32525]
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson3479. [bug] Address potential memory leaks in gssapi support
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson code. [RT #32405]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson3478. [port] Fix a build failure in strict C99 environments
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson3477. [func] Expand logging when adding records via DDNS update
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson3476. [bug] "rndc zonestatus" could report a spurious "not
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff found" error on inline-signing zones. [RT #29226]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff3475. [cleanup] Changed name of 'map' zone file format (previously
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson 'fast'). [RT #32458]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff3474. [bug] nsupdate could assert when the local and remote
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff address families didn't match. [RT #22897]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff3473. [bug] dnssec-signzone/verify could incorrectly report
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff an error condition due to an empty node above an
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson opt-out delegation lacking an NSEC3. [RT #32072]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson3472. [bug] The active-connections counter in the socket
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson statistics could underflow. [RT #31747]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson3471. [bug] The number of UDP dispatches now defaults to
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson the number of CPUs even if -n has been set to
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson a higher value. [RT #30964]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson3470. [bug] Slave zones could fail to dump when successfully
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence refreshing after an initial failure. [RT #31276]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3469. [bug] Handle DLZ lookup failures more gracefully. Improve
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister backward compatibility between versions of DLZ dlopen
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister API. [RT #32275]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3468. [security] RPZ rules to generate A records (but not AAAA records)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could trigger an assertion failure when used in
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence conjunction with DNS64 (CVE-2012-5689). [RT #32141]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3467. [bug] Added checks in dnssec-keygen and dnssec-settime
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson to check for delete date < inactive date. [RT #31719]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson in DLZ example driver. [RT #32275]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3465. [bug] Handle isolated reserved ports. [RT #31778]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3464. [maint] Updates to PKCS#11 openssl patches, supporting
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson3462. [doc] Clarify server selection behavior of dig when using
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence -4 or -6 options. [RT #32181]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3461. [bug] Negative responses could incorrectly have AD=1
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence set. [RT #32237]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3460. [bug] Only link against readline where needed. [RT #29810]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3459. [func] Added -J option to named-checkzone/named-compilezone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to specify the path to the journal file. [RT #30958]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3458. [bug] Return FORMERR when presented with a overly long
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence domain named in a request. [RT #29682]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson3456. [port] g++47: ATF failed to compile. [RT #32012]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failed. [RT #31960]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3452. [bug] Accept duplicate singleton records. [RT #32329]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3451. [port] Increase per thread stack size from 64K to 1M.
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence3450. [bug] Stop logfileconfig system test spam system logs.
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence3449. [bug] gen.c: use the pre-processor to construct format
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington strings so that compiler can perform sanity checks;
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington check the snprintf results. [RT #17576]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington3448. [bug] The allow-query-on ACL was not processed correctly.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3447. [port] Add support for libxml2-2.9.x [RT #32231]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3446. [port] win32: Add source ID (see change #3400) to build.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3445. [bug] Warn about zone files with blank owner names
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister immediately after $ORIGIN directives. [RT #31848]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3444. [bug] The NOQNAME proof was not being returned from cached
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister insecure responses. [RT #21409]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister rejected when generating keys. [RT #31927]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3442. [port] Net::DNS 0.69 introduced a non backwards compatible
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister change. [RT #32216]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister3440. [bug] Reorder get_key_struct to not trigger a assertion when
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister cleaning up due to out of memory error. [RT #32131]
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson3439. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson buffers with constant data. [RT #32064]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson3436. [bug] Check malloc/calloc return values. [RT #32088]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson3435. [bug] Cross compilation support in configure was broken.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson3434. [bug] Pass client info to the DLZ findzone() entry
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson point in addition to lookup(). This makes it
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson possible for a database to answer differently
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson whether it's authoritative for a name depending
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson on the address of the client. [RT #31775]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews ISC_R_NOMORE. [RT #31172]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews DLZ databases are searched in the order configured,
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews unless set to "search no", in which case a
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews zone can be configured to be retrieved from a
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews particular DLZ database by using a "dlz <name>"
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews option in the zone statement. DLZ databases can
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews support type "master" and "redirect" zones.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson3431. [bug] ddns-confgen: Some valid key algorithms were
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson not accepted. [RT #31927]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews 'T' between the date and time. [RT #32044]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews returning a valid serial. [RT #32007]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson3428. [cleanup] dig: Add timezone to date output. [RT #2269]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3427. [bug] dig +trace incorrectly displayed name server
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson addresses instead of names. [RT #31641]
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence3426. [bug] dnssec-checkds: Clearer output when records are not
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence found. [RT #31968]
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson3425. [bug] "acacheentry" reference counting was broken resulting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in use after free. [RT #31908]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson3424. [func] dnssec-dsfromkey now emits the hash without spaces.
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister3423. [bug] "rndc signing -nsec3param" didn't accept the full
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister range of possible values. Address portability issues.
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister match the referral. [RT #31281]
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister3421. [bug] Named loops when re-signing if all keys are offline.
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister3420. [bug] Address VPATH compilation issues. [RT #31879]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister3419. [bug] Memory leak on validation cancel. [RT #31869]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister3418. [func] New XML schema (version 3.0) for the statistics channel
e411a986b94276c28e6a971f9c3b61d45c635456James Brister adds query type statistics at the zone level, and
e411a986b94276c28e6a971f9c3b61d45c635456James Brister flattens the XML tree and uses compressed format to
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews optimize parsing. Includes new XSL that permits
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews charting via the Google Charts API on browsers that
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence support javascript in XSL. The old XML schema has been
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson deprecated. [RT #30023]
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson3417. [placeholder]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dispatches per interface. [RT #31743]
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence3415. [bug] named could die with a REQUIRE failure if a validation
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews was canceled. [RT #31804]
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson3414. [bug] Address locking issues found by Coverity. [RT #31626]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3413. [func] Record the number of DNS64 AAAA RRsets that have been
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson synthesized. [RT #27636]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3412. [bug] Copy timeval structure from control message data.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson to UDP. [RT #31690]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister3410. [bug] Addressed Coverity warnings. [RT #31626]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence from X.509 certificates, for use with DANE
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson (DNS-based Authentication of Named Entities).
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence3408. [bug] Some DNSSEC-related options (update-check-ksk,
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence are now legal in slave zones as long as
36357e4304862fb47e9fae03c704cb6720310c45James Brister inline-signing is in use. [RT #31078]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3407. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3406. [bug] mem.c: Fix compilation errors when building with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3405. [bug] Handle time going backwards in acache. [RT #31253]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3404. [bug] dnssec-signzone: When re-signing a zone, remove
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RRSIG and NSEC records from nodes that used to be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in-zone but are now below a zone cut. [RT #31556]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3402. [test] The IPv6 interface numbers used for system
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence tests were incorrect on some platforms. [RT #25085]
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson3401. [bug] Addressed Coverity warnings. [RT #31484]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3400. [cleanup] "named -V" can now report a source ID string, defined
b99d080717fdd741961d736581270d37bad8bec0David Lawrence in the "srcid" file in the build tree and normally set
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson to the most recent git hash. [RT #31494]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson3399. [port] netbsd: rename 'bool' parameter to avoid namespace
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence clash. [RT #31515]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3398. [bug] SOA parameters were not being updated with inline
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence signed zones if the zone was modified while the
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence server was offline. [RT #29272]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence3396. [bug] OPT records were incorrectly removed from signed,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence truncated responses. [RT #31439]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3394. [bug] Adjust 'successfully validated after lower casing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence signer' log level and category. [RT #31414]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3393. [bug] 'host -C' could core dump if REFUSED was received.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3392. [func] Keep statistics on REFUSED responses. [RT #31412]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence3390. [bug] Silence clang compiler warnings. [RT #30417]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3388. [bug] Fixed several Coverity warnings.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Note: This change includes a fix for a bug that
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence was subsequently determined to be an exploitable
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence security vulnerability, CVE-2012-5688: named could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence die on specific queries with dns64 enabled.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3387. [func] DS digest can be disabled at runtime with
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson disable-ds-digests. [RT #21581]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3386. [bug] Address locking violation when generating new NSEC /
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence NSEC3 chains. [RT #31224]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley3385. [bug] named-checkconf didn't detect missing master lists
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley in also-notify clauses. [RT #30810]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley3384. [bug] Improved logging of crypto errors. [RT #30963]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley3383. [security] A certain combination of records in the RBT could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence cause named to hang while populating the additional
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence section of a response. [RT #31090]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3382. [bug] SOA query from slave used use-v6-udp-ports range,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence if set, regardless of the address family in use.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington3381. [contrib] Update queryperf to support more RR types.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3380. [bug] named could die if a nonexistent master list was
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence referenced in a also-notify. [RT #31004]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3379. [bug] isc_interval_zero and isc_time_epoch should be
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence "const (type)* const". [RT #31069]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3378. [bug] Handle missing 'managed-keys-directory' better.
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence3377. [bug] Removed spurious newline from NSEC3 multiline
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence output. [RT #31044]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3376. [bug] Lack of EDNS support was being recorded without a
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence successful response. [RT #30811]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff3374. [bug] isc_parse_uint32 failed to return a range error on
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff systems with 64 bit longs. [RT #30232]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence messages. [RT #30501]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3371. [bug] AD=1 should behave like DO=1 when deciding whether to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence add NS RRsets to the additional section or not.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3370. [bug] Address use after free while shutting down. [RT #30241]
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence3369. [bug] nsupdate terminated unexpectedly in interactive mode
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence if built with readline support. [RT #29550]
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer were not C++ safe.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3367. [bug] dns_dnsseckey_create() result was not being checked.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3366. [bug] Fixed Read-After-Write dependency violation for IA64
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence atomic operations. [RT #25181]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3365. [bug] Removed spurious newlines from log messages in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3364. [security] Named could die on specially crafted record.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3363. [bug] Need to allow "forward" and "fowarders" options
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in static-stub zones; this had been overlooked.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3362. [bug] Setting some option values to 0 in named.conf
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could trigger an assertion failure on startup.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3361. [bug] "rndc signing -nsec3param" didn't work correctly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when salt was set to '-' (no salt). [RT #30099]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3360. [bug] 'host -w' could die. [RT #18723]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3359. [bug] An improperly-formed TSIG secret could cause a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence memory leak. [RT #30607]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3358. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3357. [port] Add support for libxml2-2.8.x [RT #30440]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence approaching their expiry, so they don't remain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in caches after expiry. [RT #26429]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3355. [port] Use more portable awk in verify system test.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3354. [func] Improve OpenSSL error logging. [RT #29932]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3353. [bug] Use a single task for task exclusive operations.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3352. [bug] Ensure that learned server attributes timeout of the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence adb cache. [RT #29856]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence memory debugging flags are set. [RT #30243]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3350. [bug] Memory read overrun in isc___mem_reallocate if
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_MEM_DEBUGCTX memory debugging flag is set.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3349. [bug] Change #3345 was incomplete. [RT #30233]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3348. [bug] Prevent RRSIG data from being cached if a negative
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence record matching the covering type exists at a higher
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence trust level. Such data already can't be retrieved from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the cache since change 3218 -- this prevents it
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence being inserted into the cache as well. [RT #26809]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3347. [bug] dnssec-settime: Issue a warning when writing a new
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence private key file would cause a change in the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence permissions of the existing file. [RT #27724]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3346. [security] Bad-cache data could be used before it was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence initialized, causing an assert. [RT #30025]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3345. [bug] Addressed race condition when removing the last item
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence or inserting the first item in an ISC_QUEUE.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3344. [func] New "dnssec-checkds" command checks a zone to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence determine which DS records should be published
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence in the parent zone, or which DLV records should be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence published in a DLV zone, and queries the DNS to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ensure that it exists. (Note: This tool depends
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence on python; it will not be built or installed on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence systems that do not have a python interpreter.)
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence3343. [placeholder]
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson3342. [bug] Change #3314 broke saving of stub zones to disk
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence resulting in excessive cpu usage in some cases.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3341. [func] New "dnssec-verify" command checks a signed zone
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence to ensure correctness of signatures and of NSEC/NSEC3
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence chains. [RT #23673]
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence3340. [func] Added new 'map' zone file format, which is an image
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson of a zone database that can be loaded directly into
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson memory via mmap(), allowing much faster zone loading.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson (Note: Because of pointer sizes and other
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence considerations, this file format is platform-dependent;
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence 'map' zone files cannot always be transferred from one
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence server to another.) [RT #25419]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3339. [func] Allow the maximum supported rsa exponent size to be
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence specified: "max-rsa-exponent-size <value>;" [RT #29228]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3338. [bug] Address race condition in units tests: asyncload_zone
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence and asyncload_zt. [RT #26100]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3337. [bug] Change #3294 broke support for the multiple keys
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence in controls. [RT #29694]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3336. [func] Maintain statistics for RRsets tagged as "stale".
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley3335. [func] nslookup: return a nonzero exit code when unable
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley to get an answer. [RT #29492]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley3334. [bug] Hold a zone table reference while performing a
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley asynchronous load of a zone. [RT #28326]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley3333. [bug] Setting resolver-query-timeout too low can cause
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley named to not recover if it loses connectivity.
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3331. [security] dns_rdataslab_fromrdataset could produce bad
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence rdataslabs. [RT #29644]
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence3330. [func] Fix missing signatures on NOERROR results despite
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RPZ rewriting. Also
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence - add optional "recursive-only yes|no" to the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence response-policy statement
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - add optional "max-policy-ttl" to the response-policy
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence statement to limit the false data that
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "recursive-only no" can introduce into
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence resolvers' caches
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence - add a RPZ performance test to bin/tests/system/rpz
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when queryperf is available.
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington - the encoding of PASSTHRU action to "rpz-passthru".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (The old encoding is still accepted.)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3329. [bug] Handle RRSIG signer-name case consistently: We
77f372eed39827f5efef476602de7c0505f99b91David Lawrence generate RRSIG records with the signer-name in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence lower case. We accept them with any case, but if
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence they fail to validate, we try again in lower case.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3328. [bug] Fixed inconsistent data checking in dst_parse.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to 'filter-aaaa-on-v4' but applies to IPv6
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence connections. (Use "configure --enable-filter-aaaa"
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence to enable this option.) [RT #27308]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3326. [func] Added task list statistics: task model, worker
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence threads, quantum, tasks running, tasks ready.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley3325. [func] Report cache statistics: memory use, number of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence nodes, number of hash buckets, hit and miss counts.
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington3324. [test] Add better tests for ADB stats [RT #27057]
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff3323. [func] Report the number of buckets the resolver is using.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3322. [func] Monitor the number of active TCP and UDP dispatches.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3321. [func] Monitor the number of recursive fetches and the
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson number of open sockets, and report these values in
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson the statistics channel. [RT #27054]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley3320. [func] Added support for monitoring of recursing client
d111a46c88adda33a93839f4934e127b6147d87dBob Halley count. [RT #27009]
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence3319. [func] Added support for monitoring of ADB entry count and
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews hash size. [RT #27057]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews3318. [tuning] Reduce the amount of work performed while holding a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence bucket lock when finished with a fetch context.
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff3316. [tuning] Improved locking performance when recursing.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley3315. [tuning] Use multiple dispatch objects for sending upstream
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley queries; this can improve performance on busy
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley multiprocessor systems by reducing lock contention.
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington3314. [bug] The masters list could be updated while stub_callback
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington or refresh_callback were using it. [RT #26732]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington3313. [protocol] Add TLSA record type. [RT #28989]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson3311. [bug] Abort the zone dump if zone->db is NULL in
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson zone.c:zone_gotwritehandle. [RT #29028]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson3310. [test] Increase table size for mutex profiling. [RT #28809]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
4716e94840921878b26e493576f84afe4fe08752Mark Andrews3308. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley3305. [func] Add wire format lookup method to sdb. [RT #28563]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
3886e748a4086b813e3453232a742903762fedadBob Halley3303. [bug] named could die when reloading. [RT #28606]
3886e748a4086b813e3453232a742903762fedadBob Halley3302. [bug] dns_dnssec_findmatchingkeys could fail to find
3886e748a4086b813e3453232a742903762fedadBob Halley keys if the zone name contained character that
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley required special mappings. [RT #28600]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley3301. [contrib] Update queryperf to build on darwin. Add -R flag
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley for non-recursive queries. [RT #28565]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington3300. [bug] Named could die if gssapi was enabled in named.conf
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington but was not compiled in. [RT #28338]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington3299. [bug] Make SDB handle errors from database drivers better.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington3298. [bug] Named could dereference a NULL pointer in
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson zmgr_start_xfrin_ifquota if the zone was being removed.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley3297. [bug] Named could die on a malformed master file. [RT #28467]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley3296. [bug] Named could die with a INSIST failure in
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley client.c:exit_check. [RT #28346]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley3295. [bug] Adjust isc_time_secondsastimet range check to be more
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson portable. [RT # 26542]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence error. [RT #28265]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson3293. [func] nsupdate: list supported type. [RT #28261]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington3292. [func] Log messages in the axfr stream at debug 10.
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson3291. [port] Fixed a build error on systems without ENOTSUP.
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence3288. [bug] dlz_destroy() function wasn't correctly registered
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence by the DLZ dlopen driver. [RT #28056]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3286. [bug] Managed key maintenance timer could fail to start
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence after 'rndc reconfig'. [RT #26786]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3285. [bug] val-frdataset was incorrectly disassociated in
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence proveunsecure after calling startfinddlvsep.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister3284. [bug] Address race conditions with the handling of
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister3283. [bug] Raw zones with with more than 512 records in a RRset
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister failed to load. [RT #27863]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister3282. [bug] Restrict the TTL of NS RRset to no more than that
6253eaa03c49aac035bdd8b1d9ec4853b45e94a0Andreas Gustafsson of the old NS RRset when replacing it.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister [RT #27792] [RT #27884]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister3281. [bug] SOA refresh queries could be treated as cancelled
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence despite succeeding over the loopback interface.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3280. [bug] Potential double free of a rdataset on out of memory
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence with DNS64. [RT #27762]
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence3279. [bug] Hold a internal reference to the zone while performing
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister a asynchronous load. Address potential memory leak
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister if the asynchronous is cancelled. [RT #27750]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson3278. [bug] Make sure automatic key maintenance is started
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson when "auto-dnssec maintain" is turned on during
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson "rndc reconfig". [RT #26805]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson3276. [bug] win32: ns_os_openfile failed to return NULL on
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson safe_open failure. [RT #27696]
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington option had been misspelled as '-clear'. (To avoid
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence future confusion, both options now work.) [RT #27173]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3274. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3273. [bug] AAAA responses could be returned in the additional
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence section even when filter-aaaa-on-v4 was in use.
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington3272. [func] New "rndc zonestatus" command prints information
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington about the specified zone. [RT #21671]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley3271. [port] darwin: mksymtbl is not always stable, loop several
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley times before giving up. mksymtbl was using non
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence portable perl to covert 64 bit hex strings. [RT #27653]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence --- 9.9.0rc2 released ---
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister3270. [bug] "rndc reload" didn't reuse existing zones correctly
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence when inline-signing was in use. [RT #27650]
be768c2e952c34438025999125f984995a2c675fBob Halley3269. [port] darwin 11 and later now built threaded by default.
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley out the earliest expiry time. [RT #23311]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley3267. [bug] Memory allocation failures could be mis-reported as
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley unexpected error. New ISC_R_UNSET result code.
be768c2e952c34438025999125f984995a2c675fBob Halley3266. [bug] The maximum number of NSEC3 iterations for a
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister DNSKEY RRset was not being properly computed.
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley3265. [bug] Corrected a problem with lock ordering in the
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley inline-signing code. [RT #27557]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence3264. [bug] Automatic regeneration of signatures in an
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley inline-signing zone could stall when the server
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley was restarted. [RT #27344]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3263. [bug] "rndc sync" did not affect the unsigned side of an
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister inline-signing zone. [RT #27337]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3262. [bug] Signed responses were handled incorrectly by RPZ.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3261. [func] RRset ordering now defaults to random. [RT #27174]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3260. [bug] "rrset-order cyclic" could appear not to rotate
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence for some query patterns. [RT #27170/27185]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister --- 9.9.0rc1 released ---
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister3259. [bug] named-compilezone: Suppress "dump zone to <file>"
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister message when writing to stdout. [RT #27109]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley3258. [test] Add "forcing full sign with unreadable keys" test.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley3257. [bug] Do not generate a error message when calling fsync()
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley in a pipe or socket. [RT #27109]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington3255. [func] No longer require that a empty zones be explicitly
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington enabled or that a empty zone is disabled for
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington RFC 1918 empty zones to be configured. [RT #27139]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley too long. [RT #26956]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3252. [bug] When master zones using inline-signing were
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence updated while the server was offline, the source
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zone could fall out of sync with the signed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence copy. They can now resynchronize. [RT #26676]
lib/dns/rbtdb.c:iszonesecure. [RT #26913]
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3201. [func] 'rndc querylog' can now be given an on/off parameter
dnssec.h. [RT #26415]
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
3186. [bug] Version/db mis-match in rpz code. [RT #26180]
sample external DLZ module in contrib/dlz/example.
- replace "NO-OP" named.conf policy override with
3169. [func] Catch db/version mis-matches when calling dns_db_*().
3163. [bug] Use finer-grained locking in client.c to address
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
drivers (e.g., mysql, postgresql, etc). [RT #25710]
3145. [test] Capture output of ATF unit tests in "./atf.out" if
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which