CHANGES revision 246c504f90f42e5633dfd5e85bd57b01064961fe
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington2706. [bug] Loading a zone with a very large NSEC3 salt could
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington trigger an assert. [RT #20368]
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington2705. [placeholder]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2704. [bug] Serial of dynamic and stub zones could be inconsistent
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson with their SOA serial. [RT #19387]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2703. [func] Introduce an OpenSSL "engine" argument with -E
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson for all binaries which can take benefit of
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington crypto hardware. [RT #20230]
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
02e7e0ba65a26a5f8728b0ee256f7253795cf839Brian Wellington supported TSIG key algorithm. [RT #18046]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2700. [doc] The match-mapped-addresses option is discouraged.
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2699. [bug] Missing lock in rbtdb.c. [RT #20037]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2698. [placeholder]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson S_IFREG are defined after including <isc/stat.h>.
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington2696. [bug] named failed to successfully process some valid
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington acl constructs. [RT #20308]
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington2695. [func] DHCP/DDNS - update fdwatch code for use by
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews callback funciton for isc_socket_fdwatchcreate)
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley to include information about the direction (read
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley or write) and add isc_socket_fdwatchpoke.
76b3ec5e0c3ae856bc1000270bf3df13580673ebBrian Wellington2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley2693. [port] Add some noreturn attributes. [RT #20257]
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington2692. [port] win32: 32/64 bit cleanups. [RT #20335]
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson chain when re-signing a previously-signed zone.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson Use -u to modify NSEC3 parameters or switch
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson between NSEC and NSEC3. [RT #20304]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2689. [bug] Correctly handle snprintf result. [RT #20306]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson to decide to fetch the destination address. [RT #20305]
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley Also, added warnings when revoking a ZSK, as this is
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley not defined by protocol (but is legal). [RT #19943]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington2686. [bug] dnssec-signzone should clean the old NSEC chain when
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington signing with NSEC3 and vice versa. [RT #20301]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2684. [cleanup] dig: formalize +ad and +cd as synonyms for
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson +adflag and +cdflag. [RT #19305]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson the NSEC3 parameters used to sign the zone change.
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2682. [bug] "configure --enable-symtable=all" failed to
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews build. [RT #20282]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews decoded. [RT #20269]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson2679. [func] dig -k can now accept TSIG keys in named.conf
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson format. [RT #20031]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2678. [func] Treat DS queries as if "minimal-response yes;"
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington was set. [RT #20258]
14c615e979f674aa61b0ca65c6a252009e521dd8Brian Wellington2677. [func] Changes to key metadata behavior:
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington - Keys without "publish" or "active" dates set will
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson no longer be used for smart signing. However,
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson those dates will be set to "now" by default when
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews a key is created; to generate a key but not use
4d35b6836eb57387a9da6b103331b59cc988b827Mark Andrews it yet, use dnssec-keygen -G.
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews - New "inactive" date (dnssec-keygen/settime -I)
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley sets the time when a key is no longer used for
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley signing but is still published.
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley - The "unpublished" date (-U) is deprecated in
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley favor of "deleted" (-D).
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2676. [bug] --with-export-installdir should have been
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson --with-export-includedir. [RT #20252]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2675. [bug] dnssec-signzone could crash if the key directory
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington did not exist. [RT #20232]
762a538eed7f4de4c340090536553f9c73f6432aBrian Wellington --- 9.7.0a3 released ---
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2674. [bug] "dnssec-lookaside auto;" crashed if named was built
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington without openssl. [RT #20231]
c44ab73a0f37fa8c8a52069ca20dd060492dbafdAndreas Gustafsson2673. [bug] The managed-keys.bind zone file could fail to
7ae7d499f353549162ddcf6fed957ea21e4fa52bMark Andrews load due to a spurious result from sync_keyzone()
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2672. [bug] Don't enable searching in 'host' when doing reverse
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley lookups. [RT #20218]
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2671. [bug] Add support for PKCS#11 providers not returning
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson the public exponent in RSA private keys
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson (OpenCryptoki for instance) in
40c1177517ca5312371da6cc697d813576cfe5a8Andreas Gustafsson dnssec-keyfromlabel. [RT #19294]
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington2670. [bug] Unexpected connect failures failed to log enough
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington information to be useful. [RT #20205]
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington2669. [func] Update PKCS#11 support to support Keyper HSM.
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington Update PKCS#11 patch to be against openssl-0.9.8i.
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington2668. [func] Several improvements to dnssec-* tools, including:
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington - dnssec-keygen and dnssec-settime can now set key
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington metadata fields 0 (to unset a value, use "none")
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington - dnssec-revoke sets the revocation date in
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington addition to the revoke bit
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington - dnssec-settime can now print individual metadata
d77312050f1fb1d41b450d4fe6908ea155264d08Brian Wellington fields instead of always printing all of them,
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington and can print them in unix epoch time format for
4b9f0fd0791cb9cb31087789a03fa3a28dd4b583Andreas Gustafsson use by scripts
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
dc1453b15d6656cd0661d5bec56359efa649268dAndreas Gustafsson failure (not available for all platforms). [RT #19780]
80aba3d49a872ca11d7cf8550c3a993162e7939fMark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
31039b15173fb3e375269991920e4843f664457eMark Andrews (API change from 9.7.0a2). [RT #20196]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2665. [func] Clarify syntax for managed-keys {} statement, add
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson ARM documentation about RFC 5011 support. [RT #19874]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2664. [bug] create_keydata() and minimal_update() in zone.c
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley didn't properly check return values for some
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley functions. [RT #19956]
f765672e93eb863ae86571b4a46c9d0b33264976Mark Andrews2663. [func] win32: allow named to run as a service using
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington "NT AUTHORITY\LocalService" as the account. [RT #19977]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington returned a misleading error code when lwresd was
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington down. [RT #20028]
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews creating lwres context. [RT #20029]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2660. [func] Add a new set of DNS libraries for non-BIND9
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson applications. See README.libdns. [RT #19369]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2659. [doc] Clarify dnssec-keygen doc: key name must match zone
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson name for DNSSEC keys. [RT #19938]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington2658. [bug] dnssec-settime and dnssec-revoke didn't process
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington key file paths correctly. [RT #20078]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2657. [cleanup] Lower "journal file <path> does not exist, creating it"
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson log level to debug 1. [RT #20058]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2656. [func] win32: add a "tools only" check box to the installer
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley which causes it to only install dig, host, nslookup,
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley nsupdate and relevant DLLs. [RT #19998]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2655. [doc] Document that key-directory does not affect
8e68489885e744ab48907414b4199c36858c27ddMark Andrews bind.keys, rndc.key or session.key. [RT #20155]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson deny-answer-xxx. [RT #20164]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2653. [bug] Treat ENGINE_load_private_key() failures as key
ec4f7c6d0f0cfc72bcecdb22bf59890d590218d6Mark Andrews not found rather than out of memory. [RT #18033]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2652. [func] Provide more detail about what record is being
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson deleted. [RT #20061]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2651. [bug] Dates could print incorrectly in K*.key files on
7427490a67b9547242b57c255254f7e146127c48Bob Halley 64-bit systems. [RT #20076]
7427490a67b9547242b57c255254f7e146127c48Bob Halley2650. [bug] Assertion failure in dnssec-signzone when trying
7427490a67b9547242b57c255254f7e146127c48Bob Halley to read keyset-* files. [RT #20075]
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson2649. [bug] Set the domain for forward only zones. [RT #19944]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2647. [bug] Remove unnecessary SOA updates when a new KSK is
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews added. [RT #19913]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
b1b3495eba72ea2b7270c5cd62b0bb824de74e05Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson which default to 64 bits. [RT #19927]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington --- 9.7.0a2 released ---
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington2644. [bug] Change #2628 caused a regression on some systems;
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington named was unable to write the PID file and would
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington fail on startup. [RT #20001]
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson2643. [bug] Stub zones interacted badly with NSEC3 support.
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2642. [bug] nsupdate could dump core on solaris when reading
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington improperly formatted key files. [RT #20015]
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson2641. [bug] Fixed an error in parsing update-policy syntax,
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington added a regression test to check it. [RT #20007]
4b236540be165859390f05911eda86a39ee58eedAndreas Gustafsson2640. [security] A specially crafted update packet will cause named
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson to exit. [RT #20000]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2638. [bug] Install arpaname. [RT #19957]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews dnssec-* tools. Major changes:
363cb30a83e8e57bc8874e621910f0e23dd84909Mark Andrews - all dnssec-* tools now take a -K option to
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson specify a directory in which key files will be
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington - DNSSEC can now store metadata indicating when
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington they are scheduled to be published, activated,
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson revoked or removed; these values can be set by
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson dnssec-keygen or overwritten by the new
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson dnssec-settime command
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson - dnssec-signzone -S (for "smart") option reads key
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson metadata and uses it to determine automatically
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson which keys to publish to the zone, use for
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson signing, revoke, or remove from the zone
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington2634. [port] win32: Add support for libxml2, enable
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington statschannel. [RT #19773]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2633. [bug] Handle 15 bit rand() functions. [RT #19783]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2632. [func] util/kit.sh: warn if documentation appears to be out of
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington date. [RT #19922]
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington2630. [func] Improved syntax for DDNS autoconfiguration: use
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson "update-policy local;" to switch on local DDNS in a
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson zone. (The "ddns-autoconf" option has been removed.)
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington2629. [port] Check for seteuid()/setegid(), use setresuid()/
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington setresgid() if not present. [RT #19932]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2628. [port] linux: Allow /var/run/named/named.pid to be opened
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington at startup with reduced capabilities in operation.
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson2627. [bug] Named aborted if the same key was included in
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews trusted-keys more than once. [RT #19918]
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington2626. [bug] Multiple trusted-keys could trigger an assertion
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington failure. [RT #19914]
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
fb0663dbdd4811c6062fe602b511227be66aec56Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
fb0663dbdd4811c6062fe602b511227be66aec56Mark Andrews configuration. [RT #18871]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson2621. [doc] Made copyright boilterplate consistent. [RT #19833]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2620. [bug] Delay thawing the zone until the reload of it has
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews completed successfully. [RT #19750]
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
c50895694ef939f287aaa7505e0fcf634903bd34Mark Andrews maintenance. The new "managed-keys" statement can
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews be used in place of "trusted-keys" for zones which
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson support this protocol. (Note: this syntax is
d72269740049af28b091ba81d68a067c88f53547Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews loop infinitely. [RT #19847]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews run from the wrong location. [RT #19375]
f7321615eaaf63461bd682513d2873d97ae31771Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson when a explicit nameserver was specified. [RT #19852]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2615. [bug] "__attribute__((unused))" was in the wrong place
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington for ia64 gcc builds. [RT #19854]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2614. [port] win32: 'named -v' should automatically be executed
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson in the foreground. [RT #19844]
725fec8d79ff36402b0f90a7a05aafa7964e387fBrian Wellington2613. [placeholder]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington --- 9.7.0a1 released ---
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews2612. [func] Add default values for the arguments to
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson dnssec-keygen. Without arguments, it will now
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson generate a 1024-bit RSASHA1 zone-signing key,
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson or with the -f KSK option, a 2048-bit RSASHA1
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson key-signing key. [RT #19300]
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews DLV records instead of DS records. [RT #19300]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2610. [port] sunos: Change #2363 was not complete. [RT #19796]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2609. [func] Simplify the configuration of dynamic zones:
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington - add ddns-confgen command to generate
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington configuration text for named.conf
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington - add zone option "ddns-autoconf yes;", which
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington causes named to generate a TSIG session key
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington and allow updates to the zone using that key
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington - add '-l' (localhost) option to nsupdate, which
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington causes nsupdate to connect to a locally-running
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews named process using the session key generated
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2608. [func] Perform post signing verification checks in
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington dnssec-signzone. These can be disabled with -P.
3f8ad70264645ebd6a2a8bc7e923271eb5bf8416Brian Wellington The post sign verification test ensures that for each
3f8ad70264645ebd6a2a8bc7e923271eb5bf8416Brian Wellington algorithm in use there is at least one non revoked
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington self signed KSK key. That all revoked KSK keys are
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington self signed. That all records in the zone are signed
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington by the algorithm. [RT #19653]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2607. [bug] named could incorrectly delete NSEC3 records for
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson empty nodes when processing a update request.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson delegation-only type zones. [RT #19717]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2605. [bug] Accept DS responses from delegation only zones.
228c679d7a269423019f7c528db92e855f08240bMark Andrews2604. [func] Add support for DNS rebinding attack prevention through
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington new options, deny-answer-addresses and
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson deny-answer-aliases. Based on contributed code from
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson JD Nurmi, Google. [RT #18192]
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington2603. [port] win32: handle .exe extension of named-checkzone and
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington named-comilezone argv[0] names under windows.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2602. [port] win32: fix debugging command line build of libisccfg.
175ba246fb074ae8caca0e76ecc8055517ab486cBrian Wellington2601. [doc] Mention file creation mode mask in the
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington named manual page.
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2600. [doc] ARM: miscellaneous reformatting for different
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington page widths. [RT #19574]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2599. [bug] Address rapid memory growth when validation fails.
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2597. [bug] Handle a validation failure with a insecure delegation
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer from a NSEC3 signed master/slave zone. [RT #19464]
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer long, leading to inefficient memory usage or rejecting
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews newer cache entries in the worst case. [RT #19563]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington2594. [func] Have rndc warn if using its default configuration
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington file when the key file also exists. [RT #19424]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2591. [bug] named could die when processing a update in
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley removed_orphaned_ds(). [RT #19507]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2590. [func] Report zone/class of "update with no effect".
4e7942dc7612acb71b111a5e8d919960f5a9efc5Mark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2588. [bug] SO_REUSEADDR could be set unconditionally after failure
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson of bind(2) call. This should be rare and mostly
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson harmless, but may cause interference with other
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson processes that happen to use the same port. [RT #19642]
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence2587. [func] Improve logging by reporting serial numbers for
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence when zone serial has gone backwards or unchanged.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews or SDB. [RT #19577]
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews2585. [bug] Uninitialized socket name could be referenced via a
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews statistics channel, triggering an assertion failure in
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews XML rendering. [RT #19427]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews2583. [port] netbsd: provide a control to not add the compile
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews date to the version string, -DNO_VERSION_DATE.
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews remove non-existant journal. [RT #19516]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington Requires MySQL 5.0.19 or later. [RT #19084]
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence2580. [bug] UpdateRej statistics counter could be incremented twice
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence for one rejection. [RT #19476]
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence2579. [bug] DNSSEC lookaside validation failed to handle unknown
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence algorithms. [RT #19479]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2578. [bug] Changed default sig-signing-type to 65534, because
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence 65535 turns out to be reserved. [RT #19477]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence2577. [doc] Clarified some statistics counters. [RT #19454]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence2576. [bug] NSEC record were not being correctly signed when
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington a zone transitions from insecure to secure.
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington Handle such incorrectly signed zones. [RT #19114]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence2575. [func] New functions dns_name_fromstring() and
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence dns_name_tostring(), to simplify conversion
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence of a string to a dns_name structure and vice
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence versa. [RT #19451]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence2574. [doc] Document nsupdate -g and -o. [RT #19351]
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson2573. [bug] Replacing a non-CNAME record with a CNAME record in a
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington single transaction in a signed zone failed. [RT #19397]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson2572. [func] Simplify DLV configuration, with a new option
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson "dnssec-lookaside auto;" This is the equivalent
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson of "dnssec-lookaside . trust-anchor dlv.isc.org;"
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews plus setting a trusted-key for dlv.isc.org.
24c5978e0b32137305c2bef2c6e116ee7680a610Andreas Gustafsson Note: The trusted key is hard-coded into named,
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson but is also stored in (and can be overridden
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington by) $sysconfdir/bind.keys. As the ISC DLV key
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington rolls over it can be kept up to date by replacing
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington the bind.keys file with a key downloaded from
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington https://www.isc.org/solutions/dlv. [RT #18685]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2571. [func] Add a new tool "arpaname" which translates IP addresses
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson2570. [func] Log the destination address the query was sent to.
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington2569. [func] Move journalprint, nsec3hash, and genrandom
732f883c12f171186d7f3331ebdf5d16044b14b0Brian Wellington "make install" will put them in $sbindir. [RT #19301]
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson2568. [bug] Report when the write to indicate a otherwise
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson successful start fails. [RT #19360]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2567. [bug] dst__privstruct_writefile() could miss write errors.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson write_public_key() could miss write errors.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson dnssec-dsfromkey could miss write errors.
f53848e17123569387b279578f0100dca5407da5Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
f53848e17123569387b279578f0100dca5407da5Mark Andrews response arrives from a zone thought to be secure:
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington "insecurity proof failed" instead of "not
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington insecure". [RT #19400]
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington2565. [func] Add support for HIP record. Includes new functions
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson and dns_rdata_hip_current(). [RT #19384]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson2564. [bug] Only take EDNS fallback steps when processing timeouts.
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington2563. [bug] Dig could leak a socket causing it to wait forever
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson to exit. [RT #19359]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2562. [doc] ARM: miscellaneous improvements, reorganization,
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson and some new content.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2559. [bug] dnssec-dsfromkey could compute bad DS records when
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson reading from a K* files. [RT #19357]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2558. [func] Set the ownership of missing directories created
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson for pid-file if -u has been specified on the command
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson line. [RT #19328]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2557. [cleanup] PCI compliance:
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence * new libisc log module file
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence * isc_dir_chroot() now also changes the working
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence directory to "/".
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence * additional INSISTs
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence * additional logging when files can't be removed.
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence error checks in the correct order resulting in the
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence wrong error code sometimes being returned. [RT #19249]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2555. [func] dig: when emitting a hex dump also display the
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence corresponding characters. [RT #19258]
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington2554. [bug] Validation of uppercase queries from NSEC3 zones could
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington fail. [RT #19297]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington2552. [bug] zero-no-soa-ttl-cache was not being honoured.
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2551. [bug] Potential Reference leak on return. [RT #19341]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson2549. [port] linux: define NR_OPEN if not currently defined.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2548. [bug] Install iterated_hash.h. [RT #19335]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2547. [bug] openssl_link.c:mem_realloc() could reference an
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington out-of-range area of the source buffer. New public
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer function isc_mem_reallocate() was introduced to address
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer this bug. [RT #19313]
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence2546. [func] Add --enable-openssl-hash configure flag to use
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence OpenSSL (in place of internal routine) for hash
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence functions (MD5, SHA[12] and HMAC). [RT #18815]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2545. [doc] ARM: Legal hostname checking (check-names) is
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington for SRV RDATA too. [RT #19304]
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence2542. [doc] Update the description of dig +adflag. [RT #19290]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington2541. [bug] Conditionally update dispatch manager statistics.
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2539. [security] Update the interaction between recursion, allow-query,
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington allow-query-cache and allow-recursion. [RT #19198]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington2538. [bug] cache/ADB memory could grow over max-cache-size,
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington especially with threads and smaller max-cache-size
833535ea78ec7a15376b862fd288ffd00f808666Brian Wellington values. [RT #19240]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2537. [func] Added more statistics counters including those on socket
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington I/O events and query RTT histograms. [RT #18802]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2536. [cleanup] Silence some warnings when -Werror=format-security is
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson specified. [RT #19083]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington2534. [func] Check NAPTR records regular expressions and
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington replacement strings to ensure they are syntactically
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson valid and consistant. [RT #18168]
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson2533. [doc] ARM: document @ (at-sign). [RT #17144]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2532. [bug] dig: check the question section of the response to
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington see if it matches the asked question. [RT #18495]
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson2531. [bug] Change #2207 was incomplete. [RT #19098]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2530. [bug] named failed to reject insecure to secure transitions
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson via UPDATE. [RT #19101]
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews version of autoconf. [RT #18657]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2528. [cleanup] Silence spurious configure warning about
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson --datarootdir [RT #19096]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2527. [placeholder]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2526. [func] New named option "attach-cache" that allows multiple
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson views to share a single cache to save memory and
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews improve lookup efficiency. Based on contributed code
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews from Barclay Osborn, Google. [RT #18905]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews internal information about query failures, especially
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson about server failures. [RT #19027]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2523. [bug] Random type rdata freed by dns_nsec_typepresent().
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
483958540f0034d543f0564beb7877326f15a45bMark Andrews #2388 made the schema incompatible to the previous
483958540f0034d543f0564beb7877326f15a45bMark Andrews version. [RT #19080]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2519. [bug] dig/host with -4 or -6 didn't work if more than two
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson nameserver addresses of the excluded address family
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson preceded in resolv.conf. [RT #19081]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson2517. [bug] dig +trace with -4 or -6 failed when it chose a
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson nameserver address of the excluded address type.
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews2516. [bug] glue sort for responses was performed even when not
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews needed. [RT #19039]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson a nameserver of the excluded address family.
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2513. [bug] Fix windows cli build. [RT #19062]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2512. [func] Print a summary of the cached records which make up
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson the negative response. [RT #18885]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2509. [bug] Specifying a fixed query source port was broken.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2508. [placeholder]
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley2507. [func] Log the recursion quota values when killing the
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley oldest query or refusing to recurse due to quota.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2506. [port] solaris: Check at configure time if
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson hack_shutup_pthreadonceinit is needed. [RT #19037]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2505. [port] Treat amd64 similarly to x86_64 when determining
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson atomic operation support. [RT #19031]
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson2504. [bug] Address race condition in the socket code. [RT #18899]
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington2503. [port] linux: improve compatibility with Linux Standard
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington Base. [RT #18793]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2502. [cleanup] isc_radix: Improve compliance with coding style,
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson document function in <isc/radix.h>. [RT #18534]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2501. [func] $GENERATE now supports all rdata types. Multi-field
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson rdata types need to be quoted. See the ARM for
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence details. [RT #18368]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence function. [RT #18582]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence --- 9.6.0rc1 released ---
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2498. [bug] Removed a bogus function argument used with
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence ISC_SOCKET_USE_POLLWATCH: it could cause compiler
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence warning or crash named with the debug 1 level
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence of logging. [RT #18917]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington2496. [bug] Add sanity length checks to NSID option. [RT #18813]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2495. [bug] Tighten RRSIG checks. [RT #18795]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington installed. [RT #18826]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington2493. [bug] The linux capabilities code was not correctly cleaning
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson up after itself. [RT #18767]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson2492. [func] Rndc status now reports the number of cpus discovered
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson and the number of worker threads when running
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews multi-threaded. [RT #18273]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2491. [func] Attempt to re-use a local port if we are already using
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson the port. [RT #18548]
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington is cleared when IPV6_V6ONLY is set. [RT #18785]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2489. [port] solaris: Workaround Solaris's kernel bug about
066faef1195d539f575816ccab87ff3e85b1b13eBrian Wellington http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington Define ISC_SOCKET_USE_POLLWATCH at build time to enable
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews this workaround. [RT #18870]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer from keyset and .key files. [RT #18694]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer2487. [bug] Give TCP connections longer to complete. [RT #18675]
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer2486. [func] The default locations for named.pid and lwresd.pid
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson This allows the owner of the containing directory
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson to be set, for "named -u" support, and allows there
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson to be a permanent symbolic link in the path, for
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson "named -t" support. [RT #18306]
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington records. Not all orphaned DS records were being
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington removed. [RT #18828]
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington adding NSEC3 proofs to the response in
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington query_addwildcardproof(). [RT #18828]
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews to 2.6.*. [RT #18806]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews --- 9.6.0b1 released ---
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews collisions. [RT #18812]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2480. [bug] named could fail to emit all the required NSEC3
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence records. [RT #18812]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2478. [bug] 'addresses' could be used uninitialized in
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews configure_forward(). [RT #18800]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2477. [bug] dig: the global option to print the command line is
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence +cmd not print_cmd. Update the output to reflect
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews this. [RT #17008]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson particular entries more aggressively. [RT #17628]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews2474. [bug] ACL structures could be allocated with insufficient
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews space, causing an array overrun. [RT #18765]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews2473. [port] linux: raise the limit on open files to the possible
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews maximum value before spawning threads; 'files'
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews specified in named.conf doesn't seem to work with
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington threads as expected. [RT #18784]
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington2472. [port] linux: check the number of available cpu's before
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews glue when sibling checks were disabled. [RT #18768]
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington2470. [bug] Elements of the isc_radix_node_t could be incorrectly
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington overwritten. [RT# 18719]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2469. [port] solaris: Work around Solaris's select() limitations.
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2468. [bug] Resolver could try unreachable servers multiple times.
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews2465. [bug] Adb's handling of lame addresses was different
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews for IPv4 and IPv6. [RT #18738]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson2464. [port] linux: check that a capability is present before
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson trying to set it. [RT #18135]
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence API and glibc hides parts of the IPv6 Advanced Socket
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence API as a result. This is stupid as it breaks how the
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence two halves (Basic and Advanced) of the IPv6 Socket API
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence were designed to be used but we have to live with it.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence API. [RT #18388]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2462. [doc] Document -m (enable memory usage debugging)
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley option for dig. [RT #18757]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2461. [port] sunos: Change #2363 was not complete. [RT #17513]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley --- 9.6.0a1 released ---
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2458. [doc] ARM: update and correction for max-cache-size.
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews default. It should be safe because expired cache
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews entries are also purged. [RT #18684]
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson address, regardless of family. They now correctly
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer distinguish IPv4 from IPv6. [RT #18559]
588b63e1a86fb707172830e14897da624ed380edMark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews2453. [bug] Remove NULL pointer dereference in dns_journal_print().
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington2451. [port] solaris: handle runtime linking better. [RT #18356]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington2450. [doc] Fix lwresd docbook problem for manual page.
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews2449. [placeholder]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews2448. [func] Add NSEC3 support. [RT #15452]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington2447. [cleanup] libbind has been split out as a separate product.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2446. [func] Add a new log message about build options on startup.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews A new command-line option '-V' for named is also
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews provided to show this information. [RT# 18645]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer RFC1918 address, but these are not yet compiled in).
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer (clear DF) for UDP responses and requests.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2443. [bug] win32: UDP connect() would not generate an event,
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer and so connected UDP sockets would never clean up.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer Fix this by doing an immediate WSAConnect() rather
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer than an io completion port type for UDP.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2442. [bug] A lock could be destroyed twice. [RT# 18626]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2441. [bug] isc_radix_insert() could copy radix tree nodes
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson incompletely. [RT #18573]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2440. [bug] named-checkconf used an incorrect test to determine
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson if an ACL was set to none.
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington2438. [bug] Timeouts could be logged incorrectly under win32.
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington2437. [bug] Sockets could be closed too early, leading to
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews inconsistent states in the socket module. [RT #18298]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2433. [tuning] Set initial timeout to 800ms.
93d5a6b95e88f57b7619d9728f06e3aa5e2f0c65Andreas Gustafsson2432. [bug] More Windows socket handling improvements. Stop
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson using I/O events and use IO Completion Ports
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson throughout. Rewrite the receive path logic to make
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson it easier to support multiple simultaneous
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson requesters in the future. Add stricter consistency
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson checking as a compile-time option (define
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington2430. [bug] win32: isc_interval_set() could round down to
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington zero if the input was less than NS_INTERVAL
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington nanoseconds. Round up instead. [RT #18549]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2429. [doc] nsupdate should be in section 1 of the man pages.
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2428. [bug] dns_iptable_merge() mishandled merges of negative
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer tables. [RT #18409]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson was set. [RT #18528]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2426. [bug] libbind: inet_net_pton() can sometimes return the
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson wrong value if excessively large net masks are
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson supplied. [RT #18512]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2425. [bug] named didn't detect unavailable query source addresses
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews at load time. [RT #18536]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews2424. [port] configure now probes for a working epoll
e412ae947df6de858883564b8676a9650df70d9aMark Andrews implementation. Allow the use of kqueue,
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson epoll and /dev/poll to be selected at compile
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews time. [RT #18277]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews2423. [security] Randomize server selection on queries, so as to
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews make forgery a little more difficult. Instead of
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson always preferring the server with the lowest RTT,
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson pick a server with RTT within the same 128
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson millisecond band. [RT #18441]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson2422. [bug] Handle the special return value of a empty node as
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson if it was a NXRRSET in the validator. [RT #18447]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson2421. [func] Add new command line option '-S' for named to specify
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson the max number of sockets. [RT #18493]
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews Use caution: this option may not work for some
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews operating systems without rebuilding named.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2420. [bug] Windows socket handling cleanup. Let the io
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson completion event send out canceled read/write
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson done events, which keeps us from writing to memory
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson we no longer have ownership of. Add debugging
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson socket_log() function. Rework TCP socket handling
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson to not leak sockets.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson should not be used for isc_sockettype_fdwatch sockets.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2417. [bug] Connecting UDP sockets for outgoing queries could
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson unexpectedly fail with an 'address already in use'
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson error. [RT #18411]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2416. [func] Log file descriptors that cause exceeding the
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson internal maximum. [RT #18460]
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington2415. [bug] 'rndc dumpdb' could trigger various assertion failures
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews in rbtdb.c. [RT #18455]
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews2414. [bug] A masterdump context held the database lock too long,
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews causing various troubles such as dead lock and
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews recursive lock acquisition. [RT #18311, #18456]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews at compilation time. [RT #18433]
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence Note: with changes #2469 and #2421 above, there is no
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson2410. [bug] Correctly delete m_versionInfo. [RT #18432]
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson2409. [bug] Only log that we disabled EDNS processing if we were
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer subsequently successful. [RT #18029]
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington2408. [bug] A duplicate TCP dispatch event could be sent, which
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson could then trigger an assertion failure in
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson resquery_response(). [RT #18275]
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington2406. [placeholder]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2405. [cleanup] The default value for dnssec-validation was changed to
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson "yes" in 9.5.0-P1 and all subsequent releases; this
8357e90fba97010a86356a41c8a961d5d602d7d0Michael Sawyer was inadvertently omitted from CHANGES at the time.
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson2404. [port] hpux: files unlimited support.
abb38b673379d6dae7cbb495f814d73a4afe5c8bAndreas Gustafsson2403. [bug] TSIG context leak. [RT #18341]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson (from accept() or fcntl() system calls). [RT #18358]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2399. [placeholder]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2398. [bug] Improve file descriptor management. New,
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews temporary, named.conf option reserved-sockets,
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson default 512. [RT #18344]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2397. [bug] gssapi_functions had too many elements. [RT #18355]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2396. [bug] Don't set SO_REUSEADDR for randomized ports.
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews on Linux when running as root. [RT #18335]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2394. [bug] Default configuration options set the limit for
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley open files to 'unlimited' as described in the
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley documentation. [RT #18331]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2393. [bug] nested acls containing keys could trigger an
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson assertion in acl.c. [RT #18166]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2392. [bug] remove 'grep -q' from acl test script, some platforms
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer don't support it. [RT #18253]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2390. [bug] dispatch.c could make a false warning on 'odd socket'.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley [RT #18301].
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2389. [bug] Move the "working directory writable" check to after
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff the ns_os_changeuser() call. [RT #18326]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2388. [bug] Avoid using tables for layout purposes in
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff statistics XSL [RT #18159].
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2387. [bug] Silence compiler warnings in lib/isc/radix.c.
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson [RT #18147] [RT #18258]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2386. [func] Add warning about too small 'open files' limit.
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2385. [bug] A condition variable in socket.c could leak in
ba43c53451d5c38765f376eeede457178b36951aBob Halley rare error handling [RT #17968].
ba43c53451d5c38765f376eeede457178b36951aBob Halley2384. [security] Fully randomize UDP query ports to improve
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews forgery resilience. [RT #17949, #18098]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2383. [bug] named could double queries when they resulted in
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
668278867ba063995988507b6b28724ebb9f9391Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2381. [port] dlz/mysql: support multiple install layouts for
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson mysql. <prefix>/include/{,mysql/}mysql.h and
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson <prefix>/lib/{,mysql/}. [RT #18152]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson proofs which, in turn, caused validation failures
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson for insecure zones immediately below a secure zone
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson the server was authoritative for. [RT #18112]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson TLDs and supported RRs with TTLs [RT #17972]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2376. [bug] Change #2144 was not complete.
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2375. [placeholder]
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson2374. [bug] "blackhole" ACLs could cause named to segfault due
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson to some uninitialized memory. [RT #18095]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2373. [bug] Default values of zone ACLs were re-parsed each time a
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff new zone was configured, causing an overconsumption
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff of memory. [RT #18092]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2371. [doc] Add +nsid option to dig man page. [RT #18039]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2370. [bug] "rndc freeze" could trigger an assertion in named
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington when called on a nonexistent zone. [RT #18050]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2369. [bug] libbind: Array bounds overrun on read in bitncmp().
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2368. [port] Linux: use libcap for capability management if
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley possible. [RT# 18026]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2367. [bug] Improve counting of dns_resstatscounter_retry
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson2366. [bug] Adb shutdown race. [RT #18021]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson2365. [bug] Fix a bug that caused dns_acl_isany() to return
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley spurious results. [RT #18000]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2364. [bug] named could trigger a assertion when serving a
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson malformed signed zone. [RT #17828]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2362. [cleanup] Make "rrset-order fixed" a compile-time option.
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson settable by "./configure --enable-fixed-rrset".
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson Disabled by default. [RT #17977]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2361. [bug] "recursion" statistics counter could be counted
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff multiple times for a single query. [RT #17990]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2360. [bug] Fix a condition where we release a database version
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff (which may acquire a lock) while holding the lock.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2359. [bug] Fix NSID bug. [RT #17942]
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson2358. [doc] Update host's default query description. [RT #17934]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson2357. [port] Don't use OpenSSL's engine support in versions before
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson OpenSSL 0.9.7f. [RT #17922]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2356. [bug] Built in mutex profiler was not scalable enough.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2355. [func] Extend the number statistics counters available.
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2354. [bug] Failed to initialize some rdatasetheader_t elements.
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2353. [func] Add support for Name Server ID (RFC 5001).
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson 'dig +nsid' requests NSID from server.
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson 'request-nsid yes;' causes recursive server to send
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington NSID requests to upstream servers. Server responds
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington to NSID requests with the string configured by
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson 'server-id' option. [RT #17091]
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2352. [bug] Various GSS_API fixups. [RT #17729]
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2350. [port] win32: IPv6 support. [RT #17797]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington2349. [func] Provide incremental re-signing support for secure
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington dynamic zones. [RT #1091]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson Documentation is in the new README.pkcs11 file.
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson New tool, dnssec-keyfromlabel, which takes the
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson label of a key pair in a HSM and constructs a DNS
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson key pair for use by named and dnssec-signzone.
ec4060d3104e8bec28406232eb7338c81bb1b1c1Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson order. [RT #17451]
2c7097eac0aed3b0b3387082cb783db64f2d7765Andreas Gustafsson2346. [func] Memory statistics now cover all active memory contexts
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson in increased detail. [RT #17580]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2345. [bug] named-checkconf failed to detect when forwarders
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson were set at both the options/view level and in
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson a root zone. [RT #17671]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington2344. [bug] Improve "logging{ file ...; };" documentation.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2343. [bug] (Seemingly) duplicate IPv6 entries could be
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson created in ADB. [RT #17837]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington tree builds. [RT #17606]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2340. [port] openbsd: interface configuration. [RT #17700]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2339. [port] tru64: support for libbind. [RT #17589]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2338. [bug] check_ds() could be called with a non DS rdataset.
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2336. [func] If "named -6" is specified then listen on all IPv6
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson interfaces if there are not listen-on-v6 clauses in
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2335. [port] sunos: libbind and *printf() support for long long.
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson bug in fromstruct_txt(). [RT #17609]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2333. [bug] Fix off by one error in isc_time_nowplusinterval().
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2332. [contrib] query-loc-0.4.0. [RT #17602]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2331. [bug] Failure to regenerate any signatures was not being
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews reported nor being past back to the UPDATE client.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2330. [bug] Remove potential race condition when handling
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews over memory events. [RT #17572]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews WARNING: API CHANGE: over memory callback
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews function now needs to call isc_mem_waterack().
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews See <isc/mem.h> for details.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson2327. [bug] It was possible to dereference a NULL pointer in
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson rbtdb.c. Implement dead node processing in zones as
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson we do for caches. [RT #17312]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2326. [bug] It was possible to trigger a INSIST in the acache
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2325. [port] Linux: use capset() function if available. [RT #17557]
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
3f31c8c2954f857e375db8e943a35f6aa5e230b4Andreas Gustafsson2323. [port] tru64: namespace clash. [RT #17547]
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson2322. [port] MacOS: work around the limitation of setrlimit()
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson for RLIMIT_NOFILE. [RT #17526]
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence2321. [placeholder]
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson2320. [func] Make statistics counters thread-safe for platforms
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington that support certain atomic operations. [RT #17466]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2319. [bug] Silence Coverity warnings in
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2318. [port] sunos fixes for libbind. [RT #17514]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson2315. [bug] Used incorrect address family for mapped IPv4
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson addresses in acl.c. [RT #17519]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2314. [bug] Uninitialized memory use on error path in
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2313. [cleanup] Silence Coverity warnings. Handle private stacks.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson [RT #17447] [RT #17478]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2311. [bug] IPv6 addresses could match IPv4 ACL entries and
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson vice versa. [RT #17462]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2310. [bug] dig, host, nslookup: flush stdout before emitting
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson debug/fatal messages. [RT #17501]
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2306. [bug] Remove potential race from lib/dns/resolver.c.
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
385a9cb48a70b329e507c39d043fa9a44c659913James Brister2304. [bug] Check returns from all dns_rdata_tostruct() calls.
3cb0de1c667237085c6a805715c31ddc5fdc9c4dBrian Wellington2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence2301. [bug] Remove resource leak and fix error messages in
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer bin/tests/system/lwresd/lwtest.c. [RT #17474]
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence2300. [bug] Fixed failure to close open file in
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2299. [bug] Remove unnecessary NULL check in
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2298. [bug] isc_mutex_lock() failure not caught in
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2297. [bug] isc_entropy_createfilesource() failure not caught in
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2296. [port] Allow docbook stylesheet location to be specified to
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence configure. [RT #17457]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2294. [func] Allow the experimental statistics channels to have
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington multiple connections and ACL.
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington Note: the stats-server and stats-server-v6 options
529a6b5224d751504027293a766a4c8b81241869Brian Wellington available in the previous beta releases are replaced
529a6b5224d751504027293a766a4c8b81241869Brian Wellington with the generic statistics-channels statement.
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson2293. [func] Add ACL regression test. [RT #17375]
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington2292. [bug] Log if the working directory is not writable.
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence failure to set PR_SET_DUMPABLE. [RT #17312]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2290. [bug] Let AD in the query signal that the client wants AD
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson set in the response. [RT #17301]
05f6d0c0381d19eec721e11f6fd88caef25dacd8Andreas Gustafsson2289. [func] named-checkzone now reports the out-of-zone CNAME
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson found. [RT #17309]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2288. [port] win32: mark service as running when we have finished
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson loading. [RT #17441]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2286. [func] Allow a TCP connection to be used as a weak
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson authentication method for reverse zones.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson New update-policy methods tcp-self and 6to4-self.
ffea7c2e73a0771c80b32df93cf4547fcea64eaeAndreas Gustafsson2285. [func] Test framework for client memory context management.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson2284. [bug] Memory leak in UPDATE prerequisite processing.
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2283. [bug] TSIG keys were not attaching to the memory
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson context. TSIG keys should use the rings
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer memory context rather than the clients memory
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer context. [RT #17377]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2281. [bug] Attempts to use undefined acls were not being logged.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2280. [func] Allow the experimental http server to be reached
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer over IPv6 as well as IPv4. [RT #17332]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence to protect applications from receiving spurious
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson SIGPIPE signals when using the resolver.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2278. [bug] win32: handle the case where Windows returns no
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson search list or DNS suffix. [RT #17354]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2277. [bug] Empty zone names were not correctly being caught at
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson in the post parse checks. [RT #17357]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2275. [func] Add support to dig to perform IXFR queries over UDP.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2274. [func] Log zone transfer statistics. [RT #17336]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2273. [bug] Adjust log level to WARNING when saving inconsistent
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence stub/slave master and journal files. [RT# 17279]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2271. [bug] Fix a memory leak in http server code [RT #17100]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2270. [bug] dns_db_closeversion() version->writer could be reset
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson before it is tested. [RT #17290]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson --- 9.5.0b1 released ---
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2267. [bug] Radix tree node_num value could be set incorrectly,
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson causing positive ACL matches to look like negative
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington ones. [RT #17311]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington2266. [bug] client.c:get_clientmctx() returned the same mctx
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington once the pool of mctx's was filled. [RT #17218]
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson2265. [bug] Test that the memory context's basic_table is non NULL
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson before freeing. [RT #17265]
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson2264. [bug] Server prefix length was being ignored. [RT #17308]
da527e4ff6a013364826637963e7ac372e024f33David Lawrence2263. [bug] "named-checkconf -z" failed to set default value
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson for "check-integrity". [RT #17306]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson2262. [bug] Error status from all but the last view could be
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson lost. [RT #17292]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2260. [bug] Reported wrong clients-per-query when increasing the
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence value. [RT #17236]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2259. [placeholder]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister --- 9.5.0a7 released ---
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2257. [bug] win32: Use the full path to vcredist_x86.exe when
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence calling it. [RT #17222]
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews2256. [bug] win32: Correctly register the installation location of
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2254. [bug] timer.c:dispatch() failed to lock timer->lock
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson when reading timer->idle allowing it to see
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence intermediate values as timer->idle was reset by
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson isc_timer_touch(). [RT #17243]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2253. [func] "max-cache-size" defaults to 32M.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence "max-acache-size" defaults to 16M.
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2252. [bug] Fixed errors in sortlist code [RT #17216]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2251. [placeholder]
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson2250. [func] New flag 'memstatistics' to state whether the
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson memory statistics file should be written or not.
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson Additionally named's -m option will cause the
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson statistics file to be written. [RT #17113]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2249. [bug] Only set Authentic Data bit if client requested
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson DNSSEC, per RFC 3655 [RT #17175]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
5096958739769958dd7a6b69356bf41260033873David Lawrence2247. [doc] Sort doc/misc/options. [RT #17067]
5096958739769958dd7a6b69356bf41260033873David Lawrence2246. [bug] Make the startup of test servers (ans.pl) more
5096958739769958dd7a6b69356bf41260033873David Lawrence robust. [RT #17147]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2245. [bug] Validating lack of DS records at trust anchors wasn't
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence working. [RT #17151]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2244. [func] Allow the check of nameserver names against the
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence SOA MNAME field to be disabled by specifying
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence 'notify-to-soa yes;'. [RT #17073]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2243. [func] Configuration files without a newline at the end now
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence parse without error. [RT #17120]
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews library could require a source of random data.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington a number of INSIST()s into plain fatal() errors
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson which report the triggering result code.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington The 'key' command wasn't disabling GSS-TSIG.
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2238. [bug] It was possible to trigger a REQUIRE when a
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington validation was canceled. [RT #17106]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2236. [bug] dnssec-signzone failed to preserve the case of
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister of wildcard owner names. [RT #17085]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2233. [func] Add support for O(1) ACL processing, based on
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister radix tree code originally written by Kevin
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister Brintnall. [RT #16288]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2232. [bug] dns_adb_findaddrinfo() could fail and return
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister ISC_R_SUCCESS. [RT #17137]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2230. [bug] We could INSIST reading a corrupted journal.
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews2229. [bug] Null pointer dereference on query pool creation
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson failure. [RT #17133]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2228. [contrib] contrib: Change 2188 was incomplete.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2227. [cleanup] Tidied up the FAQ. [RT #17121]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2226. [placeholder]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2225. [bug] More support for systems with no IPv4 addresses.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2224. [bug] Defer journal compaction if a xfrin is in progress.
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2223. [bug] Make a new journal when compacting. [RT #17119]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2222. [func] named-checkconf now checks server key references.
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2221. [bug] Set the event result code to reflect the actual
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington record turned to caller when a cache update is
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington rejected due to a more credible answer existing.
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2220. [bug] win32: Address a race condition in final shutdown of
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews the Windows socket code. [RT #17028]
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson2219. [bug] Apply zone consistency checks to additions, not
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson removals, when updating. [RT #17049]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2217. [func] Adjust update log levels. [RT #17092]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2216. [cleanup] Fix a number of errors reported by Coverity.
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2214. [bug] Deregister OpenSSL lock callback when cleaning
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson up. Reorder OpenSSL cleanup so that RAND_cleanup()
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence is called before the locks are destroyed. [RT #17098]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2213. [bug] SIG0 diagnostic failure messages were looking at the
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson wrong status code. [RT #17101]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2212. [func] 'host -m' now causes memory statistics and active
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington memory to be printed at exit. [RT 17028]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2211. [func] Update "dynamic update temporarily disabled" message.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2210. [bug] Deleting class specific records via UPDATE could
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson fail. [RT #17074]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2209. [port] osx: linking against user supplied static OpenSSL
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson libraries failed as the system ones were still being
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson found. [RT #17078]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2208. [port] win32: make sure both build methods produce the
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson same output. [RT #17058]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews ai_canonname correctly. [RT #17061]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews --- 9.5.0a6 released ---
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2206. [security] "allow-query-cache" and "allow-recursion" now
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews cross inherit from each other.
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson If allow-query-cache is not set in named.conf then
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson allow-recursion is used if set, otherwise allow-query
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson is used if set, otherwise the default (localnets;
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson localhost;) is used.
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson If allow-recursion is not set in named.conf then
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson allow-query-cache is used if set, otherwise allow-query
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson is used if set, otherwise the default (localnets;
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson localhost;) is used.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2204. [bug] "rndc flushanme name unknown-view" caused named
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence to crash. [RT #16984]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2203. [security] Query id generation was cryptographically weak.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2202. [security] The default acls for allow-query-cache and
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence allow-recursion were not being applied. [RT #16960]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2201. [bug] The build failed in a separate object directory.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2200. [bug] The search for cached NSEC records was stopping to
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson early leading to excessive DLV queries. [RT #16930]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2199. [bug] win32: don't call WSAStartup() while loading dlls.
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2198. [bug] win32: RegCloseKey() could be called when
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson RegOpenKeyEx() failed. [RT #16911]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2197. [bug] Add INSIST to catch negative responses which are
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson not setting the event result code appropriately.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2196. [port] win32: yield processor while waiting for once to
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence to complete. [RT #16958]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2195. [func] dnssec-keygen now defaults to nametype "ZONE"
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister when generating DNSKEYs. [RT #16954]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2194. [bug] Close journal before calling 'done' in xfrin.c.
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington --- 9.5.0a5 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2193. [port] win32: BINDInstall.exe is now linked statically.
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence2192. [port] win32: use vcredist_x86.exe to install Visual
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Studio's redistributable dlls if building with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Visual Stdio 2005 or later.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2191. [func] named-checkzone now allows dumping to stdout (-).
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence named-checkconf now has -h for help.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named-checkzone now has -h for help.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rndc now has -h for help.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Better handling of '-?' for usage summaries.
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence2190. [func] Make fallback to plain DNS from EDNS due to timeouts
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews more visible. New logging category "edns-disabled".
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2189. [bug] Handle socket() returning EINTR. [RT #15949]
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2188. [contrib] queryperf: autoconf changes to make the search for
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson libresolv or libbind more robust. [RT #16299]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2187. [bug] query_addds(), query_addwildcardproof() and
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson query_addnxrrsetnsec() should take a version
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson argument. [RT #16368]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2186. [port] cygwin: libbind: check for struct sockaddr_storage
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson independently of IPv6. [RT #16482]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2185. [port] sunos: libbind: check for ssize_t, memmove() and
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson memchr(). [RT #16463]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2184. [bug] bind9.xsl.h didn't build out of the source tree.
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2183. [bug] dnssec-signzone didn't handle offline private keys
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews well. [RT #16832]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson could return ISC_R_SUCCESS when they ran out of
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson memory. [RT #16365]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson2180. [cleanup] Remove bit test from 'compress_test' as they
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson are no longer needed. [RT #16497]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2179. [func] 'rndc command zone' will now find 'zone' if it is
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson unique to all the views. [RT #16821]
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews a reference leak. [RT #16867]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2177. [bug] Array bounds overrun on read (rcodetext) at
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews debug level 10+. [RT #16798]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2176. [contrib] dbus update to handle race condition during
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews initialization (Bugzilla 235809). [RT #16842]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2175. [bug] win32: windows broadcast condition variable support
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister was broken. [RT #16592]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2174. [bug] I/O errors should always be fatal when reading
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister master files. [RT #16825]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2173. [port] win32: When compiling with MSVS 2005 SP1 we also
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews --- 9.5.0a4 released ---
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2172. [bug] query_addsoa() was being called with a non zone db.
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2171. [bug] Handle breaks in DNSSEC trust chains where the parent
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister servers are not DS aware (DS queries to the parent
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister return a referral to the child).
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister2170. [func] Add acache processing to test suite. [RT #16711]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2169. [bug] host, nslookup: when reporting NXDOMAIN report the
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson given name and not the last name searched for.
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2168. [bug] nsupdate: in non-interactive mode treat syntax errors
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson as fatal errors. [RT #16785]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2167. [bug] When re-using a automatic zone named failed to
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson attach it to the new view. [RT #16786]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson --- 9.5.0a3 released ---
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2166. [bug] When running in batch mode, dig could misinterpret
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews a server address as a name to be looked up, causing
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson unexpected output. [RT #16743]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2165. [func] Allow the destination address of a query to determine
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister if we will answer the query or recurse.
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister allow-query-on, allow-recursion-on and
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister allow-query-cache-on. [RT #16291]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2164. [bug] The code to determine how named-checkzone /
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister named-compilezone was called failed under windows.
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2163. [bug] If only one of query-source and query-source-v6
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister specified a port the query pools code broke (change
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister 2129). [RT #16768]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2162. [func] Allow "rrset-order fixed" to be disabled at compile
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister time. [RT #16665]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2161. [bug] Fix which log messages are emitted for 'rndc flush'.
47c196192afa37b2dea728e52579779f190bf07fJames Brister2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister from getifaddrs(). [RT #16708]
adf82221858138f295bce732e86dcac34645692eJames Brister --- 9.5.0a2 released ---
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2159. [bug] Array bounds overrun in acache processing. [RT #16710]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2158. [bug] ns_client_isself() failed to initialize key
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson leading to a REQUIRE failure. [RT #16688]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2157. [func] dns_db_transfernode() created. [RT #16685]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister resolver.c:validated() and resolver.c:cache_name().
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister Fix a memory leak in rbtdb.c:free_noqname().
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister Make lookup.c:lookup_find() robust against
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister event leaks. [RT #16685]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
0380c44d0238a88e167526954d630d071739ed28Mark Andrews2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews matched in acls by omitting the scope. [RT #16599]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2152. [cleanup] Use sizeof(buf) instead of fixed number in
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington dighost.c:get_trusted_key(). [RT #16678]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2151. [bug] Missing newline in usage message for journalprint.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2150. [bug] 'rrset-order cyclic' uniformly distribute the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence starting point for the first response for a given
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RRset. [RT #16655]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2149. [bug] isc_mem_checkdestroyed() failed to abort on
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence if there were still active memory contexts.
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2148. [func] Add positive logging for rndc commands. [RT #14623]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2147. [bug] libbind: remove potential buffer overflow from
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
d5399cc351a549db957185993b320a3bffa40e41James Brister SO_BSDCOMPAT" message. [RT #16641]
d5399cc351a549db957185993b320a3bffa40e41James Brister2145. [bug] Check DS/DLV digest lengths for known digests.
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2143. [bug] We failed to restart the IPv6 client when the
69b691c9624f31e59b8d128ada902a82127c15a3James Brister kernel failed to return the destination the
69b691c9624f31e59b8d128ada902a82127c15a3James Brister packet was sent to. [RT #16613]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2142. [bug] Handle master files with a modification time that
69b691c9624f31e59b8d128ada902a82127c15a3James Brister matches the epoch. [RT# 16612]
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence equivalent of LDH checks). [RT #16609]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2140. [bug] libbind: missing unlock on pthread_key_create()
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister failures. [RT #16654]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2139. [bug] dns_view_find() was being called with wrong type
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister in adb.c. [RT #16670]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2138. [bug] Lock order reversal in resolver.c. [RT #16653]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2137. [port] Mips little endian and/or mips 64 bit are now
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence supported for atomic operations. [RT#16648]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2136. [bug] nslookup/host looped if there was no search list
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson and the host didn't exist. [RT #16657]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2134. [func] Additional statistics support. [RT #16666]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2133. [port] powerpc: Support both IBM and MacOS Power PC
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence assembler syntaxes. [RT #16647]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2132. [bug] Missing unlock on out of memory in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_dispatchmgr_setudp().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2130. [func] Log if CD or DO were set. [RT #16640]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2129. [func] Provide a pool of UDP sockets for queries to be
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson made over. See use-queryport-pool, queryport-pool-ports
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson and queryport-pool-updateinterval. [RT #16415]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2126. [security] Serialize validation of type ANY responses. [RT #16555]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington was defined. [RT #16574]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2124. [security] It was possible to dereference a freed fetch
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington context. [RT #16584]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington --- 9.5.0a1 released ---
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson2123. [func] Use Doxygen to generate internal documentation.
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson2122. [func] Experimental http server and statistics support
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson for named via xml.
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson second timeout. [RT #16553]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2120. [doc] Fix markup on nsupdate man page. [RT #16556]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson2119. [compat] libbind: allow res_init() to succeed enough to
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence return the default domain even if it was unable
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington to allocate memory.
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2118. [bug] Handle response with long chains of domain name
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington compression pointers which point to other compression
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington pointers. [RT #16427]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson which could lead to validation failures. named didn't
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson handle negative DS responses that were in the process
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson of being validated. Check CNAME bit before accepting
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson NODATA proof. To be able to ignore a child NSEC there
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson must be SOA (and NS) set in the bitmap. [RT #16399]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson2116. [bug] 'rndc reload' could cause the cache to continually
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence be cleaned. [RT #16401]
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence2115. [bug] 'rndc reconfig' could trigger a INSIST if the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence number of masters for a zone was reduced. [RT #16444]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2114. [bug] dig/host/nslookup: searches for names with multiple
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington labels were failing. [RT #16447]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2113. [bug] nsupdate: if a zone is specified it should be used
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for server discover. [RT# 16455]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2112. [security] Warn if weak RSA exponent is used. [RT #16460]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2111. [bug] Fix a number of errors reported by Coverity.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence priming queries. [RT #16491]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington2108. [func] DHCID support. [RT #16456]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence2106. [func] 'rndc status' now reports named's version. [RT #16426]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2105. [func] GSS-TSIG support (RFC 3645).
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2104. [port] Fix Solaris SMF error message.
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson2103. [port] Add /usr/sfw to list of locations for OpenSSL
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson under Solaris.
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2102. [port] Silence Solaris 10 warnings.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2101. [bug] OpenSSL version checks were not quite right.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2100. [port] win32: copy libeay32.dll to Build\Debug.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff Copy Debug\named-checkzone to Debug\named-compilezone.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2099. [port] win32: more manifest issues.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2098. [bug] Race in rbtdb.c:no_references(), which occasionally
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff triggered an INSIST failure about the node lock
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff reference. [RT #16411]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2097. [bug] named could reference a destroyed memory context
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff after being reloaded / reconfigured. [RT #16428]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2096. [bug] libbind: handle applications that fail to detect
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson res_init() failures better.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson net_cidr_ntop_ipv6(). [RT #16388]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2094. [contrib] Update named-bootconf. [RT# 16404]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2093. [bug] named-checkzone -s was broken.
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington2092. [bug] win32: dig, host, nslookup. Use registry config
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence if resolv.conf does not exist or no nameservers
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister listed. [RT #15877]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2091. [port] dighost.c: race condition on cleanup. [RT #16417]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2090. [port] win32: Visual C++ 2005 command line manifest support.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2089. [security] Raise the minimum safe OpenSSL versions to
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson prior to these have known security flaws which
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson are (potentially) exploitable in named. [RT #16391]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2088. [security] Change the default RSA exponent from 3 to 65537.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2086. [port] libbind: FreeBSD now has get*by*_r() functions.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2085. [doc] win32: added index.html and README to zip. [RT #16201]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2084. [contrib] dbus update for 9.3.3rc2.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2083. [port] win32: Visual C++ 2005 support.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2082. [doc] Document 'cache-file' as a test only option.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence2080. [port] libbind: res_init.c did not compile on older versions
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson of Solaris. [RT #16363]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2079. [bug] The lame cache was not handling multiple types
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews correctly. [RT #16361]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews2078. [bug] dnssec-checkzone output style "default" was badly
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews named. It is now called "relative". [RT #16326]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence complete signed zone. [RT #16326]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2076. [bug] Several files were missing #include <config.h>
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causing build failures on OSF. [RT #16341]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2075. [bug] The spillat timer event hander could leak memory.
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_request_createraw2() and dns_request_createraw3()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failed to send multiple UDP requests. [RT #16349]
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2073. [bug] Incorrect semantics check for update policy "wildcard".
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2072. [bug] We were not generating valid HMAC SHA digests.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2071. [port] Test whether gcc accepts -fno-strict-aliasing.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2070. [bug] The remote address was not always displayed when
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister reporting dispatch failures. [RT #16315]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2069. [bug] Cross compiling was not working. [RT #16330]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2068. [cleanup] Lower incremental tuning message to debug 1.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2067. [bug] 'rndc' could close the socket too early triggering
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister a INSIST under Windows. [RT #16317]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2066. [security] Handle SIG queries gracefully. [RT #16300]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2065. [bug] libbind: probe for HPUX prototypes for
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister endprotoent_r() and endservent_r(). [RT 16313]
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2063. [bug] Change #1955 introduced a bug which caused the first
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson 'rndc flush' call to not free memory. [RT #16244]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2062. [bug] 'dig +nssearch' was reusing a buffer before it had
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson been returned by the socket code. [RT #16307]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2061. [bug] Accept expired wildcard message reversed. [RT #16296]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2060. [bug] Enabling DLZ support could leave views partially
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson configured. [RT #16295]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2059. [bug] Search into cache rbtdb could trigger an INSIST
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson failure while cleaning up a stale rdataset.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2058. [bug] Adjust how we calculate rtt estimates in the presence
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson of authoritative servers that drop EDNS and/or CD
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson requests. Also fallback to EDNS/512 and plain DNS
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews faster for zones with less than 3 servers. [RT #16187]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2057. [bug] Make setting "ra" dependent on both allow-query-cache
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews and allow-recursion. [RT #16290]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews at all times. [RT #15955]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2055. [bug] Missing goto after dropping multicast query.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2054. [port] freebsd: do not explicitly link against -lpthread.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2052. [bug] 'rndc' improve connect failed message to report
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews the failing address. [RT #15978]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2051. [port] More strtol() fixes. [RT #16249]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2050. [bug] Parsing of NSAP records was not case insensitive.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2049. [bug] Restore SOA before AXFR when falling back from
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson a attempted IXFR when transferring in a zone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Allow a initial SOA query before attempting
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence a AXFR to be requested. [RT #16156]
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence2048. [bug] It was possible to loop forever when using
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson avoid-v4-udp-ports / avoid-v6-udp-ports when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the OS always returned the same local port.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2047. [bug] Failed to initialize the interface flags to zero.
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews cleanup [RT #16247].
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews2045. [func] Use lock buckets for acache entries to limit memory
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister consumption. [RT #16183]
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2044. [port] Add support for atomic operations for Itanium.
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2043. [port] nsupdate/nslookup: Force the flushing of the prompt
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for interactive sessions. [RT#16148]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2042. [bug] named-checkconf was incorrectly rejecting the
e411a986b94276c28e6a971f9c3b61d45c635456James Brister logging category "config". [RT #16117]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews set of libraries to be linked. [RT #16129]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2040. [bug] rbtdb no_references() could trigger an INSIST
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson failure with --enable-atomic. [RT #16022]
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson2039. [func] Check that all buffers passed to the socket code
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews have been retrieved when the socket event is freed.
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence2038. [bug] dig/nslookup/host was unlinking from wrong list
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence when handling errors. [RT #16122]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2037. [func] When unlinking the first or last element in a list
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson check that the list head points to the element to
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson be unlinked. [RT #15959]
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2035. [func] Make falling back to TCP on UDP refresh failure
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister optional. Default "try-tcp-refresh yes;" for BIND 8
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister compatibility. [RT #16123]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2033. [bug] We weren't creating multiple client memory contexts
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister on demand as expected. [RT #16095]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2031. [bug] Emit a error message when "rndc refresh" is called on
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence a non slave/stub zone. [RT # 16073]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2030. [bug] We were being overly conservative when disabling
36357e4304862fb47e9fae03c704cb6720310c45James Brister openssl engine support. [RT #16030]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2029. [bug] host printed out the server multiple times when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence specified on the command line. [RT #15992]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2028. [port] linux: socket.c compatibility for old systems.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2027. [port] libbind: Solaris x86 support. [RT #16020]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2026. [bug] Rate limit the two recursive client exceeded messages.
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence2025. [func] Update "zone serial unchanged" message. [RT #16026]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2024. [bug] named emitted spurious "zone serial unchanged"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence messages on reload. [RT #16027]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2023. [bug] "make install" should create ${localstatedir}/run and
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson ${sysconfdir} if they do not exist. [RT #16033]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2022. [bug] If dnssec validation is disabled only assert CD if
b99d080717fdd741961d736581270d37bad8bec0David Lawrence CD was requested. [RT #16037]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2019. [tuning] Reduce the amount of work performed per quantum
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when cleaning the cache. [RT #15986]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2018. [bug] Checking if the HMAC MD5 private file was broken.
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence2017. [bug] allow-query default was not correct. [RT #15946]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2016. [bug] Return a partial answer if recursion is not
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allowed but requested and we had the answer
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to the original qname. [RT #15945]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2015. [cleanup] use-additional-cache is now acache-enable for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence consistency. Default acache-enable off in BIND 9.4
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as it requires memory usage to be configured.
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence It may be enabled by default in BIND 9.5 once we
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence have more experience with it.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2014. [func] Statistics about acache now recorded and sent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to log. [RT #15976]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence responses more gracefully. [RT #15941]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence2012. [func] Don't insert new acache entries if acache is full.
eefea43215016bce437ab4a7441b2851fd182960David Lawrence2011. [func] dnssec-signzone can now update the SOA record of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the signed zone, either as an increment or as the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence system time(). [RT #15633]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2010. [placeholder] rt15958
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2009. [bug] libbind: Coverity fixes. [RT #15808]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2008. [func] It is now possible to enable/disable DNSSEC
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson validation from rndc. This is useful for the
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson mobile hosts where the current connection point
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence breaks DNSSEC (firewall/proxy). [RT #15592]
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence rndc validation newstate [view]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2007. [func] It is now possible to explicitly enable DNSSEC
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley validation. default dnssec-validation no; to
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley be changed to yes in 9.5.0. [RT #15674]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2006. [security] Allow-query-cache and allow-recursion now default
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to the built in acls "localnets" and "localhost".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence This is being done to make caching servers less
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence attractive as reflective amplifying targets for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence spoofed traffic. This still leave authoritative
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence servers exposed.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington The best fix is for full BCP 38 deployment to
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington remove spoofed traffic.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2005. [bug] libbind: Retransmission timeouts should be
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence based on which attempt it is to the nameserver
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and not the nameserver itself. [RT #13548]
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence2004. [bug] dns_tsig_sign() could pass a NULL pointer to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dst_context_destroy() when cleaning up after a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence error. [RT #15835]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2003. [bug] libbind: The DNS name/address lookup functions could
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence occasionally follow a random pointer due to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence structures not being completely zeroed. [RT #15806]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2002. [bug] libbind: tighten the constraints on when
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence struct addrinfo._ai_pad exists. [RT #15783]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews New zone option "update-check-ksk yes;". [RT #15817]
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews1998. [bug] Restrict handling of fifos as sockets to just SunOS.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence This allows named to connect to entropy gathering
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews daemons that use fifos instead of sockets. [RT #15840]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1997. [bug] Named was failing to replace negative cache entries
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when a positive one for the type was learnt.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1996. [bug] nsupdate: if a zone has been specified it should
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence appear in the output of 'show'. [RT #15797]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1995. [bug] 'host' was reporting multiple "is an alias" messages.
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer1994. [port] OpenSSL 0.9.8 support. [RT #15694]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1993. [bug] Log messages, via syslog, were missing the space
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence after the timestamp if "print-time yes" was specified.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1992. [bug] Not all incoming zone transfer messages included the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence view. [RT #15825]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1991. [cleanup] The configuration data, once read, should be treated
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as read only. Expand the use of const to enforce this
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence at compile time. [RT #15813]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1990. [bug] libbind: isc's override of broken gettimeofday()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence implementations was not always effective.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1989. [bug] win32: don't check the service password when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence re-installing. [RT #15882]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1988. [bug] Remove a bus error from the SHA256/SHA512 support.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1986. [func] Report when a zone is removed. [RT #15849]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1985. [protocol] DLV has now been assigned a official type code of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 32769. [RT #15807]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Note: care should be taken to ensure you upgrade
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence both named and dnssec-signzone at the same time for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zones with DLV records where named is the master
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence server for the zone. Also any zones that contain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence DLV records should be removed when upgrading a slave
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zone. You do not however have to upgrade all
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence servers for a zone with DLV records simultaneously.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1984. [func] dig, nslookup and host now advertise a 4096 byte
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence EDNS UDP buffer size by default. [RT #15855]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1983. [func] Two new update policies. "selfsub" and "selfwild".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1982. [bug] DNSKEY was being accepted on the parent side of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a delegation. KEY is still accepted there for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RFC 3007 validated updates. [RT #15620]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1981. [bug] win32: condition.c:wait() could fail to reattain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the mutex lock.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1980. [func] dnssec-signzone: output the SOA record as the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence first record in the signed zone. [RT #15758]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1979. [port] linux: allow named to drop core after changing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence user ids. [RT #15753]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1978. [port] Handle systems which have a broken recvmsg().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1977. [bug] Silence noisy log message. [RT #15704]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1975. [bug] libbind: isc_gethexstring() could misparse multi-line
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence hex strings with comments. [RT #15814]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1974. [doc] List each of the zone types and associated zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence options separately in the ARM.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence HMACSHA512 support. [RT #13606]
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson1972. [contrib] DBUS dynamic forwarders integration from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Jason Vas Dias <jvdias@redhat.com>.
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence1971. [port] linux: make detection of missing IF_NAMESIZE more
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence robust. [RT #15443]
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence1970. [bug] nsupdate: adjust UDP timeout when falling back to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence unsigned SOA query. [RT #15775]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1969. [bug] win32: the socket code was freeing the socket
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence structure too early. [RT #15776]
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1966. [bug] Don't set CD when we have fallen back to plain DNS.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1965. [func] Suppress spurious "recursion requested but not
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence available" warning with 'dig +qr'. [RT #15780].
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1963. [port] Tru64 4.0E doesn't support send() and recv().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1962. [bug] Named failed to clear old update-policy when it
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was removed. [RT #15491]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1961. [bug] Check the port and address of responses forwarded
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to dispatch. [RT #15474]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1959. [func] Control the zeroing of the negative response TTL to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a soa query. Defaults "zero-no-soa-ttl yes;" and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "zero-no-soa-ttl-cache no;". [RT #15460]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1958. [bug] Named failed to update the zone's secure state
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley until the zone was reloaded. [RT #15412]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1957. [bug] Dig mishandled responses to class ANY queries.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1956. [bug] Improve cross compile support, 'gen' is now built
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley by native compiler. See README for additional
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley cross compile support information. [RT #15148]
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1954. [func] Named now falls back to advertising EDNS with a
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence 512 byte receive buffer if the initial EDNS queries
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence fail. [RT #14852]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1953. [func] The maximum EDNS UDP response named will send can
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence now be set in named.conf (max-udp-size). This is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence independent of the advertised receive buffer
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (edns-udp-size). [RT #14852]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1952. [port] hpux: tell the linker to build a runtime link
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence path "-Wl,+b:". [RT #14816].
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1951. [security] Drop queries from particular well known ports.
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington Don't return FORMERR to queries from particular
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence well known ports. [RT #15636]
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a TCP socket. This prevents the source address being
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence set for TCP connections. [RT #15628]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1949. [func] Addition memory leakage checks. [RT #15544]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1948. [bug] If was possible to trigger a REQUIRE failure in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence xfrin.c:maybe_free() if named ran out of memory.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1947. [func] It is now possible to configure named to accept
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence expired RRSIGs. Default "dnssec-accept-expired no;".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Setting "dnssec-accept-expired yes;" leaves named
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence vulnerable to replay attacks. [RT #14685]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1946. [bug] resume_dslookup() could trigger a REQUIRE failure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when using forwarders. [RT #15549]
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence To generate a RSAMD5 key you must explicitly request
d111a46c88adda33a93839f4934e127b6147d87dBob Halley RSAMD5. [RT #13780]
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson1944. [cleanup] isc_hash_create() does not need a read/write lock.
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington1943. [bug] Set the loadtime after rolling forward the journal.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff1942. [bug] If the name of a DNSKEY match that of one in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence trusted-keys do not attempt to validate the DNSKEY
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington using the parents DS RRset. [RT #15649]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1941. [bug] ncache_adderesult() should set eresult even if no
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson rdataset is passed to it. [RT #15642]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1940. [bug] Fixed a number of error conditions reported by
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1939. [bug] The resolver could dereference a null pointer after
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence validation if all the queries have timed out.
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews1938. [bug] The validator was not correctly handling unsecure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence negative responses at or below a SEP. [RT #15528]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff1936. [bug] The validator could leak memory. [RT #15544]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff1935. [bug] 'acache' was DO sensitive. [RT #15430]
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley1934. [func] Validate pending NS RRsets, in the authority section,
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley prior to returning them if it can be done without
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley requiring DNSKEYs to be fetched. [RT #15430]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1931. [bug] Per-client mctx could require a huge amount of memory,
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington particularly for a busy caching server. [RT #15519]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1930. [port] HPUX: ia64 support. [RT #15473]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews lock order rule and could cause a dead lock.
4716e94840921878b26e493576f84afe4fe08752Mark Andrews1926. [bug] The Windows installer did not check for empty
4716e94840921878b26e493576f84afe4fe08752Mark Andrews passwords. BINDinstall was being installed in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the wrong place. [RT #15483]
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence1925. [port] All outer level AC_TRY_RUNs need cross compiling
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence defaults. [RT #15469]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1924. [port] libbind: hpux ia64 support. [RT #15473]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley1923. [bug] ns_client_detach() called too early. [RT #15499]
3886e748a4086b813e3453232a742903762fedadBob Halley1922. [bug] check-tool.c:setup_logging() missing call to
3886e748a4086b813e3453232a742903762fedadBob Halley dns_log_setcontext().
3886e748a4086b813e3453232a742903762fedadBob Halley1921. [bug] Client memory contexts were not using internal
3886e748a4086b813e3453232a742903762fedadBob Halley malloc. [RT# 15434]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1920. [bug] The cache rbtdb lock array was too small to
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley have the desired performance characteristics.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1919. [contrib] queryperf: a set of new features: collecting/printing
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington response delays, printing intermediate results, and
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington adjusting query rate for the "target" qps.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1918. [bug] Memory leak when checking acls. [RT #15391]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson when generating man pages. [RT #15385]
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson1915. [bug] dig +ndots was broken. [RT #15215]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley1914. [protocol] DS is required to accept mnemonic algorithms
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley (RFC 4034). Still emit numeric algorithms for
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley compatibility with RFC 3658. [RT #15354]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson1913. [func] Integrate contributed DLZ code into named. [RT #11382]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1912. [port] aix: atomic locking for powerpc. [RT #15020]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson1911. [bug] Update windows socket code. [RT #14965]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington1910. [bug] dig's +sigchase code overhauled. [RT #14933]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson1909. [bug] The DLV code has been re-worked to make no longer
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson query order sensitive. [RT #14933]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff1908. [func] dig now warns if 'RA' is not set in the answer when
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff 'RD' was set in the query. host/nslookup skip servers
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence that fail to set 'RA' when 'RD' is set unless a server
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is explicitly set. [RT #15005]
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1906. [func] dig now has a '-q queryname' and '+showsearch' options.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1905. [bug] Strings returned from cfg_obj_asstring() should be
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence treated as read-only. The prototype for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence cfg_obj_asstring() has been updated to reflect this.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister friends. Note: RFC 1918 zones are not yet covered by
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister this but are likely to be in a future release.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister New options: empty-server, empty-contact,
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister empty-zones-enable and disable-empty-zone.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1903. [func] ISC string copy API.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1902. [func] Attempt to make the amount of work performed in a
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister iteration self tuning. The covers nodes clean from
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister the cache per iteration, nodes written to disk when
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence rewriting a master file and nodes destroyed per
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister iteration when destroying a zone or a cache.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1901. [cleanup] Don't add DNSKEY records to the additional section.
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence1900. [bug] ixfr-from-differences failed to ensure that the
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister serial number increased. [RT #15036]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1899. [func] named-checkconf now validates update-policy entries.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson ISC_NETADDR_FORMATSIZE to allow for scope details.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1897. [func] x86 and x86_64 now have separate atomic locking
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson implementations.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1896. [bug] Recursive clients soft quota support wasn't working
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington as expected. [RT #15103]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1895. [bug] A escaped character is, potentially, converted to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the output character set too early. [RT #14666]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1894. [doc] Review ARM for BIND 9.4.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1893. [port] Use uintptr_t if available. [RT #14606]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington1892. [func] Support for SPF rdata type. [RT #15033]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington1891. [port] freebsd: pthread_mutex_init can fail if it runs out
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley of memory. [RT #14995]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1890. [func] Raise the UDP receive buffer size to 32k if it is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence less than 32k. [RT #14953]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence1889. [port] sunos: non blocking i/o support. [RT #14951]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister1888. [func] Support for IPSECKEY rdata type. [RT #14967]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister1887. [bug] The cache could delete expired records too fast for
be768c2e952c34438025999125f984995a2c675fBob Halley clients with a virtual time in the past. [RT #14991]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1886. [bug] fctx_create() could return success even though it
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley failed. [RT #14993]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1885. [func] dig: report the number of extra bytes still left in
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley the packet after processing all the records.
be768c2e952c34438025999125f984995a2c675fBob Halley1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley levels. [RT #14962]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley1882. [func] Limit the number of recursive clients that can be
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley waiting for a single query (<qname,qtype,qclass>) to
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley resolve. New options clients-per-query and
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence max-clients-per-query.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1881. [func] Add a system test for named-checkconf. [RT #14931]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1880. [func] The lame cache is now done on a <qname,qclass,qtype>
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister basis as some servers only appear to be lame for
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister certain query types. [RT #14916]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister1878. [func] Detect duplicates of UDP queries we are recursing on
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence and drop them. New stats category "duplicate".
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister1877. [bug] Fix unreasonably low quantum on call to
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dns_rbt_destroy2(). Remove unnecessary unhash_node()
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister call. [RT #14919]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1876. [func] Additional memory debugging support to track size
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley and mctx arguments. [RT #14814]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1875. [bug] process_dhtkey() was using the wrong memory context
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley to free some memory. [RT #14890]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1874. [port] sunos: portability fixes. [RT #14814]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington1873. [port] win32: isc__errno2result() now reports its caller.
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1871. [placeholder]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1870. [func] Added framework for handling multiple EDNS versions.
a5a5371b756f3bbbe33dac1dde196fbd6c063640Bob Halley1869. [func] dig can now specify the EDNS version when making
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a query. [RT #14873]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1868. [func] edns-udp-size can now be overridden on a per
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence server basis. [RT #14851]
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which