CHANGES revision 2879ee2c72638ea190728f931ce286760caa4521
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte could allow incorrect text formatting of EDNS EXPIRE
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte options. [RT #41437]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4294. [bug] Fixed a regression in which "rndc stop -p" failed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to print the PID. [RT #41513]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4293. [bug] Address memory leak on priming query creation failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4292. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4290. [func] The timers returned by the statistics channel
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (indicating current time, server boot time, and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte most recent reconfiguration time) are now reported
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with millisecond accuracy. [RT #40082]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4289. [bug] The server could crash due to memory being used
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte after it was freed if a zone transfer timed out.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4288. [bug] Fixed a regression in resolver.c:possibly_mark()
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte which caused known-bogus servers to be queried
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte anyway. [RT #41321]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4287. [bug] Silence an overly noisy log message when message
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte parsing fails. [RT #41374]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4286. [security] render_ecs errors were mishandled when printing out
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a OPT record resulting in a assertion failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2015-8705) [RT #41397]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4285. [security] Specific APL data could trigger a INSIST.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2015-8704) [RT #41396]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4284. [bug] Some GeoIP options were incorrectly documented
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using abbreviated forms which were not accepted by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte named. The code has been updated to allow both
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte long and abbreviated forms. [RT #41381]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4282. [func] 'dig +[no]mapped' determine whether the use of mapped
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte IPv4 addresses over IPv6 is permitted or not. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default is +mapped. [RT #41307]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4280. [performance] Use optimal message sizes to improve compression
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in AXFRs. This reduces network traffic. [RT #40996]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4279. [test] Don't use fixed ports when unit testing. [RT #41194]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4277. [performance] Improve performance of the RBT, the central zone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte datastructure: The aux hashtable was improved,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hash function was updated to perform more
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte uniform mapping, uppernode was added to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rbtnode, and other cleanups and performance
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte improvements were made. [RT #41165]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4276. [protocol] Add support for SMIMEA. [RT #40513]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4275. [performance] Lazily initialize dns_compress->table only when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compression is enabled. [RT #41189]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4274. [performance] Speed up typemap processing from text. [RT #41196]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4273. [bug] Only call dns_test_begin() and dns_test_end() once each
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in nsec3_test as it fails with GOST if called multiple
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4272. [bug] dig: the +norrcomments option didn't work with +multi.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4270. [security] Update allowed OpenSSL versions as named is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte potentially vulnerable to CVE-2015-3193.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4269. [bug] Zones using "map" format master files currently
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte don't work as policy zones. This limitation has
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte now been documented; attempting to use such zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in "response-policy" statements is now a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configuration error. [RT #38321]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4268. [func] "rndc status" now reports the path to the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configuration file. [RT #36470]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4267. [test] Check sdlz error handling. [RT #41142]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4266. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4264. [bug] Check const of strchr/strrchr assignments match
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte argument's const status. [RT #41150]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4263. [contrib] Address compiler warnings in mysqldyn module.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4262. [bug] Fixed a bug in epoll socket code that caused
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte sockets to not be registered for ready
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte notification in some cases, causing named to not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte read from or write to them, resulting in what
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte appear to the user as blocked connections.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4260. [security] Insufficient testing when parsing a message allowed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records with an incorrect class to be be accepted,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte triggering a REQUIRE failure when those records
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte were subsequently cached. (CVE-2015-8000) [RT #40987]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4259. [func] Add an option for non-destructive control channel
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte access using a "read-only" clause. In such
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cases, a restricted set of rndc commands are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allowed for querying information from named.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4258. [bug] Limit rndc query message sizes to 32 KiB. This should
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte not break any legitimate rndc commands, but will
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana prevent a rogue rndc query from allocating too
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte much memory. [RT #41073]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4256. [bug] Allow rndc command arguments to be quoted so as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to allow spaces. [RT #36665]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4255. [performance] Add 'message-compression' option to disable DNS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compression in responses. [RT #40726]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4254. [bug] Address missing lock when getting zone's serial.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4253. [security] Address fetch context reference count handling error
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on socket error. (CVE-2015-8461) [RT#40945]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4252. [func] Add support for automating the generation CDS and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte CDNSKEY rrsets to named and dnssec-signzone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4251. [bug] NTAs were deleted when the server was reconfigured
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or reloaded. [RT #41058]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4250. [func] Log the TSIG key in use during inbound zone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte transfers. [RT #41075]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4249. [func] Improve error reporting of TSIG / SIG(0) records in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the wrong location. [RT #41030]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4248. [performance] Add an isc_atomic_storeq() function, use it in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte stats counters to improve performance.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [RT #39972] [RT #39979]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte defined to report json library version. [RT #41045]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4246. [test] Ensure the statschannel system test runs when BIND
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is not built with libjson. [RT #40944]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4245. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4244. [bug] The parser was not reporting that use-ixfr is obsolete.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4242. [bug] Replace the client if not already replaced when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte prefetching. [RT #41001]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the ARM. [RT #40955]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4240. [port] Fix LibreSSL compatibility. [RT #40977]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4239. [func] Changed default servfail-ttl value to 1 second from 10.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Also, the maximum value is now 30 instead of 300.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4237. [doc] Upgraded documentation toolchain to use DocBook 5
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and dblatex. [RT #40766]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4236. [performance] On machines with 2 or more processors (CPU), the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default value for the number of UDP listeners
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte has been changed to the number of detected
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte processors minus one. [RT #40761]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4235. [func] Added support in named for "dnstap", a fast method of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte capturing and logging DNS traffic, and a new command
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "dnstap-read" to read a dnstap log file. Use
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "configure --enable-dnstap" to enable this
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte feature (note that this requires libprotobuf-c
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and libfstrm). See the ARM for configuration details.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Thanks to Robert Edmonds of Farsight Security.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4234. [func] Add deflate compression in statistics channel HTTP
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server. [RT #40861]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4232. [contrib] Address unchecked memory allocation calls in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query-loc and zone2ldap. [RT #40789]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte uninitialized result. [RT #40839]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4229. [bug] A variable could be used uninitialized in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_update_signaturesinc. [RT #40784]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4228. [bug] Address race condition in dns_client_destroyrestrans.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4227. [bug] Silence static analysis warnings. [RT #40828]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4226. [bug] Address a theoretical shutdown race in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone.c:notify_send_queue(). [RT #38958]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte shared libraries. [RT #39557]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4224. [func] Added support for "dyndb", a new interface for loading
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone data from an external database, developed by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Red Hat for the FreeIPA project.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DynDB drivers fully implement the BIND database
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte API, and are capable of significantly better
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte performance and functionality than DLZ drivers,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte while taking advantage of advanced database
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte features not available in BIND such as multi-master
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte replication.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana Thanks to Adam Tkac and Petr Spacek of Red Hat.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4223. [func] Add support for setting max-cache-size to percentage
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of available physical memory, set default to 90%.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4222. [func] Bias IPv6 servers when selecting the next server to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query. [RT #40836]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4220. [doc] Improve documentation for zone-statistics.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte EGAIN when these soft error are not retried for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte isc_socket_send*().
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4218. [bug] Potential null pointer dereference on out of memory
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte if mmap is not supported. [RT #40777]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4217. [protocol] Add support for CSYNC. [RT #40532]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4216. [cleanup] Silence static analysis warnings. [RT #40649]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4215. [bug] nsupdate: skip to next request on GSSTKEY create
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failure. [RT #40685]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4214. [protocol] Add support for TALINK. [RT #40544]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4213. [bug] Don't reuse a cache across multiple classes.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4212. [func] Re-query if we get a bad client cookie returned over
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte UDP. [RT #40748]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4211. [bug] Ensure that lwresd gets at least one task to work
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with if enabled. [RT #40652]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4210. [cleanup] Silence use after free false positive. [RT #40743]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4209. [bug] Address resource leaks in dlz modules. [RT #40654]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4208. [bug] Address null pointer dereferences on out of memory.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4207. [bug] Handle class mismatches with raw zone files.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4206. [bug] contrib: fixed a possible NULL dereference in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DLZ wildcard module. [RT #40745]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4205. [bug] 'named-checkconf -p' could include unwanted spaces
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when printing tuples with unset optional fields.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4204. [bug] 'dig +trace' failed to lookup the correct type if
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the initial root NS query was retried. [RT #40296]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4203. [test] The rrchecker system test now tests conversion
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to and from unknown-type format. [RT #40584]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4202. [bug] isccc_cc_fromwire() could return an incorrect
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte result. [RT #40614]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4201. [func] The default preferred-glue is now the address record
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte type of the transport the query was received
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte over. [RT #40468]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4200. [cleanup] win32: update BINDinstall to be BIND release
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte independent. [RT #38915]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [RT #40545] [RT #40547] [RT #40561] [RT #40563]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4198. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4196. [doc] Improve how "enum + other" types are documented.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4194. [bug] named-checkconf -p failed to properly print a port
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte range. [RT #40634]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4193. [bug] Handle broken servers that return BADVERS incorrectly.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4192. [bug] The default rrset-order of random was not always being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte applied. [RT #40456]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte as per RFC 6763. [RT #37889]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte valid with check-names. <forest> still needs to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte LDH. [RT #40399]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4189. [cleanup] Don't exit on overly long tokens in named.conf.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4188. [bug] Support HTTP/1.0 client properly on the statistics
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte channel. [RT #40261]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4187. [func] When any RR type implementation doesn't
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implement totext() for the RDATA's wire
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte representation and returns ISC_R_NOTIMPLEMENTED,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte such RDATA is now printed in unknown
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana presentation format (RFC 3597). RR types affected
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte include LOC(29) and APL(42). [RT #40317].
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4186. [bug] Fixed an RPZ bug where a QNAME would be matched
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte against a policy RR with wildcard owner name
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (trigger) where the QNAME was the wildcard owner
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte name's parent. For example, the bug caused a query
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with QNAME "example.com" to match a policy RR with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "*.example.com" as trigger. [RT #40357]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte owner name (trigger) would prevent another policy RR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with its parent owner name from being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte loaded. For example, the bug caused a policy RR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with trigger "example.com" to not have any
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte effect when a previous policy RR with trigger
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "*.example.com" existed in that RPZ zone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4184. [bug] Fixed a possible memory leak in name compression
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when rendering long messages. (Also, improved
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte wire_test for testing such messages.) [RT #40375]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4183. [cleanup] Use timing-safe memory comparisons in cryptographic
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte code. Also, the timing-safe comparison functions have
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte been renamed to avoid possible confusion with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte memcmp(). Thanks to Loganaden Velvindron of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte AFRINIC. [RT #40148]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4182. [cleanup] Use mnemonics for RR class and type comparisons.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4181. [bug] Queued notify messages could be dequeued from the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte wrong rate limiter queue. [RT #40350]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4180. [bug] Error responses in pipelined queries could
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cause a crash in client.c. [RT #40289]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4179. [bug] Fix double frees in getaddrinfo() in libirs.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte text. [RT #40274]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4177. [bug] Fix assertion failure in parsing NSAP records from
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana text. [RT #40285]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4176. [bug] Address race issues with lwresd. [RT #40284]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4175. [bug] TKEY with GSS-API keys needed bigger buffers.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4174. [bug] "dnssec-coverage -r" didn't handle time unit
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte suffixes correctly. [RT #38444]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4173. [bug] dig +sigchase was not properly matching the trusted
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte key. [RT #40188]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4171. [bug] Fixed incorrect class checks in TSIG RR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implementation. [RT #40287]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4170. [security] An incorrect boundary check in the OPENPGPKEY
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rdatatype could trigger an assertion failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2015-5986) [RT #40286]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4169. [test] Added a 'wire_test -d' option to read input as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte raw binary data, for use as a fuzzing harness.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4168. [security] A buffer accounting error could trigger an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte assertion failure when parsing certain malformed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DNSSEC keys. (CVE-2015-5722) [RT #40212]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4167. [func] Update rndc's usage output to include recently added
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte commands. Thanks to Tony Finch for submitting a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte patch. [RT #40010]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4166. [func] Print informative output from rndc showzone when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allow-new-zones is not enabled for a view. Thanks to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Tony Finch for submitting a patch. [RT #40009]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4165. [security] A failure to reset a value to NULL in tkey.c could
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte result in an assertion failure. (CVE-2015-5477)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4164. [bug] Don't rename slave files and journals on out of memory.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4163. [bug] Address compiler warnings. [RT #40024]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4161. [test] Add JSON test for traffic size stats; also test
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for consistency between "rndc stats" and the XML
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and JSON statistics channel contents. [RT #38700]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4160. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4159. [cleanup] Alphabetize dig's help output. [RT #39966]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4158. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4157. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4156. [func] Added statistics counters to track the sizes
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of incoming queries and outgoing responses in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte histogram buckets, as specified in RSSAC002.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4155. [func] Allow RPZ rewrite logging to be configured on a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte per-zone basis using a newly introduced log clause in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the response-policy option. [RT #39754]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4154. [bug] A OPT record should be included with the FORMERR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte response when there is a malformed EDNS option.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4153. [bug] Dig should zero non significant +subnet bits. Check
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that non significant ECS bits are zero on receipt.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4152. [func] Implement DNS COOKIE option. This replaces the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte experimental SIT option of BIND 9.10. The following
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte named.conf directives are available: send-cookie,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cookie-secret, cookie-algorithm, nocookie-udp-size
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and require-server-cookie. The following dig options
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are available: +[no]cookie[=value] and +[no]badcookie.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte minimal fix. [RT #39667]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4149. [bug] Fixed a race condition in the getaddrinfo()
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implementation in libirs, which caused the delv
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte utility to crash with an assertion failure when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the '@server' syntax with a hostname argument.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4148. [bug] Fix a bug when printing zone names with '/' character
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in XML and JSON statistics output. [RT #39873]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte was returning referrals rather than nodata responses
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when the AAAA records were filtered. [RT #39843]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4146. [bug] Address reference leak that could prevent a clean
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte shutdown. [RT #37125]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4145. [bug] Not all unassociated adb entries where being printed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4144. [func] Add statistics counters for nxdomain redirections.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4143. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4142. [bug] rndc addzone with view specified saved NZF config
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that could not be read back by named. This has now
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte been fixed. [RT #39845]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4141. [bug] A formatting bug caused rndc zonestatus to print
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte negative numbers for large serial values. This has
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte now been fixed. [RT #39854]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4140. [cleanup] Remove redundant nzf_remove() call during delzone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4138. [security] An uninitialized value in validator.c could result
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in an assertion failure. (CVE-2015-4620) [RT #39795]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4137. [bug] Make rndc reconfig report configuration errors the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte same way rndc reload does. [RT #39635]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4136. [bug] Stale statistics counters with the leading
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte '#' prefix (such as #NXDOMAIN) were not being
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana updated correctly. This has been fixed. [RT #39141]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4135. [cleanup] Log expired NTA at startup. [RT #39680]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4134. [cleanup] Include client-ip rules when logging the number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of RPZ rules of each type. [RT #39670]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4133. [port] Update how various json libraries are handled.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4132. [cleanup] dig: added +rd as a synonym for +recurse,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte added +class as an unabbreviated alternative
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to +cl. [RT #39686]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4131. [bug] Addressed further problems with reloading RPZ
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones. [RT #39649]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4130. [bug] The compatibility shim for *printf() misprinted some
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte large numbers. [RT #39586]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte key as per RFC 7344, Section 4.1. [RT #37215]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4126. [bug] Addressed a regression introduced in change #4121.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4125. [test] Added tests for dig, renamed delv test to digdelv.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4124. [func] Log errors or warnings encountered when parsing the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte internal default configuration. Clarify the logging
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of errors and warnings encountered in rndc
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte addzone or modzone parameters. [RT #39440]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4123. [port] Added %z (size_t) format options to the portable
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte internal printf/sprintf implementation. [RT #39586]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4122. [bug] The server could match a shorter prefix than what was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte available in CLIENT-IP policy triggers, and so, an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte unexpected action could be taken. This has been
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte corrected. [RT #39481]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4121. [bug] On servers with one or more policy zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configured as slaves, if a policy zone updated
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte during regular operation (rather than at
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte startup) using a full zone reload, such as via
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte AXFR, a bug could allow the RPZ summary data to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte fall out of sync, potentially leading to an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte assertion failure in rpz.c when further
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte incremental updates were made to the zone, such
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte as via IXFR. [RT #39567]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4120. [bug] A bug in RPZ could cause the server to crash if
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte policy zones were updated while recursion was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte pending for RPZ processing of an active query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4119. [test] Allow dig to set the message opcode. [RT #39550]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4118. [bug] Teach isc-config.sh about irs. [RT #39213]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4116. [bug] Fix a bug in RPZ that could cause some policy
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones that did not specifically require
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte recursion to be treated as if they did;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte consequently, setting qname-wait-recurse no; was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte sometimes ineffective. [RT #39229]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4115. [func] "rndc -r" now prints the result code (e.g.,
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte running the requested command. [RT #38913]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4114. [bug] Fix a regression in radix tree implementation
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte introduced by ECS code. This bug was never
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte released, but it was reported by a user testing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte master. [RT #38983]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4113. [test] Check for Net::DNS is some system test
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte prerequisites. [RT #39369]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4112. [bug] Named failed to load when "root-delegation-only"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte was used without a list of domains to exclude.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4111. [doc] Alphabetize rndc man page. [RT #39360]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4110. [bug] Address memory leaks / null pointer dereferences
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on out of memory. [RT #39310]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4109. [port] linux: support reading the local port range from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4108. [func] An additional NXDOMAIN redirect method (option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "nxdomain-redirect") has been added, allowing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte redirection to a specified DNS namespace instead
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of a single redirect zone. [RT #37989]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4107. [bug] Address potential deadlock when updating zone content.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4106. [port] Improve readline support. [RT #38938]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4105. [port] Misc fixes for Microsoft Visual Studio
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 2015 CTP6 in 64 bit mode. [RT #39308]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4104. [bug] Address uninitialized elements. [RT #39252]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4103. [port] Misc fixes for Microsoft Visual Studio
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 2015 CTP6. [RT #39267]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4102. [bug] Fix a use after free bug introduced in change
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte #4094. [RT #39281]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4101. [bug] dig: the +split and +rrcomments options didn't
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte work with +short. [RT #39291]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4100. [bug] Inherited owernames on the line immediately following
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a $INCLUDE were not working. [RT #39268]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4099. [port] clang: make unknown commandline options hard errors
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when determining what options are supported.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4098. [bug] Address use-after-free issue when using a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte predecessor key with dnssec-settime. [RT #39272]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4097. [func] Add additional logging about xfrin transfer status.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4096. [bug] Fix a use after free of query->sendevent.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4095. [bug] zone->options2 was not being properly initialized.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4094. [bug] A race during shutdown or reconfiguration could
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cause an assertion in mem.c. [RT #38979]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4093. [func] Dig now learns the SIT value from truncated
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte responses when it retries over TCP. [RT #39047]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4090. [bug] Fix a crash while parsing malformed CAA RRs in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte presentation format, i.e., from text such as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte from master files. Thanks to John Van de
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana Meulebrouck Brendgard for discovering and
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana reporting this problem. [RT #39003]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4089. [bug] Send notifies immediately for slave zones during
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte startup. [RT #38843]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4088. [port] Fixed errors when building with libressl. [RT #38899]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4087. [bug] Fix a crash due to use-after-free due to sequencing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of tasks actions. [RT #38495]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4084. [bug] Fix a possible race in updating stats counters.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4083. [cleanup] Print the number of CPUs and UDP listeners
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte consistently in the log and in "rndc status"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte output; indicate whether threads are supported
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in "named -V" output. [RT #38811]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4082. [bug] Incrementally sign large inline zone deltas.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4080. [func] Completed change #4022, adding a "lock-file" option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to named.conf to override the default lock file,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in addition to the "named -X <filename>" command
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte line option. Setting the lock file to "none"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using either method disables the check completely.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4079. [func] Preserve the case of the owner name of records to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the RRset level. [RT #37442]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte CMSG_SPACE(sizeof(char)). [RT #38621]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4077. [test] Add static-stub regression test for DS NXDOMAIN
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte return making the static stub disappear. [RT #38564]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4076. [bug] Named could crash on shutdown with outstanding
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reload / reconfig events. [RT #38622]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4075. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4073. [cleanup] Add libjson-c version number reporting to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "named -V"; normalize version number formatting.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4072. [func] Add a --enable-querytrace configure switch for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte very verbose query trace logging. (This option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte has a negative performance impact and should be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte used only for debugging.) [RT #37520]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4071. [cleanup] Initialize pthread mutex attrs just once, instead of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte doing it per mutex creation. [RT #38547]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4070. [bug] Fix a segfault in nslookup in a query such as
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana "nslookup isc.org AMS.SNS-PB.ISC.ORG -all".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4069. [doc] Reorganize options in the nsupdate man page.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4068. [bug] Omit unknown serial number from JSON zone statistics.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4067. [cleanup] Reduce noise from RRL when query logging is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte disabled. [RT #38648]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4066. [doc] Reorganize options in the dig man page. [RT #38516]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4065. [test] Additional RFC 5011 tests. [RT #38569]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4064. [contrib] dnssec-keyset.sh: Generates a specified number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of DNSSEC keys with timing set to implement a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte pre-publication key rollover strategy. Thanks
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to Jeffry A. Spain. [RT #38459]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4063. [bug] Asynchronous zone loads were not handled
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana correctly when the zone load was already in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte progress; this could trigger a crash in zt.c.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4062. [bug] Fix an out-of-bounds read in RPZ code. If the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte read succeeded, it doesn't result in a bug
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte during operation. If the read failed, named
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte could segfault. [RT #38559]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4061. [bug] Handle timeout in legacy system test. [RT #38573]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4060. [bug] dns_rdata_freestruct could be called on a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte uninitialized structure when handling a error.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4059. [bug] Addressed valgrind warnings. [RT #38549]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4058. [bug] UDP dispatches could use the wrong pseudorandom
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte number generator context. [RT #38578]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4056. [bug] Expanded automatic testing of trust anchor
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte management and fixed several small bugs including
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a memory leak and a possible loss of key state
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte information. [RT #38458]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4055. [func] "rndc managed-keys" can be used to check status
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of trust anchors or to force keys to be refreshed,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Also, the managed keys data file has easier-to-read
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte comments. [RT #38458]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4054. [func] Added a new tool 'mdig', a light weight clone of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dig able to send multiple pipelined queries.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4053. [security] Revoking a managed trust anchor and supplying
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an untrusted replacement could cause named
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to crash with an assertion failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2015-1349) [RT #38344]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4052. [bug] Fix a leak of query fetchlock. [RT #38454]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4050. [bug] RPZ could send spurious SERVFAILs in response
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to duplicate queries. [RT #38510]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4048. [bug] adb hash table was not being grown. [RT #38470]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4047. [cleanup] "named -V" now reports the current running versions
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of OpenSSL and the libxml2 libraries, in addition to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the versions that were in use at build time.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4046. [bug] Accounting of "total use" in memory context
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte statistics was not correct. [RT #38370]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4045. [bug] Skip to next master on dns_request_createvia4 failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4044. [bug] Change 3955 was not complete, resulting in an assertion
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failure if the timing was just right. [RT #38352]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4043. [func] "rndc modzone" can be used to modify the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configuration of an existing zone, using similar
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte syntax to "rndc addzone". [RT #37895]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4042. [bug] zone.c:iszonesecure was being called too late.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4041. [func] TCP sockets can now be shared while connecting.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (This will be used to enable client-side support
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of pipelined queries.) [RT #38231]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4040. [func] Added server-side support for pipelined TCP
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries. Clients may continue sending queries via
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte TCP while previous queries are being processed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in parallel. (The new "keep-response-order"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte option allows clients to be specified for which
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the old behavior will still be used.) [RT #37821]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4038. [bug] Add 'rpz' flag to node and use it to determine whether
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana to call dns_rpz_delete. This should prevent unbalanced
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte add / delete calls. [RT #36888]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4037. [bug] also-notify was ignoring the tsig key when checking
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for duplicates resulting in some expected notify
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte messages not being sent. [RT #38369]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4036. [bug] Make call to open a temporary file name safe during
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte NZF creation. [RT #38331]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4035. [bug] Close temporary and NZF FILE pointers before moving
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the former into the latter's place, as required on
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Windows. [RT #38332]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4034. [func] When added, negative trust anchors (NTA) are now
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte saved to files (viewname.nta), in order to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte persist across restarts of the named server.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4033. [bug] Missing out of memory check in request.c:req_send.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4032. [bug] Built-in "empty" zones did not correctly inherit the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "allow-transfer" ACL from the options or view.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4031. [bug] named-checkconf -z failed to report a missing file
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with a hint zone. [RT #38294]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4030. [func] "rndc delzone" is now applicable to zones that were
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configured in named.conf, as well as zones that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte were added via "rndc addzone". (Note, however, that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte if named.conf is not also modified, the deleted zone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte will return when named is reloaded.) [RT #37887]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4029. [func] "rndc showzone" displays the current configuration
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of a specified zone. [RT #37887]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4028. [bug] $GENERATE with a zero step was not being caught as a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte error. A $GENERATE with a / but no step was not being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte caught as a error. [RT #38262]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4025. [port] bsdi: failed to build. [RT #38047]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rdata_opt_current, dns_rdata_txt_first,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rdata_txt_next and dns_rdata_txt_current were
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte documented but not implemented. These have now been
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implemented.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rdata_spf_first, dns_rdata_spf_next and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rdata_spf_current were documented but not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implemented. The prototypes for these
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte functions have been removed. [RT #38068]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4023. [bug] win32: socket handling with explicit ports and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte invoking named with -4 was broken for some
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configurations. [RT #38068]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4022. [func] Stop multiple spawns of named by limiting number of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte processes to 1. This is done by using a lockfile and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte checking whether we can listen on any configured
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte TCP interfaces. [RT #37908]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4021. [bug] Adjust max-recursion-queries to accommodate
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the need for more queries when the cache is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte empty. [RT #38104]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resulting in updates being sent to the wrong server.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4019. [func] If named is not configured to validate the answer
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte then allow fallback to plain DNS on timeout even
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when we know the server supports EDNS. [RT #37978]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4018. [placeholder]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana4017. [test] Add system test to check lookups to legacy servers
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with broken DNS behavior. [RT #37965]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4016. [bug] Fix a dig segfault due to bad linked list usage.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4015. [bug] Nameservers that are skipped due to them being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte CNAMEs were not being logged. They are now logged
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to category 'cname' as per BIND 8. [RT #37935]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4014. [bug] When including a master file origin_changed was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte not being properly set leading to a potentially
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte spurious 'inherited owner' warning. [RT #37919]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4013. [func] Add a new tcp-only option to server (config) /
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte peer (struct) to use TCP transport to send
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries (in place of UDP transport with a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte TCP fallback on truncated (TC set) response).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4012. [cleanup] Check returned status of OpenSSL digest and HMAC
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte functions when they return one. Note this applies
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte only to FIPS capable OpenSSL libraries put in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte FIPS mode and MD5. [RT #37944]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4011. [bug] master's list port and dscp inheritance was not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte properly implemented. [RT #37792]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4010. [cleanup] Clear the prefetchable state when initiating a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte prefetch. [RT #37399]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4009. [func] delv: added a +tcp option. [RT #37855]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4007. [doc] Remove acl forward reference restriction. [RT #37772]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4006. [security] A flaw in delegation handling could be exploited
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to put named into an infinite loop. This has
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte been addressed by placing limits on the number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of levels of recursion named will allow (default 7),
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and the number of iterative queries that it will
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte send (default 50) before terminating a recursive
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query (CVE-2014-8500).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The recursion depth limit is configured via the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "max-recursion-depth" option, and the query limit
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte via the "max-recursion-queries" option. [RT #37580]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4005. [func] The buffer used for returning text from rndc
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte commands is now dynamically resizable, allowing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte arbitrarily large amounts of text to be sent back
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to the client. (Prior to this change, it was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte possible for the output of "rndc tsig-list" to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte truncated.) [RT #37731]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4004. [bug] When delegations had AAAA glue but not A, a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reference could be leaked causing an assertion
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failure on shutdown. [RT #37796]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4003. [security] When geoip-directory was reconfigured during
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte named run-time, the previously loaded GeoIP
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte data could remain, potentially causing wrong
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ACLs to be used or wrong results to be served
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte based on geolocation (CVE-2014-8680). [RT #37720]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4002. [security] Lookups in GeoIP databases that were not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte loaded could cause an assertion failure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2014-8680). [RT #37679]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4001. [security] The caching of GeoIP lookups did not always
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte handle address families correctly, potentially
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resulting in an assertion failure (CVE-2014-8680).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte from the redirect zone. [RT #37722]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3999. [func] "mkeys" and "nzf" files are now named after
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte their corresponding views, unless the view name
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte contains characters that would be incompatible
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with use in a filename (i.e., slash, backslash,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or capital letters). If a view name does contain
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte these characters, the files will still be named
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using a cryptographic hash of the view name.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Regardless of this, if a file using the old name
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte format is found to exist, it will continue to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte used. [RT #37704]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3998. [bug] isc_radix_search was returning matches that were
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte too precise. [RT #37680]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3996. [bug] Address use after free on out of memory error in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte keyring_add. [RT #37639]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3995. [bug] receive_secure_serial holds the zone lock for too
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte long. [RT #37626]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3994. [func] Dig now supports setting the last unassigned DNS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte header flag bit (dig +zflag). [RT #37421]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3993. [func] Dig now supports EDNS negotiation by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (dig +[no]ednsnegotiation).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Note: This is disabled by default in BIND 9.10
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and enabled by default in BIND 9.11. [RT #37604]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3992. [func] DiG can now send queries without questions
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (dig +header-only). [RT #37599]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3991. [func] Add the ability to buffer logging output by specifying
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "buffered yes;" when defining a channel. [RT #26561]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3990. [testing] Add tests for unknown DNSSEC algorithm handling.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3988. [func] Allow the zone serial of a dynamically updatable
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone to be updated via "rndc signing -serial".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3987. [func] Handle future Visual Studio 14 incompatible changes.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3986. [doc] Add the BIND version number to page footers
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in the ARM. [RT #37398]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3985. [doc] Describe how +ndots and +search interact in dig.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3984. [func] Accept 256 byte long PINs in native PKCS#11
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte crypto. [RT #37410]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3983. [bug] Change #3940 was incomplete: negative trust anchors
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte could be set to last up to a week, but the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "nta-lifetime" and "nta-recheck" options were
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte still limited to one day. [RT #37522]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3982. [doc] Include release notes in product documentation.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3981. [bug] Cache DS/NXDOMAIN independently of other query types.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte size. [RT #37187]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3979. [bug] Negative trust anchor fetches were not properly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte managed. [RT #37488]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3978. [test] Added a unit test for Diffie-Hellman key
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte computation, completing change #3974. [RT #37477]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3977. [cleanup] "rndc secroots" reported a "not found" error when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte there were no negative trust anchors set. [RT #37506]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3976. [bug] When refreshing managed-key trust anchors, clear
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte any cached trust so that they will always be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte revalidated with the current set of secure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte roots. [RT #37506]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3975. [bug] Don't populate or use the bad cache for queries that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte don't request or use recursion. [RT #37466]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3974. [bug] Handle DH_compute_key() failure correctly in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3973. [test] Added hooks for Google Performance Tools CPU profiler,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte including real-time/wall-clock profiling. Use
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "configure --with-gperftools-profiler" to enable.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3972. [bug] Fix host's usage statement. [RT #37397]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3971. [bug] Reduce the cascading failures due to a bad $TTL line
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in named-checkconf / named-checkzone. [RT #37138]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3969. [test] Added 'delv' system test. [RT #36901]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3968. [bug] Silence spurious log messages when using 'named -[46]'.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3967. [test] Add test for inlined signed zone in multiple views
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with different DNSKEY sets. [RT #35759]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3965. [func] Log outgoing packets and improve packet logging to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte support logging the remote address. [RT #36624]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3964. [func] nsupdate now performs check-names processing.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3963. [test] Added NXRRSET test cases to the "dlzexternal"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte system test. [RT #37344]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana conditions. [RT #34663]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte BADSIG. [RT #37216]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3959. [bug] Updates could be lost if they arrived immediately
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte after a rndc thaw. [RT #37233]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3958. [bug] Detect when writeable files have multiple references
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in named.conf. [RT #37172]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and ECDSAP384SHA384. [RT #37183]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3956. [func] Notify messages are now rate limited by notify-rate and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte startup-notify-rate instead of serial-query-rate.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3955. [bug] Notify messages due to changes are no longer queued
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte behind startup notify messages. [RT #24454]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte two name pointers were the same. [RT #37176]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3951. [func] Add the ability to set yet-to-be-defined EDNS flags
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to dig (+ednsflags=#). [RT #37142]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3950. [port] Changed the bin/python Makefile to work around a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3949. [experimental] Experimental support for draft-andrews-edns1 by sending
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte building). Add support for limiting the EDNS version
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte advertised to servers: server { edns-version 0; };
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Log the EDNS version received in the query log.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --with-tuning=large. [RT #37059]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3947. [cleanup] Set the executable bit on libraries when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte libtool. [RT #36786]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3946. [cleanup] Improved "configure" search for a python interpreter.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3945. [bug] Invalid wildcard expansions could be incorrectly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte accepted by the validator. [RT #37093]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3944. [test] Added a regression test for "server-id". [RT #37057]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3943. [func] SERVFAIL responses can now be cached for a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte limited time (configured by "servfail-ttl",
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default 10 seconds, limit 30). This can reduce
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the frequency of retries when an authoritative
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server is known to be failing, e.g., due to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ongoing DNSSEC validation problems. [RT #21347]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3942. [bug] Wildcard responses from a optout range should be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte marked as insecure. [RT #37072]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3941. [doc] Include the BIND version number in the ARM. [RT #37067]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3940. [func] "rndc nta" now allows negative trust anchors to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte set for up to one week. [RT #37069]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3939. [func] Improve UPDATE forwarding performance by allowing TCP
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte connections to be shared. [RT #37039]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3938. [func] Added quotas to be used in recursive resolvers
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that are under high query load for names in zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte whose authoritative servers are nonresponsive or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are experiencing a denial of service attack.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - "fetches-per-server" limits the number of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte simultaneous queries that can be sent to any
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte single authoritative server. The configured
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte value is a starting point; it is automatically
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte adjusted downward if the server is partially or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte completely non-responsive. The algorithm used to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte adjust the quota can be configured via the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "fetch-quota-params" option.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - "fetches-per-zone" limits the number of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte simultaneous queries that can be sent for names
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte within a single domain. (Note: Unlike
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "fetches-per-server", this value is not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte self-tuning.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - New stats counters have been added to count
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries spilled due to these quotas.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte See the ARM for details of these options. [RT #37125]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3937. [func] Added some debug logging to better indicate the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte conditions causing SERVFAILs when resolving.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3936. [func] Added authoritative support for the EDNS Client
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Subnet (ECS) option.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ACLs can now include "ecs" elements which specify
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an address or network prefix; if an ECS option is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte included in a DNS query, then the address encoded
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in the option will be matched against "ecs" ACL
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Also, if an ECS address is included in a query,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte then it will be used instead of the client source
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address when matching "geoip" ACL elements. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte behavior can be overridden with "geoip-use-ecs no;".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Note: to enable "geoip" ACLs, use "configure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --with-geoip". This requires libGeoIP version
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 1.5.0 or higher.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte When "ecs" or "geoip" ACL elements are used to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte select a view for a query, the response will include
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an ECS option to indicate which client network the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte answer is valid for.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Thanks to Vincent Bernat.) [RT #36781]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3935. [bug] "geoip asnum" ACL elements would not match unless
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the full organization name was specified. They
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can now match against the AS number alone (e.g.,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte AS1234). [RT #36945]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte sit-secret documentation. [RT #36980]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3933. [bug] Corrected the implementation of dns_rdata_casecompare()
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for the HIP rdata type. [RT #36911]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3932. [test] Improved named-checkconf tests. [RT #36911]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3930. [bug] "rndc nta -r" could cause a server hang if the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte NTA was not found. [RT #36909]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3928. [test] Improve rndc system test. [RT #36898]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3927. [bug] dig: report PKCS#11 error codes correctly when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compiled with --enable-native-pkcs11. [RT #36956]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3926. [doc] Added doc for geoip-directory. [RT #36877]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3923. [bug] Sanity check the xml2-config output. [RT #22246]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3922. [bug] When resigning, dnssec-signzone was removing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte all signatures from delegation nodes. It now
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte retains DS and (if applicable) NSEC signatures.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3920. [doc] Added doc for masterfile-style. [RT #36823]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3919. [bug] dig: continue to next line if a address lookup fails
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in batch mode. [RT #36755]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3918. [doc] Update check-spf documentation. [RT #36910]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3917. [bug] dig, nslookup and host now continue on names that are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte too long after applying a search list elements.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3916. [contrib] zone2sqlite checked wrong result code. Address
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compiler warnings. [RT #36931]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3915. [bug] Address a assertion if a route event arrived while
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte shutting down. [RT #36887]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3914. [bug] Allow the URI target and CAA value fields to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte be zero length. [RT #36737]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3913. [bug] Address race issue in dispatch. [RT #36731]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3911. [func] Implement EDNS EXPIRE option client side, allowing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a slave server to set the expiration timer correctly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when transferring zone data from another slave
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server. [RT #35925]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3910. [bug] Fix races to free event during shutdown. [RT #36720]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3909. [bug] When computing the number of elements required for a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte acl count_acl_elements could have a short count leading
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to a assertion failure. Also zero out new acl elements
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in dns_acl_merge. [RT #36675]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3908. [bug] rndc now differentiates between a zone in multiple
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte views and a zone that doesn't exist at all. [RT #36691]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3907. [cleanup] Alphabetize rndc help. [RT #36683]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3906. [protocol] Update URI record format to comply with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte draft-faltstrom-uri-08. [RT #36642]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3904. [func] Add the RPZ SOA to the additional section. [RT36507]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3903. [bug] Improve the accuracy of DiG's reported round trip
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte time. [RT 36611]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3902. [bug] liblwres wasn't handling link-local addresses in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte nameserver clauses in resolv.conf. [RT #36039]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3901. [protocol] Added support for CAA record type (RFC 6844).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3899. [bug] "request-ixfr" is only applicable to slave and redirect
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones. [RT #36608]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3898. [bug] Too small a buffer in tohexstr() calls in test code.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3897. [bug] RPZ summary information was not properly being updated
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte after a AXFR resulting in changes sometimes being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ignored. [RT #35885]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3896. [bug] Address performance issues with DSCP code on some
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte platforms. [RT #36534]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3895. [func] Add the ability to set the DSCP code point to dig.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3894. [bug] Buffers in isc_print_vsnprintf were not properly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte initialized leading to potential overflows when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte printing out quad values. [RT #36505]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3893. [bug] Peer DSCP values could be returned without being set.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3892. [bug] Setting '-t aaaa' in .digrc had unintended side
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte effects. [RT #36452]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to install python programs.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3890. [bug] RRSIG sets that were not loaded in a single transaction
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte at start up where not being correctly added to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte re-signing heaps. [RT #36302]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3889. [port] hurd: configure fixes as per:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3888. [func] 'rndc status' now reports the number of automatic
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones. [RT #36015]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte they are easier to use in a debugger. [RT #36373]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3886. [bug] rbtdb_write_header should use a once to initialize
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte FILE_VERSION. [RT #36374]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3885. [port] Use 'open()' rather than 'file()' to open files in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3883. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3882. [func] By default, negative trust anchors will be tested
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte periodically to see whether data below them can be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte validated, and if so, they will be allowed to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte expire early. The "rndc nta -force" option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte overrides this behavior. The default NTA lifetime
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and the recheck frequency can be configured by the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "nta-lifetime" and "nta-recheck" options. [RT #36146]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3881. [bug] Address memory leak with UPDATE error handling.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3880. [test] Update ans.pl to work with new TSIG support in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Net::DNS; add additional Net::DNS version prerequisite
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte checks. [RT #36327]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3879. [func] Add version printing option to various BIND utilities.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3878. [bug] Using the incorrect filename for a DLZ module
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte caused a segmentation fault on startup. [RT #36286]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3877. [bug] Inserting and deleting parent and child nodes
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in response policy zones could trigger an assertion
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failure. [RT #36272]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3876. [bug] Improve efficiency of DLZ redirect zones by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte suppressing unnecessary database lookups. [RT #35835]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3875. [cleanup] Clarify log message when unable to read private
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte key files. [RT #24702]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3874. [test] Check that only "check-names master" is needed for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte updates to be accepted.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3872. [bug] Address issues found by static analysis. [RT #36209]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3871. [bug] Don't publish an activated key automatically before
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte its publish time. [RT #35063]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3870. [func] Updated the random number generator used in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the resolver to use the updated ChaCha based one
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (similar to OpenBSD's changes). Also moved the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte RNG to libisc and added unit tests for it.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3869. [doc] Document that in-view zones cannot be used for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte response policy zones. [RT #35941]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3868. [bug] isc_mem_setwater incorrectly cleared hi_called
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte potentially leaving over memory cleaner running.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3867. [func] "rndc nta" can now be used to set a temporary
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte negative trust anchor, which disables DNSSEC
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte validation below a specified name for a specified
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte period of time (not exceeding 24 hours). This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can be used when validation for a domain is known
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to be failing due to a configuration error on
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the part of the domain owner rather than a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte spoofing attack. [RT #29358]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3866. [bug] Named could die on disk full in generate_session_key.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3865. [test] Improved testability of the red-black tree
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte implementation and added unit tests. [RT #35904]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3864. [bug] RPZ didn't work well when being used as forwarder.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3863. [bug] The "E" flag was missing from the query log as a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte unintended side effect of code rearrangement to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte support EDNS EXPIRE. [RT #36117]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3862. [cleanup] Return immediately if we are not going to log the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte message in ns_client_dumpmessage.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3861. [security] Missing isc_buffer_availablelength check results
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in a REQUIRE assertion when printing out a packet
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2014-3859). [RT #36078]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3860. [bug] ioctl(DP_POLL) array size needs to be determined
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte at run time as it is limited to {OPEN_MAX}.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3859. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3858. [bug] Disable GCC 4.9 "delete null pointer check".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3857. [bug] Make it harder for a incorrect NOEDNS classification
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to be made. [RT #36020]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3856. [bug] Configuring libjson without also configuring libxml
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resulted in a REQUIRE assertion when retrieving
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte statistics using json. [RT #36009]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3855. [bug] Limit smoothed round trip time aging to no more than
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte once a second. [RT #32909]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3854. [cleanup] Report unrecognized options, if any, in the final
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configure summary. [RT #36014]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the handling of a rdataset with no records. [RT #35968]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3852. [func] Increase the default number of clients available
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for servicing lightweight resolver queries, and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte make them configurable via the "lwres-tasks" and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "lwres-clients" options. (Thanks to Tomas Hozza.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3851. [func] Allow libseccomp based system-call filtering
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on Linux; use "configure --enable-seccomp" to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte turn it on. Thanks to Loganaden Velvindron
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of AFRINIC for the contribution. [RT #35347]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3849. [doc] Alphabetized dig's +options. [RT #35992]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3848. [bug] Adjust 'statistics-channels specified but not effective'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte error message to account for JSON support. [RT #36008]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3847. [bug] 'configure --with-dlz-postgres' failed to fail when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte there is not support available.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ixfr query. [RT #35980]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3845. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3844. [bug] Use the x64 version of the Microsoft Visual C++
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Redistributable when built for 64 bit Windows.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3842. [bug] Adjust RRL log-only logging category. [RT #35945]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3840. [port] Check for arc4random_addrandom() before using it;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte it's been removed from OpenBSD 5.5. [RT #35907]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3839. [test] Use only posix-compatible shell in system tests.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3837. [security] A NULL pointer is passed to query_prefetch resulting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a REQUIRE assertion failure when a fetch is actually
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte initiated (CVE-2014-3214). [RT #35899]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3836. [bug] Address C++ keyword usage in header file.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3835. [bug] Geoip ACL elements didn't work correctly when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte referenced via named or nested ACLs. [RT #35879]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3834. [bug] The re-signing heaps were not being updated soon enough
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte leading to multiple re-generations of the same RRSIG
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when a zone transfer was in progress. [RT #35273]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3833. [bug] Cross compiling was broken due to calling genrandom at
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte build time. [RT #35869]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3832. [func] "named -L <filename>" causes named to send log
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte messages to the specified file by default instead
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of to the system log. (Thanks to Tony Finch.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3831. [cleanup] Reduce logging noise when EDNS state changes occur.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3830. [func] When query logging is enabled, log query errors at
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the same level ('info') as the queries themselves.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3829. [func] "dig +ttlunits" causes dig to print TTL values
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with time-unit suffixes: w, d, h, m, s for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte weeks, days, hours, minutes, and seconds. (Thanks
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to Tony Finch.) [RT #35823]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3828. [func] "dnssec-signzone -N date" updates serial number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to the current date in YYYYMMDDNN format.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3827. [placeholder]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3825. [bug] Address sign extension bug in isc_regex_validate.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3824. [bug] A collision between two flag values could cause
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana problems with cache cleaning when SIT was enabled.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3823. [func] Log the rpz cname target when rewriting. [RT #35667]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3822. [bug] Log the correct type of static-stub zones when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte removing them. [RT #35842]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte update and transaction support. Thanks to Marty
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana Lee for the contribution. [RT #35656]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3820. [func] The DLZ API doesn't pass the database version to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the lookup() function; this can cause DLZ modules
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that allow dynamic updates to mishandle prerequisite
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte checks. This has been corrected by adding a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 'dbversion' field to the dns_clientinfo_t
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte structure. [RT #35656]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3819. [bug] NSEC3 hashes need to be able to be entered and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte displayed without padding. This is not a issue for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte currently defined algorithms but may be for future
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hash algorithms. [RT #27925]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3818. [bug] Stop lying to the optimizer that 'void *arg' is a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte constant in isc_event_allocate.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3817. [func] The "delve" command is now spelled "delv" to avoid
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a namespace collision with the Xapian project.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3816. [func] "dig +qr" now reports query size. (Thanks to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Tony Finch.) [RT #35822]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3814. [func] The "masterfile-style" zone option controls the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte formatting of dumped zone files. Options are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "relative" (multiline format) and "full" (one
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte record per line). The default is "relative".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3813. [func] "host" now recognizes the "timeout", "attempts" and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "debug" options when set in /etc/resolv.conf.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Thanks to Adam Tkac at RedHat.) [RT #21885]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3812. [func] Dig now supports sending arbitrary EDNS options from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the command line (+ednsopt=code[:value]). [RT #35584]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3811. [func] "serial-update-method date;" sets serial number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on dynamic update to today's date in YYYYMMDDNN
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte format. (Thanks to Bradley Forschinger.) [RT #24903]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3810. [bug] Work around broken nameservers that fail to ignore
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte unknown EDNS options. [RT #35766]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3809. [doc] Fix SIT and NSID documentation.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3808. [doc] Clean up "prefetch" documentation. [RT #35751]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3807. [bug] Fix sign extension bug in dns_name_fromtext when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lowercase is set. [RT #35743]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3806. [test] Improved system test portability. [RT #35625]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3805. [contrib] Added contrib/perftcpdns, a performance testing tool
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for DNS over TCP. [RT #35710]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --- 9.10.0rc1 released ---
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3804. [bug] Corrected a race condition in dispatch.c in which
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte portentry could be reset leading to an assertion
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failure in socket_search(). (Change #3708
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte addressed the same issue but was incomplete.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3803. [bug] "named-checkconf -z" incorrectly rejected zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using alternate data sources for not having a "file"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte option. [RT #35685]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3802. [bug] Various header files were not being installed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3800. [bug] A pending event on the route socket could cause an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte assertion failure when shutting down named. [RT #35674]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3799. [bug] Improve named's command line error reporting.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte time. [RT #35659]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3797. [port] netbsd: geoip support probing was broken. [RT #35642]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3795. [bug] Make named-checkconf detect raw masterfiles for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hint zones and reject them. [RT #35268]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3793. [bug] zone.c:save_nsec3param() could assert when out of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte memory. [RT #35621]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3792. [func] Provide links to the alternate statistics views when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte displaying in a browser. [RT #35605]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3791. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3790. [bug] Handle broken nameservers that send BADVERS in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte response to unknown EDNS options. Maintain
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte statistics on BADVERS responses.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3789. [bug] Null pointer dereference on rbt creation failure.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3788. [bug] dns_peer_getrequestsit was returning request_nsid by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --- 9.10.0b2 released ---
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3787. [bug] The code that checks whether "auto-dnssec" is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allowed was ignoring "allow-update" ACLs set at
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana the options or view level. [RT #29536]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3786. [func] Provide more detailed error codes when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte native PKCS#11. "pkcs11-tokens" now fails robustly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rather than asserting when run against an HSM with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an incomplete PKCS#11 API implementation. [RT #35479]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3785. [bug] Debugging code dumphex didn't accept arbitrarily long
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte input (only compiled with -DDEBUG). [RT #35544]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3784. [bug] Using "rrset-order fixed" when it had not been
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte enabled at compile time caused inconsistent
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte results. It now works as documented, defaulting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to cyclic mode. [RT #28104]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3783. [func] "tsig-keygen" is now available as an alternate
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte command name for "ddns-confgen". It generates
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a TSIG key in named.conf format without comments.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3782. [func] Specifying "auto" as the salt when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "rndc signing -nsec3param" causes named to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte generate a 64-bit salt at random. [RT #35322]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3781. [tuning] Use adaptive mutex locks when available; this
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte has been found to improve performance under load
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on many systems. "configure --with-locktype=standard"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte restores conventional mutex locks. [RT #32576]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3780. [bug] $GENERATE handled negative numbers incorrectly.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3779. [cleanup] Clarify the error message when using an option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that was not enabled at compile time. [RT #35504]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3778. [bug] Log a warning when the wrong address family is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte used in "listen-on" or "listen-on-v6". [RT #17848]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3777. [bug] EDNS EXPIRE code could dump core when processing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DLZ queries. [RT #35493]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3776. [func] "rndc -q" suppresses output from successful
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rndc commands. Errors are printed on stderr.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3775. [bug] dlz_dlopen driver could return the wrong error
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte code on API version mismatch, leading to a segfault.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3774. [func] When using "request-nsid", log the NSID value in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte printable form as well as hex. [RT #20864]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3773. [func] "host", "nslookup" and "nsupdate" now have
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte options to print the version number and exit.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Based in part on a contribution from Tim Tessier.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3771. [cleanup] Adjusted log level for "using built-in key"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte messages. [RT #24383]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3770. [bug] "dig +trace" could fail with an assertion when it
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte needed to fall back to TCP due to a truncated
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte response. [RT #24660]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3769. [doc] Improved documentation of "rndc signing -list".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte algorithm. [RT #34000]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3767. [func] Log explicitly when using rndc.key to configure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte command channel. [RT #35316]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3766. [cleanup] Fixed problems with building outside the source
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte tree when using native PKCS#11. [RT #35459]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3765. [bug] Fixed a bug in "rndc secroots" that could crash
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte named when dumping an empty keynode. [RT #35469]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3764. [bug] The dnssec-keygen/settime -S and -i options
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (to set up a successor key and set the prepublication
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte interval) were missing from dnssec-keyfromlabel.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3763. [bug] delve: Cache DNSSEC records to avoid the need to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte re-fetch them when restarting validation. [RT #35476]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3762. [bug] Address build problems with --pkcs11-native +
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --with-openssl with ECDSA support. [RT #35467]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3761. [bug] Address dangling reference bug in dns_keytable_add.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3760. [bug] Improve SIT with native PKCS#11 and on Windows.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3759. [port] Enable delve on Windows. [RT #35441]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3758. [port] Enable export library APIs on Windows. [RT #35382]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3757. [port] Enable Python tools (dnssec-coverage,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dnssec-checkds) to run on Windows. [RT #34355]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3756. [bug] GSSAPI Kerberos realm checking was broken in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte check_config leading to spurious messages being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte logged. [RT #35443]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --- 9.10.0b1 released ---
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3755. [func] Add stats counters for known EDNS options + others.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3754. [cleanup] win32: Installer now places files in the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Program Files area rather than system services.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3753. [bug] allow-notify was ignoring keys. [RT #35425]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3752. [bug] Address potential REQUIRE failure if
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DNS_STYLEFLAG_COMMENTDATA is set when printing out
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3751. [tuning] The default setting for the -U option (setting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the number of UDP listeners per interface) has
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte been adjusted to improve performance. [RT #35417]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3750. [experimental] Partially implement EDNS EXPIRE option as described
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in draft-andrews-dnsext-expire-00. Retrieval of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the remaining time until expiry for slave zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is supported.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte EXPIRE uses an experimental option code (65002),
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte which is subject to change. [RT #35416]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3749. [func] "dig +subnet" sends an EDNS client subnet option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte containing the specified address/prefix when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte querying. (Thanks to Wilmer van der Gaast.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3748. [test] Use delve to test dns_client interfaces. [RT #35383]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3747. [bug] A race condition could lead to a core dump when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte destroying a resolver fetch object. [RT #35385]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3746. [func] New "max-zone-ttl" option enforces maximum
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte TTLs for zones. If loading a zone containing a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte higher TTL, the load fails. DDNS updates with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte higher TTLs are accepted but the TTL is truncated.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Note: Currently supported for master zones only;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte inline-signing slaves will be added.) [RT #38405]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3745. [func] "configure --with-tuning=large" adjusts various
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compiled-in constants and default settings to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte values suited to large servers with abundant
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte memory. [RT #29538]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3744. [experimental] SIT: send and process Source Identity Tokens
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana (similar to DNS Cookies by Donald Eastlake 3rd),
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana which are designed to help clients detect off-path
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana spoofed responses and for servers to identify
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana legitimate clients.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte SIT uses an experimental EDNS option code (65001),
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte which will be changed to an IANA-assigned value
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte if the experiment is deemed a success.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte SIT can be enabled via "configure --enable-sit" (or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --enable-developer). It is enabled by default in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Servers can be configured to send smaller responses
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to clients that have not identified themselves via
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte SIT. RRL processing has also been updated;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte legitimate clients are not subject to rate
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte limiting. [RT #35389]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3743. [bug] delegation-only flag wasn't working in forward zone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte declarations despite being documented. This is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte needed to support turning off forwarding and turning
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on delegation only at the same name. [RT #35392]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3742. [port] linux: libcap support: declare curval at start of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte block. [RT #35387]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3741. [func] "delve" (domain entity lookup and validation engine):
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A new tool with dig-like semantics for performing DNS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lookups, with internal DNSSEC validation, using the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte same resolver and validator logic as named. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allows easy validation of DNSSEC data in environments
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with untrustworthy resolvers, and assists with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte troubleshooting of DNSSEC problems. [RT #32406]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3740. [contrib] Minor fixes to configure --with-dlz-bdb,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3739. [func] Added per-zone stats counters to track TCP and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte UDP queries. [RT #35375]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3737. [bug] 'rndc retransfer' could trigger a assertion failure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with inline zones. [RT #35353]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3736. [bug] nsupdate: When specifying a server by name,
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana fall back to alternate addresses if the first
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address for that name is not reachable. [RT #25784]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3735. [cleanup] Merged the libiscpk11 library into libisc
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to simplify dependencies. [RT #35205]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3734. [bug] Improve building with libtool. [RT #35314]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3733. [func] Improve interface scanning support. Interface
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte information will be automatically updated if the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte OS supports routing sockets (MacOS, *BSD, Linux).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use "automatic-interface-scan no;" to disable.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Add "rndc scan" to trigger a scan. [RT #23027]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte driver to dump core on 64-bit systems. [RT #35324]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3731. [func] Added a "no-case-compress" ACL, which causes
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte named to use case-insensitive compression
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (disabling change #3645) for specified
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte clients. (This is useful when dealing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with broken client implementations that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte use case-sensitive name comparisons,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rejecting responses that fail to match the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte capitalization of the query that was sent.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3730. [cleanup] Added "never" as a synonym for "none" when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configuring key event dates in the dnssec tools.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3729. [bug] dnssec-keygen could set the publication date
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte incorrectly when only the activation date was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte specified on the command line. [RT #35278]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3728. [doc] Expanded native-PKCS#11 documentation,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte specifically pkcs11: URI labels. [RT #35287]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3727. [func] The isc_bitstring API is no longer used and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte has been removed from libisc. [RT #35284]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3726. [cleanup] Clarified the error message when attempting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to configure more than 32 response-policy zones.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3725. [contrib] Updated zkt and nslint to newest versions,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cleaned up and rearranged the contrib
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte directory, and added a README.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --- 9.10.0a2 released ---
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3724. [bug] win32: Fixed a bug that prevented dig and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte host from exiting properly after completing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a UDP query. [RT #35288]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3723. [cleanup] Imported keys are now handled the same way
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana regardless of DNSSEC algorithm. [RT #35215]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3722. [bug] Using geoip ACLs in a blackhole statement
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte could cause a segfault. [RT #35272]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3721. [doc] Improved documentation of the EDNS processing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte enhancements introduced in change #3593. [RT #35275]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3720. [bug] Address compiler warnings. [RT #35261]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3719. [bug] Address memory leak in in peer.c. [RT #35255]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte probing to see if it is possible to set dscp values
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on a per packet basis. [RT #35252]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3716. [bug] The dns_request code was setting dcsp values when not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte requested. [RT #35252]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3715. [bug] The region and city databases could fail to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte initialize when using some versions of libGeoIP,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte causing assertion failures when named was
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte configured to use them. [RT #35427]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3714. [test] System tests that need to test for cryptography
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte support before running can now use a common
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana "testcrypto.sh" script to do so. [RT #35213]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3713. [bug] Save memory by not storing "also-notify" addresses
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in zone objects that are configured not to send
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte notify requests. [RT #35195]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3712. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3711. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3710. [bug] Address double dns_zone_detach when switching to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using automatic empty zones from regular zones.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3709. [port] Use built-in versions of strptime() and timegm()
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on all platforms to avoid portability issues.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3708. [bug] Address a portentry locking issue in dispatch.c.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on a missing resolv.conf file and initializes the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte structure as if it had been configured with:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte nameserver ::1
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte nameserver 127.0.0.1
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Note: Callers will need to be updated to treat
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ISC_R_FILENOTFOUND as a qualified success or else
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte they will leak memory. The following code fragment
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte will work with both old and new versions without
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte changing the behaviour of the existing code.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resconf = NULL;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte result = irs_resconf_load(mctx, "/etc/resolv.conf",
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte if (result != ISC_SUCCESS) {
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte if (resconf != NULL)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte irs_resconf_destroy(&resconf);
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3706. [contrib] queryperf: Fixed a possible integer overflow when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte printing results. [RT #35182]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3705. [func] "configure --enable-native-pkcs11" enables BIND
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to use the PKCS#11 API for all cryptographic
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte functions, so that it can drive a hardware service
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte module directly without the need to use a modified
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte OpenSSL as intermediary (so long as the HSM's vendor
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte provides a complete-enough implementation of the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte PKCS#11 interface). This has been tested successfully
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with the Thales nShield HSM and with SoftHSMv2 from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the OpenDNSSEC project. [RT #29031]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3703. [func] To improve recursive resolver performance, cache
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records which are still being requested by clients
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can now be automatically refreshed from the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte authoritative server before they expire, reducing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or eliminating the time window in which no answer
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is available in the cache. See the "prefetch" option
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for more details. [RT #35041]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3702. [func] 'dnssec-coverage -l' option specifies a length
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of time to check for coverage; events further into
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the future are ignored. 'dnssec-coverage -z'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte checks only ZSK events, and 'dnssec-coverage -k'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte checks only KSK events. (Thanks to Peter Palfrader.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3701. [func] named-checkconf can now obscure shared secrets
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when printing by specifying '-x'. [RT #34465]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3700. [func] Allow access to subgroups of XML statistics via
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte special URLs http://<server>:<port>/xml/v3/server,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte /zones, /net, /tasks, /mem, and /status. [RT #35115]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3699. [bug] Improvements to statistics channel XSL stylesheet:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the stylesheet can now be cached by the browser;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte section headers are omitted from the stats display
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when there is no data in those sections to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte displayed; counters are now right-justified for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte easier readability. [RT #35117]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3698. [cleanup] Replaced all uses of memcpy() with memmove().
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3697. [bug] Handle "." as a search list element when IDN support
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is enabled. [RT #35133]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3696. [bug] dig failed to handle AXFR style IXFR responses which
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte span multiple messages. [RT #35137]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3695. [bug] Address a possible race in dispatch.c. [RT #35107]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3694. [bug] Warn when a key-directory is configured for a zone,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte but does not exist or is not a directory. [RT #35108]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3693. [security] memcpy was incorrectly called with overlapping
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ranges resulting in malformed names being generated
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on some platforms. This could cause INSIST failures
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when serving NSEC3 signed zones (CVE-2014-0591).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte was no data at the node. [RT #35080]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3691. [contrib] Address null pointer dereference in LDAP and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte MySQL DLZ modules.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3690. [bug] Iterative responses could be missed when the source
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte port for an upstream query was the same as the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte listener port (53). [RT #34925]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3689. [bug] Fixed a bug causing an insecure delegation from one
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte static-stub zone to another to fail with a broken
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte trust chain. [RT #35081]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3688. [bug] loadnode could return a freed node on out of memory.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3687. [bug] Address null pointer dereference in zone_xfrdone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3686. [func] "dnssec-signzone -Q" drops signatures from keys
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that are still published but no longer active.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3685. [bug] "rndc refresh" didn't work correctly with slave
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones using inline-signing. [RT #35105]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3684. [bug] The list of included files would grow on reload.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3683. [cleanup] Add a more detailed "not found" message to rndc
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte commands which specify a zone name. [RT #35059]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3682. [bug] Correct the behavior of rndc retransfer to allow
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte inline-signing slave zones to retain NSEC3 parameters
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte instead of reverting to NSEC. [RT #34745]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3681. [port] Update the Windows build system to support feature
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte selection and WIN64 builds. This is a work in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte progress. [RT #34160]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3680. [bug] Ensure buffer space is available in "rndc zonestatus".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3679. [bug] dig could fail to clean up TCP sockets still
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte waiting on connect(). [RT #35074]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3678. [port] Update config.guess and config.sub. [RT #35060]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte times. [RT #35073]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3676. [bug] "named-checkconf -z" now checks zones of type
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hint and redirect as well as master. [RT #35046]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3675. [misc] Provide a place for third parties to add version
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte information for their extensions in the version
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte file by setting the EXTENSIONS variable.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --- 9.10.0a1 released ---
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3673. [func] New "in-view" zone option allows direct sharing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of zones between views. [RT #32968]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3672. [func] Local address can now be specified when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_client API. [RT #34811]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3671. [bug] Don't allow dnssec-importkey overwrite a existing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte non-imported private key.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3670. [bug] Address read after free in server side of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lwres_getrrsetbyname. [RT #29075]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3667. [test] dig: add support to keep the TCP socket open between
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte successive queries (+[no]keepopen). [RT #34918]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3666. [func] Add a tool, named-rrchecker, for checking the syntax
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of individual resource records. This tool is intended
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to be called by provisioning systems so that the front
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte end does not need to be upgraded to support new DNS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte record types. [RT #34778]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3665. [bug] Failure to release lock on error in receive_secure_db.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte locking and other bugs. [RT #34855]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3663. [bug] Address bugs in dns_rdata_fromstruct and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3661. [bug] Address lock order reversal deadlock with inline zones.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3659. [port] solaris: don't add explicit dependencies/rules for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte python programs as make won't use the implicit rules.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3658. [port] linux: Address platform specific compilation issue
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when libcap-devel is installed. [RT #34838]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3657. [port] Some readline clones don't accept NULL pointers when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte calling add_history. [RT #34842]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3656. [security] Treat an all zero netmask as invalid when generating
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the localnets acl. (The prior behavior could
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allow unexpected matches when using some versions
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of Winsock: CVE-2013-6320.) [RT #34687]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3655. [cleanup] Simplify TCP message processing when requesting a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone transfer. [RT #34825]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3654. [bug] Address race condition with manual notify requests.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3653. [func] Create delegations for all "children" of empty zones
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte except "forward first". [RT #34826]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3652. [bug] Address bug with rpz-drop policy. [RT #34816]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3651. [tuning] Adjust when a master server is deemed unreachable.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3650. [tuning] Use separate rate limiting queues for refresh and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte notify requests. [RT #30589]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3649. [cleanup] Include a comment in .nzf files, giving the name of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the associated view. [RT #34765]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3648. [test] Updated the ATF test framework to version 0.17.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3647. [bug] Address a race condition when shutting down a zone.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3646. [bug] Journal filename string could be set incorrectly,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte causing garbage in log messages. [RT #34738]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3645. [protocol] Use case sensitive compression when responding to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries. [RT #34737]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3644. [protocol] Check that EDNS subnet client options are well formed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3643. [doc] Clarify RRL "slip" documentation.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3642. [func] Allow externally generated DNSKEY to be imported
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte into the DNSKEY management framework. A new tool
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dnssec-importkey is used to do this. [RT #34698]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3641. [bug] Handle changes to sig-validity-interval settings
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana better. [RT #34625]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3640. [bug] ndots was not being checked when searching. Only
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte continue searching on NXDOMAIN responses. Add the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ability to specify ndots to nslookup. [RT #34711]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in a key zone. [RT #34238]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte encountered. [RT #34668]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3637. [bug] 'allow-query-on' was checking the source address
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rather than the destination address. [RT #34590]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3636. [bug] Automatic empty zones now behave better with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte forward only "zones" beneath them. [RT #34583]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3635. [bug] Signatures were not being removed from a zone with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte only KSK keys for a algorithm. [RT #34439]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3634. [func] Report build-id in rndc status. Report build-id
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when building from a git repository. [RT #20422]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3633. [cleanup] Refactor OPT processing in named to make it easier
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to support new EDNS options. [RT #34414]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3632. [bug] Signature from newly inactive keys were not being
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte removed. [RT #32178]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3631. [bug] Remove spurious warning about missing signatures when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte qtype is SIG. [RT #34600]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3629. [func] Allow the printing of cryptographic fields in DNSSEC
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records by dig to be suppressed (dig +nocrypto).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3628. [func] Report DNSKEY key id's when dumping the cache.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3626. [func] dig: NSID output now easier to read. [RT #21160]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3625. [bug] Don't send notify messages to machines outside of the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3624. [bug] Look for 'json_object_new_int64' when looking for a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the json library. [RT #34449]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3623. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3622. [tuning] Eliminate an unnecessary lock when incrementing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cache statistics. [RT #34339]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3621. [security] Incorrect bounds checking on private type 'keydata'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can lead to a remotely triggerable REQUIRE failure
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2013-4854). [RT #34238]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3620. [func] Added "rpz-client-ip" policy triggers, enabling
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte RPZ responses to be configured on the basis of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the client IP address; this can be used, for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte example, to blacklist misbehaving recursive
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana or stub resolvers. [RT #33605]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3618. [func] "rndc reload" now checks modification times of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte include files as well as master files to determine
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte whether to skip reloading a zone. [RT #33936]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3617. [bug] Named was failing to answer queries during
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "rndc reload" [RT #34098]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3616. [bug] Change #3613 was incomplete. [RT #34177]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3615. [cleanup] "configure" now finishes by printing a summary
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of optional BIND features and whether they are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte active or inactive. ("configure --enable-full-report"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte increases the verbosity of the summary.) [RT #31777]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3614. [port] Check for <linux/types.h>. [RT #34162]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3613. [bug] named could crash when deleting inline-signing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zones with "rndc delzone". [RT #34066]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3611. [bug] Improved resistance to a theoretical authentication
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte attack based on differential timing. [RT #33939]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3610. [cleanup] win32: Some executables had been omitted from the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte installer. [RT #34116]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3609. [bug] Corrected a possible deadlock in applications using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the export version of the isc_app API. [RT #33967]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3608. [port] win32: added todos.pl script to ensure all text files
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the win32 build depends on are converted to DOS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte newline format. [RT #22067]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte message. [RT #34045]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3606. [func] "rndc flushtree" now flushes matching
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records in the address database and bad cache
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte as well as the DNS cache. (Previously only the
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana DNS cache was flushed.) [RT #33970]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3605. [port] win32: Addressed several compatibility issues
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with newer versions of Visual Studio. [RT #33916]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3604. [bug] Fixed a compile-time error when building with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte JSON but not XML. [RT #33959]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3603. [bug] Install <isc/stat.h>. [RT #33956]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte integrate with named and serve DNS data.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (Contributed by John Eaglesham of Yahoo.)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3601. [bug] Added to PKCS#11 openssl patches a value len
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte attribute in DH derive key. [RT #33928]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3600. [cleanup] dig: Fixed a typo in the warning output when receiving
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an oversized response. [RT #33910]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3599. [tuning] Check for pointer equivalence in name comparisons.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3598. [cleanup] Improved portability of map file code. [RT #33820]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3597. [bug] Ensure automatic-resigning heaps are reconstructed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when loading zones in map format. [RT #33381]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3596. [port] Updated win32 build documentation, added
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dnssec-verify. [RT #22067]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3595. [port] win32: Fix build problems introduced by change #3550.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3594. [maint] Update config.guess and config.sub. [RT #33816]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3593. [func] Update EDNS processing to better track remote server
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana capabilities. [RT #30655]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3592. [doc] Moved documentation of rndc command options to the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rndc man page. [RT #33506]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3591. [func] Use CRC-64 to detect map file corruption at load
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte time. [RT #33746]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3590. [bug] When using RRL on recursive servers, defer
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rate-limiting until after recursion is complete;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte also, use correct rcode for slipped NXDOMAIN
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte responses. [RT #33604]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3589. [func] Report serial numbers in when starting zone transfers.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Report accepted NOTIFY requests including serial.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3588. [bug] dig: addressed a memory leak in the sigchase code
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that could cause a shutdown crash. [RT #33733]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3587. [func] 'named -g' now checks the logging configuration but
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte does not use it. [RT #33473]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3585. [func] "rndc delzone -clean" option removes zone files
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when deleting a zone. [RT #33570]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3584. [security] Caching data from an incompletely signed zone could
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte trigger an assertion failure in resolver.c
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2013-3919). [RT #33690]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3583. [bug] Address memory leak in GSS-API processing [RT #33574]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3582. [bug] Silence false positive warning regarding missing file
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte directive for inline slave zones. [RT #33662]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3580. [bug] Addressed a possible race in acache.c [RT #33602]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3579. [maint] Updates to PKCS#11 openssl patches, supporting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3577. [bug] Handle zero TTL values better. [RT #33411]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3576. [bug] Address a shutdown race when validating. [RT #33573]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3575. [func] Changed the logging category for RRL events from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 'queries' to 'query-errors'. [RT #33540]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3574. [doc] The 'hostname' keyword was missing from server-id
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte description in the named.conf man page. [RT #33476]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone names containing punctuation marks and other
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte nonstandard characters. [RT #33419]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3572. [func] Threads are now enabled by default on most
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte operating systems. [RT #25483]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3571. [bug] Address race condition in dns_client_startresolve().
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3570. [bug] Check internal pointers are valid when loading map
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte files. [RT #33403]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte module, and added multithread support. [RT #33394]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3568. [cleanup] Add a product description line to the version file,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to be reported by named -v/-V. [RT #33366]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3567. [bug] Silence clang static analyzer warnings. [RT #33365]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3566. [func] Log when forwarding updates to master. [RT #33240]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3565. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3564. [bug] Improved handling of corrupted map files. [RT #33380]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3562. [func] Update map file header format to include a SHA-1 hash
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of the database content, so that corrupted map files
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can be rejected at load time. [RT #32459]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or NOTIMP. Adjust usage message. [RT #33363]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3560. [bug] isc-config.sh did not honor includedir and libdir
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when set via configure. [RT #33345]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3559. [func] Check that both forms of Sender Policy Framework
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records exist or do not exist. [RT #33355]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3557. [bug] Reloading redirect zones was broken. [RT #33292]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3555. [bug] Address theoretical race conditions in acache.c
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (change #3553 was incomplete). [RT #33252]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3554. [bug] RRL failed to correctly rate-limit upward
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte referrals and failed to count dropped error
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte responses in the statistics. [RT #33225]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3553. [bug] Address suspected double free in acache. [RT #33252]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3552. [bug] Wrong getopt option string for 'nsupdate -r'.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3550. [func] Unified the internal and export versions of the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte BIND libraries, allowing external clients to use
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the same libraries as BIND. [RT #33131]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3549. [doc] Documentation for "request-nsid" was missing.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3548. [bug] The NSID request code in resolver.c was broken
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resulting in invalid EDNS options being sent.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3547. [bug] Some malformed unknown rdata records were not properly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte detected and rejected. [RT #33129]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3546. [func] Add EUI48 and EUI64 types. [RT #33082]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3545. [bug] RRL slip behavior was incorrect when set to 1.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3544. [contrib] check5011.pl: Script to report the status of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte managed keys as recorded in managed-keys.bind.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Contributed by Tony Finch <dot@dotat.at>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3543. [bug] Update socket structure before attaching to socket
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte manager after accept. [RT #33084]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3542. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3541. [bug] Parts of libdns were not properly initialized when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte built in libexport mode. [RT #33028]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3540. [test] libt_api: t_info and t_assert were not thread safe.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3539. [port] win32: timestamp format didn't match other platforms.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3538. [test] Running "make test" now requires loopback interfaces
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana to be set up. [RT #32452]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3537. [tuning] Slave zones, when updated, now send NOTIFY messages
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to peers before being dumped to disk rather than
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte after. [RT #27242]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3536. [func] Add support for setting Differentiated Services Code
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Point (DSCP) values in named. Most configuration
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte options which take a "port" option (e.g.,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte listen-on, forwarders, also-notify, masters,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte notify-source, etc) can now also take a "dscp"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte option specifying a code point for use with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte outgoing traffic, if supported by the underlying
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte OS. [RT #27596]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3535. [bug] Minor win32 cleanups. [RT #32962]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3534. [bug] Extra text after an embedded NULL was ignored when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte parsing zone files. [RT #32699]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3531. [bug] win32: A uninitialized value could be returned on out
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of memory. [RT #32960]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3529. [func] Named now listens on both IPv4 and IPv6 interfaces
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte by default. Named previously only listened on IPv4
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte interfaces by default unless named was running in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte IPv6 only mode. [RT #32945]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3528. [func] New "dnssec-coverage" command scans the timing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte metadata for a set of DNSSEC keys and reports if a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lapse in signing coverage has been scheduled
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte inadvertently. (Note: This tool depends on python;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte it will not be built or installed on systems that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte do not have a python interpreter.) [RT #28098]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3527. [compat] Add a URI to allow applications to explicitly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte request a particular XML schema from the statistics
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte channel, returning 404 if not supported. [RT #32481]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3526. [cleanup] Set up dependencies for unit tests correctly during
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte build. [RT #32803]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3525. [func] Support for additional signing algorithms in rndc:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The -A option to rndc-confgen can be used to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte select the algorithm for the generated key.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (The default is still hmac-md5; this may
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte change in a future release.) [RT #20363]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3524. [func] Added an alternate statistics channel in JSON format,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when the server is built with the json-c library:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte http://[address]:[port]/json. [RT #32630]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3523. [contrib] Ported filesystem and ldap DLZ drivers to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dynamically-loadable modules, and added the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte "wildcard" module based on a contribution from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3522. [bug] DLZ lookups could fail to return SERVFAIL when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte they ought to. [RT #32685]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3520. [bug] 'mctx' was not being referenced counted in some places
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte where it should have been. [RT #32794]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3519. [func] Full replay protection via four-way handshake is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte now mandatory for rndc clients. Very old versions
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of rndc will no longer work. [RT #32798]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte so that all dns_rrl_rtype_t enum values fit regardless
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of whether it is teated as signed or unsigned by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the compiler. [RT #32792]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3516. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3515. [port] '%T' is not portable in strftime(). [RT #32763]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3514. [bug] The ranges for valid key sizes in ddns-confgen and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rndc-confgen were too constrained. Keys up to 512
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte bits are now allowed for most algorithms, and up
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to 1024 bits for hmac-sha384 and hmac-sha512.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3513. [func] "dig -u" prints times in microseconds rather than
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte milliseconds. [RT #32704]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3512. [func] "rndc validation check" reports the current status
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of DNSSEC validation. [RT #21397]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3511. [doc] Improve documentation of redirect zones. [RT #32756]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3510. [func] "rndc status" and XML statistics channel now report
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server start and reconfiguration times. [RT #21048]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3509. [cleanup] Added a product line to version file to allow for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte easy naming of different products (BIND
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte vs BIND ESV, for example). [RT #32755]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3508. [contrib] queryperf was incorrectly rejecting the -T option.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3507. [bug] Statistics channel XSL had a glitch when attempting
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana to chart query data before any queries had been
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte received. [RT #32620]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3506. [func] When setting "max-cache-size" and "max-acache-size",
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the keyword "unlimited" is no longer defined as equal
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to 4 gigabytes (except on 32-bit platforms); it
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte means literally unlimited. [RT #32358]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3505. [bug] When setting "max-cache-size" and "max-acache-size",
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte larger values than 4 gigabytes could not be set
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte explicitly, though larger sizes were available
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when setting cache size to 0. This has been
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte corrected; the full range is now available.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3504. [func] Add support for ACLs based on geographic location,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte using MaxMind GeoIP databases. Based on code
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte contributed by Ken Brownfield <kb@slide.com>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3503. [doc] Clarify size_spec syntax. [RT #32449]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3502. [func] zone-statistics: "no" is now a synonym for "none",
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte instead of "terse". [RT #29165]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3501. [func] zone-statistics now takes three options: full,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte terse, and none. "yes" and "no" are retained as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte synonyms for full and terse, respectively. [RT #29165]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3500. [security] Support NAPTR regular expression validation on
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte all platforms without using libregex, which
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can be vulnerable to memory exhaustion attack
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (CVE-2013-2266). [RT #32688]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3499. [doc] Corrected ARM documentation of built-in zones.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3498. [bug] zone statistics for zones which matched a potential
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte empty zone could have their zone-statistics setting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3497. [func] When deleting a slave/stub zone using 'rndc delzone'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte report the files that were being used so they can
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte be cleaned up if desired. [RT #27899]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3496. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3495. [func] Support multiple response-policy zones (up to 32),
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte while improving RPZ performance. "response-policy"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte syntax now includes a "min-ns-dots" clause, with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default 1, to exclude top-level domains from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte NSIP and NSDNAME checking. --enable-rpz-nsip and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte --enable-rpz-nsdname are now the default. [RT #32251]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3494. [func] DNS RRL: Blunt the impact of DNS reflection and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte amplification attacks by rate-limiting substantially-
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte identical responses. [RT #28130]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte contributed by Mark Goldfinch. [RT #32549]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3492. [bug] Fixed a regression in zone loading performance
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte due to lock contention. [RT #30399]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3491. [bug] Slave zones using inline-signing must specify a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte file name. [RT #31946]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3490. [bug] When logging RDATA during update, truncate if it's
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte too long. [RT #32365]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dns_dlzcreate() failed to properly initialize
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte dlzdb.link. When cloning a rdataset do not copy
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the link contents. [RT #32651]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3488. [bug] Use after free error with DH generated keys. [RT #32649]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3487. [bug] Change 3444 was not complete. There was a additional
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte place where the NOQNAME proof needed to be saved.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3486. [bug] named could crash when using TKEY-negotiated keys
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that had been deleted and then recreated. [RT #32506]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3484. [bug] Some statistics were incorrectly rendered in XML.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3483. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3482. [func] dig +nssearch now prints name servers that don't
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte have address records (missing AAAA or A, or the name
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte doesn't exist). [RT #29348]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3481. [cleanup] Removed use of const const in atf.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3480. [bug] Silence logging noise when setting up zone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte statistics. [RT #32525]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3479. [bug] Address potential memory leaks in gssapi support
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte code. [RT #32405]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3478. [port] Fix a build failure in strict C99 environments
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3477. [func] Expand logging when adding records via DDNS update
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3476. [bug] "rndc zonestatus" could report a spurious "not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte found" error on inline-signing zones. [RT #29226]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3475. [cleanup] Changed name of 'map' zone file format (previously
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 'fast'). [RT #32458]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3474. [bug] nsupdate could assert when the local and remote
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address families didn't match. [RT #22897]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3473. [bug] dnssec-signzone/verify could incorrectly report
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an error condition due to an empty node above an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte opt-out delegation lacking an NSEC3. [RT #32072]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3472. [bug] The active-connections counter in the socket
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte statistics could underflow. [RT #31747]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3471. [bug] The number of UDP dispatches now defaults to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the number of CPUs even if -n has been set to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a higher value. [RT #30964]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3470. [bug] Slave zones could fail to dump when successfully
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte refreshing after an initial failure. [RT #31276]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3469. [bug] Handle DLZ lookup failures more gracefully. Improve
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte backward compatibility between versions of DLZ dlopen
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte API. [RT #32275]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3468. [security] RPZ rules to generate A records (but not AAAA records)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte could trigger an assertion failure when used in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte conjunction with DNS64 (CVE-2012-5689). [RT #32141]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3467. [bug] Added checks in dnssec-keygen and dnssec-settime
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to check for delete date < inactive date. [RT #31719]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in DLZ example driver. [RT #32275]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3465. [bug] Handle isolated reserved ports. [RT #31778]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3464. [maint] Updates to PKCS#11 openssl patches, supporting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3462. [doc] Clarify server selection behavior of dig when using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte -4 or -6 options. [RT #32181]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3461. [bug] Negative responses could incorrectly have AD=1
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte set. [RT #32237]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3460. [bug] Only link against readline where needed. [RT #29810]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3459. [func] Added -J option to named-checkzone/named-compilezone
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to specify the path to the journal file. [RT #30958]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3458. [bug] Return FORMERR when presented with a overly long
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte domain named in a request. [RT #29682]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3456. [port] g++47: ATF failed to compile. [RT #32012]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3455. [contrib] queryperf: fix getopt option list. [RT #32338]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3454. [port] sparc64: improve atomic support. [RT #25182]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte failed. [RT #31960]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3452. [bug] Accept duplicate singleton records. [RT #32329]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3451. [port] Increase per thread stack size from 64K to 1M.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3450. [bug] Stop logfileconfig system test spam system logs.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3449. [bug] gen.c: use the pre-processor to construct format
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte strings so that compiler can perform sanity checks;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte check the snprintf results. [RT #17576]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3448. [bug] The allow-query-on ACL was not processed correctly.
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3447. [port] Add support for libxml2-2.9.x [RT #32231]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3446. [port] win32: Add source ID (see change #3400) to build.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3445. [bug] Warn about zone files with blank owner names
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte immediately after $ORIGIN directives. [RT #31848]
3270659f55e0928d6edec3d26217cc29398a8149Srikanth, Ramana3444. [bug] The NOQNAME proof was not being returned from cached
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte insecure responses. [RT #21409]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte rejected when generating keys. [RT #31927]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3442. [port] Net::DNS 0.69 introduced a non backwards compatible
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte change. [RT #32216]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3440. [bug] Reorder get_key_struct to not trigger a assertion when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte cleaning up due to out of memory error. [RT #32131]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3439. [placeholder]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte buffers with constant data. [RT #32064]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3436. [bug] Check malloc/calloc return values. [RT #32088]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3435. [bug] Cross compilation support in configure was broken.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3434. [bug] Pass client info to the DLZ findzone() entry
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte point in addition to lookup(). This makes it
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte possible for a database to answer differently
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte whether it's authoritative for a name depending
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte on the address of the client. [RT #31775]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3433. [bug] dlz_findzone() did not correctly handle
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ISC_R_NOMORE. [RT #31172]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3432. [func] Multiple DLZ databases can now be configured.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DLZ databases are searched in the order configured,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte unless set to "search no", in which case a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte zone can be configured to be retrieved from a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte particular DLZ database by using a "dlz <name>"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte option in the zone statement. DLZ databases can
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte support type "master" and "redirect" zones.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3431. [bug] ddns-confgen: Some valid key algorithms were
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte not accepted. [RT #31927]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3430. [bug] win32: isc_time_formatISO8601 was missing the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 'T' between the date and time. [RT #32044]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3429. [bug] dns_zone_getserial2 could a return success without
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte returning a valid serial. [RT #32007]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3428. [cleanup] dig: Add timezone to date output. [RT #2269]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3427. [bug] dig +trace incorrectly displayed name server
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte addresses instead of names. [RT #31641]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3426. [bug] dnssec-checkds: Clearer output when records are not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte found. [RT #31968]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3425. [bug] "acacheentry" reference counting was broken resulting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in use after free. [RT #31908]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3424. [func] dnssec-dsfromkey now emits the hash without spaces.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3423. [bug] "rndc signing -nsec3param" didn't accept the full
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte range of possible values. Address portability issues.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3422. [bug] Added a clear error message for when the SOA does not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte match the referral. [RT #31281]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3421. [bug] Named loops when re-signing if all keys are offline.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3420. [bug] Address VPATH compilation issues. [RT #31879]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte3419. [bug] Memory leak on validation cancel. [RT #31869]
3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
3406. [bug] mem.c: Fix compilation errors when building with
zone.c [RT #30675]
3362. [bug] Setting some option values to 0 in named.conf
3357. [port] Add support for libxml2-2.8.x [RT #30440]
to ensure correctness of signatures and of NSEC/NSEC3
- add a RPZ performance test to bin/tests/system/rpz
3328. [bug] Fixed inconsistent data checking in dst_parse.c.
zone.c:zone_gotwritehandle. [RT #29028]
3309. [bug] resolver.c:fctx_finddone() was not thread safe.
3300. [bug] Named could die if gssapi was enabled in named.conf
client.c:exit_check. [RT #28346]
3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
rbtnode.deadlink. [RT #27738]
lib/dns/rbtdb.c:iszonesecure. [RT #26913]
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3201. [func] 'rndc querylog' can now be given an on/off parameter
dnssec.h. [RT #26415]
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
3186. [bug] Version/db mis-match in rpz code. [RT #26180]
sample external DLZ module in contrib/dlz/example.
- replace "NO-OP" named.conf policy override with
3169. [func] Catch db/version mis-matches when calling dns_db_*().
3163. [bug] Use finer-grained locking in client.c to address
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
drivers (e.g., mysql, postgresql, etc). [RT #25710]
3145. [test] Capture output of ATF unit tests in "./atf.out" if
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which