e411a986b94276c28e6a971f9c3b61d45c635456James Brister 258. [bug] Nslookup didn't properly check class and type values.

e411a986b94276c28e6a971f9c3b61d45c635456James Brister

e411a986b94276c28e6a971f9c3b61d45c635456James Brister 257. [bug] Dig/Host/Nslookup didn't properly handle connect

e411a986b94276c28e6a971f9c3b61d45c635456James Brister timeout in some very specific situations, and gave

c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews an unnecessary warning.

c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews

76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson 456. [bug] Stub zones were not resetting the refresh and expire

76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson counters, loadtime or clearing the DNS_ZONE_REFRESH

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson (refresh in progress) flag upon successful update.

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson [RT #300]

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews 455. [doc] Document IPv4 prefix notation does not require a

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson dotted decimal quad but may be just dotted decimal.

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence 454. [bug] Enforce dotted decimal and dotted decimal quad where

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews documented as such in named.conf. [RT #304, RT #311]

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson 453. [bug] Warn if the obsolete option "maintain-ixfr-base"

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson is specified in named.conf. [RT #306]

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson 452. [bug] Warn if the unimplemented option "statistics-file"

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson is specified in named.conf. [RT #301]

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 451. [func] Update forwarding implememted.

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 450. [func] New function ns_client_sendraw().

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 449. [bug] isc_bitstring_copy() only works correctly if the

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister two bitstrings have the same lsb0 value, but this

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister requirement was not documented, nor was there a

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister REQUIRE for it.

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson 448. [bug] Host output formatting change, to match v8. [RT #255]

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence 447. [bug] Dig didn't properly retry in TCP mode after

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence a truncated reply. [RT #277]

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister

36357e4304862fb47e9fae03c704cb6720310c45James Brister 446. [bug] Confusing notify log message. [RT #298]

36357e4304862fb47e9fae03c704cb6720310c45James Brister

36357e4304862fb47e9fae03c704cb6720310c45James Brister 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence bitstring triggered a REQUIRE statement. The REQUIRE

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence statement was incorrect. [RT #297]

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence 444. [func] "recursion denied" messages are always logged at

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence debug level 1, now, rather than sometimes at ERROR.

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence This silences these warnings in the usual case, where

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence some clients set the RD bit in all queries.

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence 443. [bug] When loading a master file failed because of an

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence unrecognized RR type name, the error message

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence did not include the file name and line number.

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence [RT #285]

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence 442. [bug] TSIG signed messages that did not match any view

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence crashed the server. [RT #290]

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence

014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson 441. [bug] Nodes obscured by a DNAME were inaccessible even

014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson when DNS_DBFIND_GLUEOK was set.

b99d080717fdd741961d736581270d37bad8bec0David Lawrence

b99d080717fdd741961d736581270d37bad8bec0David Lawrence 440. [func] New function dns_zone_forwardupdate().

b99d080717fdd741961d736581270d37bad8bec0David Lawrence

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 439. [func] New function dns_request_createraw().

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 438. [func] New function dns_message_getrawmessage().

b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence

b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence 437. [func] Log NOTIFY activity to the notify channel.

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence which sometimes happens on Linux, named would enter

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence a busy loop. Also, unexpected socket errors were

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence not logged at a high enough logging level to be

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence useful in diagnosing this situation. [RT #275]

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence 435. [bug] dns_zone_dump() overwrote existing zone files

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence rather than writing to a temporary file and

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence renaming. This could lead to empty or partial

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence zone files being left around in certain error

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence conditions involving the initial transfer of a

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence slave zone, interfering with subsequent server

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence startup. [RT #282]

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence 434. [func] New function isc_file_isabsolute().

5610876d1b4a851d6d8806d95aff3e571becac5bDavid Lawrence

5610876d1b4a851d6d8806d95aff3e571becac5bDavid Lawrence 433. [func] isc_base64_decodestring() now accepts newlines

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence within the base64 data. This makes it possible

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence to break up the key data in a "trusted-keys"

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence statement into multiple lines. [RT #284]

344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence

344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence 432. [func] Added refresh/retry jitter. This is currently

738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence hard-coded to be no more than 20% of the SOA

738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence provided time or 10 minutes, whichever is less.

eefea43215016bce437ab4a7441b2851fd182960David Lawrence

eefea43215016bce437ab4a7441b2851fd182960David Lawrence 431. [func] Log at ISC_LOG_INFO when a zone is successfully

eefea43215016bce437ab4a7441b2851fd182960David Lawrence loaded.

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence 430. [bug] Rewrote the lightweight resolver client management

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence code to handle shutdown correctly and general

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence cleanup.

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence 429. [bug] The space reserved for a TSIG record in a response

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence was 2 bytes too short, leading to message

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson generation failures.

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence DNS_R_BADDB for nodes which had neither NXT nor SIG NXT

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence (e.g. glue). This could cause SERVFAILs when

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence generating negative responses in a secure zone.

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley 427. [bug] Avoid going into an infinite loop when the validator

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley gets a negative response to a key query where the

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley records are signed by the missing key.

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley 426. [bug] Attempting to generate an oversized RSA key could

904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence cause dnssec-keygen to dump core.

904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence 425. [bug] Warn about the auth-nxdomain default value change

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence if there is no auth-nxdomain statement in the

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence config file. [RT #287]

bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington 424. [bug] notify_createmessage() could trigger an assertion

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington failure when creating the notify message failed,

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington e.g. due to corrupt zones with multiple SOA records.

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington [RT #279]

56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence

56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence 423. [bug] When responding to a recusive query, errors that occur

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence after following a CNAME should cause the query to fail.

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence [RT #274]

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence 422. [func] get rid of isc_random_t, and make isc_random_get()

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence and isc_random_jitter() use rand() internally

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence instead of local state. Note that isc_random_*()

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence functions are only for weak, non-critical "randomness"

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence such as timing jitter and such.

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence 421. [bug] nslookup would exit when given a blank line as input.

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence 420. [bug] nslookup failed to implement the "exit" command.

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews 419. [bug] The certificate type PKIX was misspelled as SKIX.

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff 418. [bug] At debug levels >= 10, getting an unexpected

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff socket receive error would crash the server

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff while trying to log the error message.

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews 417. [func] Add isc_app_block() and isc_app_unblock(), which

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews allow an application to handle signals while

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews blocking.

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews 416. [bug] Slave zones with no master file tried to use a

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence NULL pointer for a journal file name when they

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence received an IXFR. [RT #273]

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence 415. [bug] The logging code leaked file descriptors.

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence 414. [bug] Server did not shut down until all incoming zone

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence transfers were finished.

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence 413. [bug] Notify could attempt to use the zone database after

140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer it had been unloaded. [RT#267]

140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer

6d208969b3ed736f434bc5120044f8fd2f595f22David Lawrence 412. [bug] named -v didn't print the version.

6d208969b3ed736f434bc5120044f8fd2f595f22David Lawrence

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence 411. [bug] A typo in the HS A code caused an assertion failure.

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence 410. [bug] lwres_gethostbyname() and company set lwres_h_errno

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence to a random value on success.

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence 409. [bug] If named was shut down early in the startup

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence process, ns_omapi_shutdown() would attempt to lock

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence an unintialized mutex. [RT #262]

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence

b3e77535185043f089b346166440402d092030c3David Lawrence 408. [bug] stub zones could leak memory and reference counts if

b3e77535185043f089b346166440402d092030c3David Lawrence all the masters were unreachable.

b3e77535185043f089b346166440402d092030c3David Lawrence

b3e77535185043f089b346166440402d092030c3David Lawrence 407. [bug] isc_rwlock_lock() would needlessly block

b3e77535185043f089b346166440402d092030c3David Lawrence readers when it reached the read quota even

03f0e349d81a580a562fd21402ef97d11c15429aBrian Wellington if no writers were waiting.

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington 406. [bug] Log messages were occasionally lost or corrupted

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington due to a race condition in isc_log_doit().

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence 405. [func] Add support for selective forwarding (forward zones)

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence

a231769eaae9add23b16124388e1d474fb488873David Lawrence 404. [bug] The request library didn't completely work with IPv6.

a231769eaae9add23b16124388e1d474fb488873David Lawrence

a231769eaae9add23b16124388e1d474fb488873David Lawrence 403. [bug] "host" did not use the search list.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 402. [bug] Treat undefined acls as errors, rather than

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence warning and then later throwing an assertion.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence [RT #252]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 401. [func] Added simple database API.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 400. [bug] SIG(0) signing and verifying was done incorrectly.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence [RT #249]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 399. [bug] When reloading the server with a config file

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence containing a syntax error, it could catch an

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence assertion failure trying to perform zone

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence maintenance on, or sending notifies from,

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence tentatively created zones whose views were

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence never fully configured and lacked an address

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence database and request manager.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 398. [bug] "dig" sometimes caught an assertion failure when

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence using TSIG, depending on the key length.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 397. [func] Added utility functions dns_view_gettsig() and

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence dns_view_getpeertsig().

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 396. [doc] There is now a man page for "nsupdate"

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence in doc/man/bin/nsupdate.8.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 395. [bug] nslookup printed incorrect RR type mnemonics

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence for RRs of type >= 21 [RT #237].

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 394. [bug] Current name was not propagated via $INCLUDE.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 393. [func] Initial answer while loading (awl) support.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence Entry points: dns_master_loadfileinc(),

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence dns_master_loadstreaminc(), dns_master_loadbufferinc().

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence Note: calls to dns_master_load*inc() should be rate

a59b51eb1d9a80d682efc669414e16dc8da47e95David Lawrence be rate limited so as to not use up all file

a59b51eb1d9a80d682efc669414e16dc8da47e95David Lawrence descriptors.

6b526894f47f6d6ff08f4f49b952b4ec8247ba9eDavid Lawrence

6b526894f47f6d6ff08f4f49b952b4ec8247ba9eDavid Lawrence 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence not support the given address family requested.

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson 390. [func] The function dns_zone_setdbtype() now takes

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson an argc/argv style vector of words and sets

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson both the zone database type and its arguments,

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence making the functions dns_zone_adddbarg()

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence and dns_zone_cleardbargs() unnecessary.

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence 389. [bug] Attempting to send a reqeust over IPv6 using

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence dns_request_create() on a system without IPv6

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence support caused an assertion failure [RT #235].

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence

947bd6c648bd29bc226971324de1b30230a56a22David Lawrence 388. [func] dig and host can now do reverse ipv6 lookups.

878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence

878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence 387. [func] Add dns_byaddr_createptrname(), which converts

cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson an address into the name used by a PTR query.

cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson

b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence 386. [bug] Missing strdup() of ACL name caused random

b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence ACL matching failures [RT #228].

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence and dns_zt_print().

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence of 2147483647.

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson 383. [func] When writing a master file, print the SOA and NS

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson records (and their SIGs) before other records.

d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence

d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence 382. [bug] named -u failed on many Linux systems where the

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence libc provided kernel headers do not match

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence the current kernel.

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence IPV6_PKTINFO if found. [RT #229]

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence 380. [bug] nsupdate didn't work with IPv6.

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence 379. [func] New library function isc_sockaddr_anyofpf().

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence 378. [func] named and lwresd will log the command line arguments

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence they were started with in the "starting ..." message.

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 377. [bug] When additional data lookups were refused due to

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley "allow-query", the databases were still being

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley attached causing reference leaks.

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 376. [bug] The server should always use good entropy when

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley performing cryptographic functions needing entropy.

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 375. [bug] Per-zone "allow-query" did not properly override the

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley view/global one for CNAME targets and additional

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley data [RT #220].

cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence

cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence 374. [bug] SOA in authoritative negative responses had wrong TTL.

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence 373. [func] nslookup is now installed by "make install".

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence

7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence 372. [bug] Deal with Microsoft DNS servers appending two bytes of

7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence garbage to zone transfer requests.

8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence

8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence 371. [bug] At high debug levels, doing an outgoing zone transfer

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence of a very large RRset could cause an assertion failure

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence during logging.

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence 370. [bug] The error messages for rollforward failures were

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence overly terse.

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence

32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington 369. [func] Support new named.conf options, view and zone

32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington statements:

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence max-retry-time, min-retry-time,

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence max-refresh-time, min-refresh-time, max-names.

77f372eed39827f5efef476602de7c0505f99b91David Lawrence

77f372eed39827f5efef476602de7c0505f99b91David Lawrence 368. [func] Restructure the internal ".bind" view so that more

77f372eed39827f5efef476602de7c0505f99b91David Lawrence zones can be added to it.

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence 367. [bug] Allow proper selection of server on nslookup command

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence line.

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence 366. [func] Allow use of '-' batch file in dig for stdin.

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence 365. [bug] nsupdate -k leaked memory.

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence 364. [func] Added additional-from-{cache,auth}

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence 362. [bug] rndc no longer aborts if the configuration file is

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence missing an options statement. [RT #209]

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 361. [func] When the RBT find or chain functions set the name and

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence origin for a node that stores the root label

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence the name is now set to an empty name, instead of ".",

d111a46c88adda33a93839f4934e127b6147d87dBob Halley to simplify later use of the name and origin by

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson dns_name_concatenate(), dns_name_totext() or

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson dns_name_format().

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson

e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington 360. [func] dns_name_totext() and dns_name_format() now allow

6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington an empty name to be passed, which is formatted as "@".

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff 359. [bug] dnssec-signzone occasionally signed glue records.

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington 358. [cleanup] Rename the intermediate files used by the dnssec

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington programs.

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson 357. [bug] The zone file parser crashed if the argument

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson to $INCLUDE was a quoted string.

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson

d111a46c88adda33a93839f4934e127b6147d87dBob Halley 356. [cleanup] isc_task_send no longer requires event->sender to

d111a46c88adda33a93839f4934e127b6147d87dBob Halley be non-null.

d111a46c88adda33a93839f4934e127b6147d87dBob Halley

d111a46c88adda33a93839f4934e127b6147d87dBob Halley 355. [func] Added isc_dir_createunique(), similar to mkdtemp().

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence

9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews 354. [doc] Man pages for the dnssec tools are now included in

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence the distribution, in doc/man/dnssec.

9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 353. [bug] double increment in lwres/gethost.c:copytobuf().

2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson (RT# 187)

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff 352. [bug] Race condition in dns_client_t startup could cause

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff an assertion failure.

c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff

c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington signed query could crash the server.

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley 350. [bug] Also-notify lists specified in the global options

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley block were not correctly reference counted, causing

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley a memory leak.

53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington

53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington 349. [bug] Processing a query with the CD bit set now works

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington as expected.

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 348. [func] New named.conf boolean values 'glue-from-auth' and

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 'glue-from-cache' now supported in view and global

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington options statement.

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson 347. [bug] Don't crash if when an argument is left off

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson options in dig.

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson 346. [func] Add support for .digrc config file, in the

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson user's current directory

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews 345. [bug] Large-scale changes/cleanups to dig:

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews * Significantly improve structure handling

4716e94840921878b26e493576f84afe4fe08752Mark Andrews * Don't pre-load entire batch files

4716e94840921878b26e493576f84afe4fe08752Mark Andrews * Add name/rr counting/limiting

4716e94840921878b26e493576f84afe4fe08752Mark Andrews * Fix SIGINT handling

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence * Shorten timeouts to match v8's behavior

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence 344. [bug] When shutting down, lwresd sometimes tried

3db95284356cd54df84ed2425f189ad2b44e4992David Lawrence to shut down its client tasks twice,

3db95284356cd54df84ed2425f189ad2b44e4992David Lawrence triggering an assertion.

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley

0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley 343. [bug] Although zone maintenance SOA queries and

0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley notify requests were signed with TSIG keys

3886e748a4086b813e3453232a742903762fedadBob Halley when configured for the server in case,

3886e748a4086b813e3453232a742903762fedadBob Halley the TSIG was not verified on the response.

3886e748a4086b813e3453232a742903762fedadBob Halley

3886e748a4086b813e3453232a742903762fedadBob Halley 342. [bug] The wrong name was being passed to

3886e748a4086b813e3453232a742903762fedadBob Halley dns_name_dup() when generating a TSIG

3886e748a4086b813e3453232a742903762fedadBob Halley key using TKEY.

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley 341. [func] Support 'key' clause in named.conf zone masters

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley statement:

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley masters {

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 10.0.0.1 port 666 key "foo";

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 10.0.0.2 ;

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington };

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 340. [bug] The top-level COPYRIGHT file was missing from

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington the distribution.

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson 339. [bug] DNSSEC validation of the response to an ANY

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson query at a name with a CNAME RR in a secure

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson zone triggered an assertion failure.

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley

83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson 338. [bug] lwresd logged to syslog as named, not lwresd.

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley on the command line.

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley

83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson 336. [bug] "dig -f" used 64 k of memory for each line in

8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson the file. It now uses much less, though still

8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson proportionally to the file size.

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson 335. [bug] named would occasionally attempt recursion when

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson it was disallowed or undesired.

7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington

7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington 334. [func] Added hmac-md5 to libisc.

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson 333. [bug] The resolver incorrectly accepted referrals to

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson domains that were not parents of the query name,

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson causing assertion failures.

42712a426dd62518ca7c36982867e5622f7265e7Michael Graff

42712a426dd62518ca7c36982867e5622f7265e7Michael Graff 332. [func] New function dns_name_reset().

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence 331. [bug] Only log "recursion denied" if RD is set. (RT #178)

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence 330. [bug] Many debugging messages were partially formatted

11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson even when debugging was turned off, causing a

11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson significant decrease in query performance.

5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence

5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence 329. [func] omapi_auth_register() now takes a size_t argument for

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence the length of a key's secret data. Previously

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence OMAPI only stored secrets up to the first NUL byte.

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence

0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence 328. [func] Added isc_base64_decodestring().

0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 327. [bug] rndc.conf parser wasn't correctly recognising an IP

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister address where a host specification was required.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 326. [func] 'keys' in an 'inet' control statement is now

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister required and must have at least one item in it.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister A "not supported" warning is now issued if a 'unix'

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister control channel is defined.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 325. [bug] isc_lex_gettoken was processing octal strings when

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister ISC_LEXOPT_CNUMBER was not set.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 324. [func] In the resolver, turn EDNS0 off if there is no

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister response after a number of retransmissions.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister This is to allow queries some chance of succeeding

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister even if all the authoritative servers of a zone

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister silently discard EDNS0 requests instead of

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence sending an error response like they ought to.

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence Because of this, servers authoritative for a parent

9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister and grandchild zone but not authoritative for the

9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister intervening child zone did not correctly issue

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson referrals to the servers of the child zone.

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 322. [bug] Queries for KEY RRs are now sent to the parent

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson server before the authoritative one, making

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson DNSSEC insecurity proofs work in many cases

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson where they previously didn't.

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 321. [bug] When synthesizing a CNAME RR for a DNAME

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson response, query_addcname() failed to intitialize

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington the type and class of the CNAME dns_rdata_t,

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington causing random failures.

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence 320. [func] Multiple rndc changes: parses an rndc.conf file,

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence uses authentication to talk to named, command

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence line syntax changed. This will all be described

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence in the ARM.

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence 319. [func] The named.conf "controls" statement is now used

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley to configure the OMAPI command channel.

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington 318. [func] dns_c_ndcctx_destroy() could never return anything

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington except ISC_R_SUCCESS; made it have void return instead.

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley 317. [func] Use callbacks from libomapi to determine if a

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley new connection is valid, and if a key requested

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence to be used with that connection is valid.

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence 316. [bug] Generate a warning if we detect an unexpected <eof>

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister but treat as <eol><eof>.

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister 315. [bug] Handle non-empty blanks lines. (RT #163)

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister

be768c2e952c34438025999125f984995a2c675fBob Halley 314. [func] The named.conf controls statement can now have

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley more than one key specified for the inet clause.

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley 313. [bug] When parsing resolv.conf, don't terminate on an

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley error. Instead, parse as much as possible, but

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley still return an error if one was found.

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley

be768c2e952c34438025999125f984995a2c675fBob Halley 312. [bug] Increase the number of allowed elements in the

be768c2e952c34438025999125f984995a2c675fBob Halley resolv.conf search path from 6 to 8. If there

be768c2e952c34438025999125f984995a2c675fBob Halley are more than this, ignore the remainder rather

f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister than returning a failure in lwres_conf_parse.

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley 311. [bug] lwres_conf_parse failed when the first line of

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley resolv.conf was empty or a comment.

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley 310. [func] Changes to named.conf "controls" statement (inet

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence subtype only)

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley - support "keys" clause

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister controls {

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister inet * port 1024

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister allow { any; } keys { "foo"; }

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson }

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson - allow "port xxx" to be left out of statement,

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister in which case it defaults to omapi's default port

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister of 953.

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 309. [bug] When sending a referral, the server did not look

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister for name server addresses as glue in the zone

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister holding the NS RRset in the case where this zone

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister was not the same as the one where it looked for

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister name server addresses as authoritative data.

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 308. [bug] Treat a SOA record not at top of zone as an error

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley when loading a zone. (RT #154)

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley 307. [bug] When canceling a query, the resolver didn't check for

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley isc_socket_sendto() calls that did not yet have their

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley completion events posted, so it could (rarely) end up

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley destroying the query context and then want to use

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington it again when the send event posted, triggering an

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington assertion as it tried to cancel an already-canceled

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington query. (RT #77)

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington 306. [bug] Reading HMAC-MD5 private key files didn't work.

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 305. [bug] When reloading the server with a config file

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley containing a syntax error, it could catch an

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley assertion failure trying to perform zone

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley maintenance on tentatively created zones whose

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley views were never fully configured and lacked

a5a5371b756f3bbbe33dac1dde196fbd6c063640Bob Halley an address database.

304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers

are listed in resolv.conf, silently ignore them

instead of returning failure.

303. [bug] Add additional sanity checks to differentiate a AXFR

response vs a IXFR response. (RT #157)

302. [bug] In dig, host, and nslookup, MXNAME should be large

enough to hold any legal domain name in presentation

format + terminating NULL.

301. [bug] Uninitalised pointer in host:printmessage(). (RT #159)

300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work

on platforms lacking IPv6 because each included their

own ipv6 header file for the missing definitions. Now

each library's ipv6.h defines the wrapper symbol of

the other (ISC_IPV6_H and LWRES_IPV6_H).

299. [cleanup] Get the user and group information before changing the

root directory, so the administrator does not need to

keep a copy of the user and group databases in the

chroot'ed environment. Suggested by Hakan Olsson.

298. [bug] A mutex deadlock occurred during shutdown of the

interface manager under certain conditions.

Digital Unix systems were the most affected.

297. [bug] Specifying a key name that wasn't fully qualified

in certain parts of the config file could cause

an assertion failure.

296. [bug] "make install" from a separate build directory

failed unless configure had been run in the source

directory, too.

295. [bug] When invoked with type==CNAME and a message

not constructed by dns_message_parse(),

dns_message_findname() failed to find anything

due to checking for attribute bits that are set

only in dns_message_parse(). This caused an

infinite loop when constructing the response to

an ANY query at a CNAME in a secure zone.

294. [bug] If we run out of space in while processing glue

when reading a master file and commit "current name"

reverts to "name_current" instead of staying as

"name_glue".

293. [port] Add support for FreeBSD 4.0 system tests.

292. [bug] Due to problems with the way some operating systems

handle simultaneous listening on IPv4 and IPv6

addresses, the server no longer listens on IPv6

addresses by default. To revert to the previous

behavior, specify "listen-on-v6 { any; };" in

the config file.

291. [func] Caching servers no longer send outgoing queries

over TCP just because the incoming recursive query

was a TCP one.

290. [cleanup] +twiddle option to dig (for testing only) removed.

289. [cleanup] dig is now installed in $bindir instead of $sbindir.

host is now installed in $bindir. (Be sure to remove

any $sbindir/dig from a previous release.)

288. [func] rndc is now installed by "make install" into $sbindir.

287. [bug] rndc now works again as "rndc 127.1 reload" (for

only that task). Parsing its configuration file and

using digital signatures for authentication has been

disabled until named supports the "controls" statement,

post-9.0.0.

286. [bug] On Solaris 2, when named inherited a signal state

where SIGHUP had the SIG_IGN action, SIGHUP would

be ignored rather than causing the server to reload

its configuration.

285. [bug] A change made to the dst API for beta4 inadvertently

broke OMAPI's creation of a dst key from an incoming

message, causing an assertion to be triggered. Fixed.

284. [func] The DNSSEC key generation and signing tools now

generate randomness from keyboard input on systems

that lack /dev/random.

283. [cleanup] The 'lwresd' program is now a link to 'named'.

282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is

too big for an unsigned long.

281. [bug] Fixed list of recognized config file category names.

280. [func] Add isc-config.sh, which can be used to more

easily build applications that link with

our libraries.

279. [bug] Private omapi function symbols shared between

two or more files in libomapi.a were not namespace

protected using the ISC convention of starting with

the library name and two underscores ("omapi__"...)

278. [bug] bin/named/logconf.c:category_fromconf() didn't take

note of when isc_log_categorybyname() wasn't able

to find the category name and would then apply the

channel list of the unknown category to all categories.

277. [bug] isc_log_categorybyname() and isc_log_modulebyname()

would fail to find the first member of any category

or module array apart from the internal defaults.

Thus, for example, the "notify" category was improperly

configured by named.

276. [bug] dig now supports maximum sized TCP messages.

275. [bug] The definition of lwres_gai_strerror() was missing

the lwres_ prefix.

274. [bug] TSIG AXFR verify failed when talking to a BIND 8

server.

273. [func] The default for the 'transfer-format' option is

now 'many-answers'. This will break zone transfers

to BIND 4.9.5 and older unless there is an explicit

'one-answer' configuration.

272. [bug] The sending of large TCP responses was canceled

in mid-transmission due to a race condition

caused by the failure to set the client object's

"newstate" variable correctly when transitioning

to the "working" state.

271. [func] Attempt to probe the number of cpus in named

if unspecified rather than defaulting to 1.

270. [func] Allow maximum sized TCP answers.

269. [bug] Failed DNSSEC validations could cause an assertion

failure by causing clone_results() to be called with

with hevent->node == NULL.

268. [doc] A plain text version of the Administrator

Reference Manual is now included in the distribution,

as doc/arm/Bv9ARM.txt.

267. [func] Nsupdate is now provided in the distribution.

266. [bug] zone.c:save_nsrrset() node was not initalized.

265. [bug] dns_request_create() now works for TCP.

264. [func] Dispatch can not take TCP sockets in connecting

state. Set DNS_DISPATCHATTR_CONNECTED when calling

dns_dispatch_createtcp() for connected TCP sockets

or call dns_dispatch_starttcp() when the socket is

connected.

263. [func] New logging channel type 'stderr'

channel some-name {

stderr;

severity error;

}

262. [bug] 'master' was not initalized in zone.c:stub_callback().

261. [func] Add dns_zone_markdirty().

260. [bug] Running named as a non-root user failed on Linux

kernels new enough to support retaining capabilities

after setuid().

259. [func] New random-device and random-seed-file statements

for global options block of named.conf. Both accept

a single string argument.

258. [bug] Fixed printing of lwres_addr_t.address field.

257. [bug] The server detached the last zone manager reference

too early, while it could still be in use by queries.

This manifested itself as assertion failures during the

shutdown process for busy name servers (RT #133).

256. [func] isc_ratelimiter_t now has attach/detach semantics, and

isc_ratelimiter_shutdown guarantees that the rate

limiter is detached from its task.

255. [func] New function dns_zonemgr_attach().

254. [bug] Suppress "query denied" messages on additional data

lookups.

--- 9.0.0b4 released ---

253. [func] resolv.conf parser now recognises ';' and '#' as

comments (anywhere in line, not just as the beginning).

252. [bug] resolv.conf parser mishandled masks on sortlists.

It also aborted when an unrecognized keyword was seen,

now it silently ignores the entire line.

251. [bug] lwresd caught an assertion failure on startup.

250. [bug] fixed handling of size+unit when value would be too

large for internal representation.

249. [cleanup] max-cache-size config option now takes a size-spec

like 'datasize', except 'default' is not allowed.

248. [bug] global lame-ttl option was not being printed when

config structures were written out.

247. [cleanup] Rename cache-size config option to max-cache-size.

246. [func] Rename global option cachesize to cache-size and

add corresponding option to view statement.

245. [bug] If an uncompressed name will take more than 255

bytes and the buffer is sufficiently long,

dns_name_fromwire should return DNS_R_FORMERR,

not ISC_R_NOSPACE. This bug caused cause the

server to catch an assertion failure when it

received a query for a name longer than 255

bytes.

244. [bug] empty named.conf file and empty options statement are

now parsed properly.

243. [func] new cachesize option for named.conf

242. [cleanup] fixed incorrect warning about auth-nxdomain usage.

241. [cleanup] nscount and soacount have been removed from the

dns_master_*() arguement lists.

240. [func] databases now come in three flavours: zone, cache

and stub.

239. [func] If ISC_MEM_DEBUG is enabled, the variable

isc_mem_debugging controls whether messages

are printed or not.

238. [cleanup] A few more compilation warnings have been quieted:

+ missing sigwait prototype on BSD/OS 4.0/4.0.1.

+ PTHREAD_ONCE_INIT unbraced initializer warnings on

Solaris 2.8.

+ IN6ADDR_ANY_INIT unbraced initializer warnings on

BSD/OS 4.*, Linux and Solaris 2.8.

237. [bug] If connect() returned ENOBUFS when the resolver was

initiating a TCP query, the socket didn't get

destroyed, and the server did not shut down cleanly.

236. [func] Added new listen-on-v6 config file statement.

235. [func] Consider it a config file error if a listen-on

statement has an IPv6 address in it, or a

listen-on-v6 statement has an IPv4 address in it.

234. [bug] Allow a trusted-key's first field (domain-name) be

either a quoted or an unquoted string, instead of

requiring a quoted string.

233. [cleanup] Convert all config structure integer values to unsigned

integer (isc_uint32_t) to match grammer.

232. [bug] Allow slave zones to not have a file.

231. [func] Support new 'port' clause in config file options

section. Causes 'listen-on', 'masters' and

'also-notify' statements to use its value instead of

default (53).

230. [func] Replace the dst sign/verify API with a cleaner one.

229. [func] Support config file sig-validity-interval statement

in options, views and zone statements (master

zones only).

228. [cleanup] Logging messages in config module stripped of

trailing period.

227. [cleanup] The enumerated identifiers dns_rdataclass_*,

dns_rcode_*, dns_opcode_*, and dns_trust_* are

also now cast to their appropriate types, as with

dns_rdatatype_* in item number 225 below.

226. [func] dns_name_totext() now always prints the root name as

'.', even when omit_final_dot is true.

225. [cleanup] The enumerated dns_rdatatype_* identifiers are now

cast to dns_rdatatype_t via macros of their same name

so that they are of the proper integral type wherever

a dns_rdatatype_t is needed.

224. [cleanup] The entire project builds cleanly with gcc's

-Wcast-qual and -Wwrite-strings warnings enabled,

which is now the default when using gcc. (Warnings

from confparser.c, because of yacc's code, are

unfortunately to be expected.)

223. [func] Several functions were reprototyped to qualify one

or more of their arguments with "const". Similarly,

several functions that return pointers now have

those pointers qualified with const.

222. [bug] The global 'also-notify' option was ignored.

221. [bug] An uninitialized variable was sometimes passed to

dns_rdata_freestruct() when loading a zone, causing

an assertion failure.

220. [cleanup] Set the default outgoing port in the view, and

set it in sockaddrs returned from the ADB.

[31-May-2000 explorer]

219. [bug] Signed truncated messages more correctly follow

the respective specs.

218. [func] When an rdataset is signed, its ttl is normalized

based on the signature validity period.

217. [func] Also-notify and trusted-keys can now be used in

the 'view' statement.

216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options

now work.

215. [bug] Failures at certain points in request processing

could cause the assertion INSIST(client->lockview

== NULL) to be triggered.

214. [func] New public function isc_netaddr_format(), for

formatting network addresses in log messages.

213. [bug] Don't leak memory when reloading the zone if

an update-policy clause was present in the old zone.

212. [func] Added dns_message_get/settsigkey, to make TSIG

key management reasonable.

211. [func] The 'key' and 'server' statements can now occur

inside 'view' statements.

210. [bug] The 'allow-transfer' option was ignored for slave

zones, and the 'transfers-per-ns' option was

was ignored for all zones.

209. [cleanup] Upgraded openssl files to new version 0.9.5a

208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value

of an isc_offset_t.

207. [func] The dnssec tools properly use the logging subsystem.

206. [cleanup] dst now stores the key name as a dns_name_t, not

a char *.

205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692

("prototyped function redeclared without prototype")

and 1552 ("variable ... set but not used") when

compiling in the lib/dns/sec/{dnssafe,openssl}

directories, which contain code imported from outside

sources.

204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker

to quiet the warnings that "The linked output may not

run on a PA 1.x system."

203. [func] notify and zone soa queries are now tsig signed when

appropriate.

202. [func] isc_lex_getsourceline() changed from returning int

to returning unsigned long, the type of its underlying

counter.

201. [cleanup] Removed the test/sdig program, it has been

replaced by bin/dig/dig.

--- 9.0.0b3 released ---

200. [bug] Failures in sending query responses to clients

(e.g., running out of network buffers) were

not logged.

199. [bug] isc_heap_delete() sometimes violated the heap

invariant, causing timer events not to be posted

when due.

198. [func] Dispatch managers hold memory pools which

any managed dispatcher may use. This allows

us to avoid dipping into the memory context for

most allocations. [19-May-2000 explorer]

197. [bug] When an incoming AXFR or IXFR completes, the

zone's internal state is refreshed from the

SOA data. [19-May-2000 explorer]

196. [func] Dispatchers can be shared easily between views

and/or interfaces. [19-May-2000 explorer]

195. [bug] Including the NXT record of the root domain

in a negative response caused an assertion

failure.

194. [doc] The PDF version of the Administrator's Reference

Manual is no longer included in the ISC BIND9

distribution.

193. [func] changed dst_key_free() prototype.

192. [bug] Zone configuration validation is now done at end

of config file parsing, and before loading

callbacks.

191. [func] Patched to compile on UnixWare 7.x. This platform

is not directly supported by the ISC.

190. [cleanup] The DNSSEC tools have been moved to a separate

directory dnssec/ and given the following new,

more descriptive names:

dnssec-keygen

dnssec-signzone

dnssec-signkey

dnssec-makekeyset

Their command line arguments have also been changed to

be more consistent. dnssec-keygen now prints the

name of the generated key files (sans extension)

on standard output to simplify its use in automated

scripts.

189. [func] isc_time_secondsastimet(), a new function, will ensure

that the number of seconds in an isc_time_t does not

exceed the range of a time_t, or return ISC_R_RANGE.

Similarly, isc_time_now(), isc_time_nowplusinterval(),

isc_time_add() and isc_time_subtract() now check the

range for overflow/underflow. In the case of

isc_time_subtract, this changed a calling requirement

(ie, something that could generate an assertion)

into merely a condition that returns an error result.

isc_time_add() and isc_time_subtract() were void-

valued before but now return isc_result_t.

188. [func] Log a warning message when an incoming zone transfer

contains out-of-zone data.

187. [func] isc_ratelimter_enqueue() has an additional arguement

'task'.

186. [func] dns_request_getresponse() has an additional arguement

'preserve_order'.

185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several

public functions did not have an isc__ prefix, and

referred to functions that had previously been

renamed.

184. [cleanup] Variables/functions which began with two leading

underscores were made to conform to the ANSI/ISO

standard, which says that such names are reserved.

183. [func] ISC_LOG_PRINTTAG option for log channels. Useful

for logging the program name or other identifier.

182. [cleanup] New commandline parameters for dnssec tools

181. [func] Added dst_key_buildfilename and dst_key_parsefilename

180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.

179. [func] options named.conf statement *must* now come

before any zone or view statements.

178. [func] Post-load of named.conf check verifies a slave zone

has non-empty list of masters defined.

177. [func] New per-zone boolean:

enable-zone yes | no ;

intended to let a zone be disabled without having

to comment out the entire zone statement.

176. [func] New global and per-view option:

max-cache-ttl number

175. [func] New global and per-view option:

additional-data internal | minimal | maximal;

174. [func] New public function isc_sockaddr_format(), for

formatting socket addresses in log messages.

173. [func] Keep a queue of zones waiting for zone transfer

quota so that a new transfer can be dispatched

immediately whenever quota becomes available.

172. [bug] $TTL directive was sometimes missing from dumped

master files because totext_ctx_init() failed to

initialize ctx->current_ttl_valid.

171. [cleanup] On NetBSD systems, the mit-pthreads or

unproven-pthreads library is now always used

unless --with-ptl2 is explicitly specified on

the configure command line. The

--with-mit-pthreads option is no longer needed

and has been removed.

170. [cleanup] Remove inter server consistancy checks from zone,

these should return as a seperate module in 9.1.

dns_zone_checkservers(), dns_zone_checkparents(),

dns_zone_checkchildren(), dns_zone_checkglue().

Remove dns_zone_setadb(), dns_zone_setresolver(),

dns_zone_setrequestmgr() these should now be found

via the view.

169. [func] ratelimiter can now process N events per interval.

168. [bug] include statements in named.conf caused syntax errors

due to not consuming the semicolon ending the include

statement before switching input streams.

167. [bug] Make lack of masters for a slave zone a soft error.

166. [bug] Keygen was overwriting existing keys if key_id

conflicted, now it will retry, and non-null keys

with key_id == 0 are not generated anymore. Key

was not able to generate NOAUTHCONF DSA key,

increased RSA key size to 2048 bits.

165. [cleanup] Silence "end-of-loop condition not reached" warnings

from Solaris compiler.

164. [func] Added functions isc_stdio_open(), isc_stdio_close(),

isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),

isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()

to encapsulate nonportable usage of errno and sync.

163. [func] Added result codes ISC_R_FILENOTFOUND and

ISC_R_FILEEXISTS.

162. [bug] Ensure proper range for arguments to ctype.h functions.

161. [cleanup] error in yyparse prototype that only HPUX caught.

160. [cleanup] getnet*() are not going to be implemented at this

stage.

159. [func] Redefinition of config file elements is now an

error (instead of a warning).

158. [bug] Log channel and category list copy routines

weren't assigning properly to output parameter.

157. [port] Fix missing prototype for getopt().

156. [func] Support new 'database' statement in zone.

database "quoted-string";

155. [bug] ns_notify_start() was not detaching the found zone.

154. [func] The signer now logs libdns warnings to stderr even when

not verbose, and in a nicer format.

153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'

is NULL then you need to preserve the 'rdata' until

you have finished using the structure as there may be

references to the associated memory. If 'mctx' is

non-NULL it is guaranteed that there are no references

to memory associated with 'rdata'.

dns_rdata_freestruct() must be called if 'mctx' was

non-NULL and may safely be called if 'mctx' was NULL.

152. [bug] keygen dumped core if domain name argument was omitted

from command line.

151. [func] Support 'disabled' statement in zone config (causes

zone to be parsed and then ignored). Currently must

come after the 'type' clause.

150. [func] Support optional ports in masters and also-notify

statements:

masters [ port xxx ] { y.y.y.y [ port zzz ] ; }

149. [cleanup] Removed usused argument 'olist' from

dns_c_view_unsetordering().

148. [cleanup] Stop issuing some warnings about some configuration

file statements that were not implemented, but now are.

147. [bug] Changed yacc union size to be smaller for yaccs that

put yacc-stack on the real stack.

146. [cleanup] More general redundant header file cleanup. Rather

than continuing to itemize every header which changed,

this changelog entry just notes that if a header file

did not need another header file that it was including

in order to provide its advertized functionality, the

inclusion of the other header file was removed. See

util/check-includes for how this was tested.

145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/

ISC_LANG_ENDDECLS to header files that had function

prototypes, and removed it from those that did not.

144. [cleanup] libdns header files too numerous to name were made

to conform to the same style for multiple inclusion

protection.

143. [func] Added function dns_rdatatype_isknown().

142. [cleanup] <isc/stdtime.h> does not need <time.h> or

<isc/result.h>.

141. [bug] Corrupt requests with multiple questions could

cause an assertion failure.

140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.

139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of

<isc/int.h> and <isc/result.h>.

138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and

renamed isc_string_touint64. isc_strsep moved from

strsep.c to string.c and renamed isc_string_separate.

137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>

<isc/serial.h>, <isc/string.h> and <isc/offset.h>

made to conform to the same style for multiple

inclusion protection.

136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,

<isc/net.h> and Win32's <isc/thread.h> needed

ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS.

135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>

or <isc/boolean.h>, now uses <isc/types.h> in place

of <isc/time.h>, and needed ISC_LANG_BEGINDECLS

and ISC_LANG_ENDDECLS.

134. [cleanup] <isc/dir.h> does not need <limits.h>.

133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.

132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does

need <isc/eventclass.h>.

131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>

for ISC_R_* codes used in macros.

130. [cleanup] <isc/condition.h> does not need <pthread.h> or

<isc/boolean.h>, and now includes <isc/types.h>

instead of <isc/time.h>.

129. [bug] The 'default_debug' log channel was not set up when

'category default' was present in the config file

128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of

ISC_LANG_ENDDECLS at end of header.

127. [cleanup] The contracts for the comparision routines

dns_name_fullcompare(), dns_name_compare(),

dns_name_rdatacompare(), and dns_rdata_compare() now

specify that the order value returned is < 0, 0, or > 0

instead of -1, 0, or 1.

126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.

125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,

<isc/mutex.h>, <isc/once.h>, <isc/region.h>, and

<isc/resultclass.h> do not need <isc/lang.h>.

124. [func] signer now imports parent's zone key signature

and creates null keys/sets zone status bit for

children when necessary

123. [cleanup] <isc/event.h> does not need <stddef.h>.

122. [cleanup] <isc/task.h> does not need <isc/mem.h> or

<isc/result.h>.

121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or

<isc/result.h>. Multiple inclusion protection

symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.

isc_symtab_t moved to <isc/types.h>.

120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,

<isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or

<isc/net.h>.

119. [cleanup] structure definitions for generic rdata stuctures do

not have _generic_ in their names.

118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting

YACC crust (yyparse, etc) [2000-apr-27 explorer]

117. [cleanup] libdns.a changes:

dns_zone_clearnotify() and dns_zone_addnotify()

are replaced by dns_zone_setnotifyalso().

dns_zone_clearmasters() and dns_zone_addmaster()

are replaced by dns_zone_setmasters().

116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t

on Unix systems).

115. [port] Shut up the -Wmissing-declarations warning about

<stdio.h>'s __sputaux on BSD/OS pre-4.1.

114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or

<isc/list.h>.

113. [func] Utility programs dig and host added.

112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.

111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or

<isc/mutex.h>.

110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or

<isc/list.h>.

109. [bug] "make depend" did nothing for

bin/tests/{db,mem,sockaddr,tasks,timers}/.

108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from

<dns/types.h> to <dns/bit.h> and renamed to

DNS_BIT_SET/DNS_BIT_GET/DNS_BIT_CLEAR.

107. [func] Add keysigner and keysettool.

106. [func] Allow dnssec verifications to ignore the validity

period. Used by several of the dnssec tools.

105. [doc] doc/dev/coding.html expanded with other

implicit conventions the developers have used.

104. [bug] Made compress_add and compress_find static to

lib/dns/compress.c.

103. [func] libisc buffer API changes for <isc/buffer.h>:

Added:

isc_buffer_base(b) (pointer)

isc_buffer_current(b) (pointer)

isc_buffer_active(b) (pointer)

isc_buffer_used(b) (pointer)

isc_buffer_length(b) (int)

isc_buffer_usedlength(b) (int)

isc_buffer_consumedlength(b) (int)

isc_buffer_remaininglength(b) (int)

isc_buffer_activelength(b) (int)

isc_buffer_availablelength(b) (int)

Removed:

ISC_BUFFER_USEDCOUNT(b)

ISC_BUFFER_AVAILABLECOUNT(b)

isc_buffer_type(b)

Changed names:

isc_buffer_used(b, r) ->

isc_buffer_usedregion(b, r)

isc_buffer_available(b, r) ->

isc_buffer_available_region(b, r)

isc_buffer_consumed(b, r) ->

isc_buffer_consumedregion(b, r)

isc_buffer_active(b, r) ->

isc_buffer_activeregion(b, r)

isc_buffer_remaining(b, r) ->

isc_buffer_remainingregion(b, r)

Buffer types were removed, so the ISC_BUFFERTYPE_*

macros are no more, and the type argument to

isc_buffer_init and isc_buffer_allocate were removed.

isc_buffer_putstr is now void (instead of isc_result_t)

and requires that the caller ensure that there

is enough available buffer space for the string.

102. [port] Correctly detect inet_aton, inet_pton and inet_ptop

on BSD/OS 4.1.

101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.

100. [cleanup] <isc/random.h> does not need <isc/int.h> or

<isc/mutex.h>. isc_random_t moved to <isc/types.h>.

99. [cleanup] Rate limiter now has separate shutdown() and

destroy() functions, and it guarantees that all

queued events are delivered even in the shutdown case.

98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>

unless ISC_PLATFORM_NEEDVSNPRINTF is defined.

97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or

<isc/event.h>.

96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.

95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.

94. [cleanup] Some installed header files did not compile as C++.

93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.

92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,

or <isc/result.h>.

91. [cleanup] <isc/log.h> does not need <sys/types.h> or

<isc/result.h>.

90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS

from <named/listenlist.h>.

89. [cleanup] <isc/lex.h> does not need <stddef.h>.

88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or

<isc/mem.h>. isc_interface_t and isc_interfaceiter_t

moved to <isc/types.h>.

87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,

<isc/mem.h> or <isc/result.h>.

86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to

<isc/types.h>.

85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,

<isc/list.h>, <isc/mem.h>, <isc/region.h> or

<isc/int.h>.

84. [func] allow-query ACL checks now apply to all data

added to a response.

83. [func] If the server is authoritative for both a

delegating zone and its (nonsecure) delegatee, and

a query is made for a KEY RR at the top of the

delegatee, then the server will look for a KEY

in the delegator if it is not found in the delegatee.

82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.

81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need

<isc/lang.h>.

80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.

79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.

78. [cleanup] lwres_conftest renamed to lwresconf_test for

consistency with other *_test programs.

77. [cleanup] typedef of isc_time_t and isc_interval_t moved from

<isc/time.h> to <isc/types.h>.

76. [cleanup] Rewrote keygen.

75. [func] Don't load a zone if its database file is older

than the last time the zone was loaded.

74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,

subsumed by file.o.

73. [func] New "file" API in libisc, including new function

isc_file_getmodtime, isc_mktemplate renamed to

isc_file_mktemplate and isc_ufile renamed to

isc_file_openunique. By no means an exhaustive API,

it is just what's needed for now.

72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS

added for dns_rbt_findnode, the former to disable the

setting of the chain to the predecessor, and the

latter to make clear when no options are set.

71. [cleanup] Made explicit the implicit REQUIREs of

isc_time_seconds, isc_time_nanoseconds, and

isc_time_subtract.

70. [func] isc_time_set() added.

69. [bug] The zone object's master and also-notify lists grew

longer with each server reload.

68. [func] Partial support for SIG(0) on incoming messages.

67. [performance] Allow use of alternate (compile-time supplied)

OpenSSL libraries/headers.

66. [func] Data in authoritative zones should have a trust level

beyond secure.

65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t

from <dns/types.h>.

64. [func] The RBT, DB, and zone table APIs now allow the

caller find the most-enclosing superdomain of

a name.

63 [func] Generate NOTIFY messages.

62. [func] Add UDP refresh support.

61. [cleanup] Use single quotes consistently in log messages.

60. [func] Catch and disallow singleton types on message

parse.

59. [bug] Cause net/host unreachable to be a hard error

when sending and receiving.

58. [bug] bin/named/query.c could sometimes trigger the

(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)

== 0 assertion in query_newname().

57. [func] Added dns_nxt_typepresent()

56. [bug] SIG records were not properly returned in cached

negative answers.

55. [bug] Responses containing multiple names in the authority

section were not negatively cached.

54. [bug] If a fetch with sigrdataset==NULL joined one with

sigrdataset!=NULL or vice versa, the resolver

could catch an assertion or lose signature data,

respectively.

53. [port] freebsd 4.0: lib/isc/unix/socket.c requires

<sys/param.h>.

52. [bug] rndc: taskmgr and socketmgr were not initialized

to NULL.

51. [cleanup] dns/compress.h and dns/zt.h did not need to include

dns/rbt.h; it was needed only by compress.c and zt.c.

50. [func] RBT deletion no longer requires a valid chain to work,

and dns_rbt_deletenode was added.

49. [func] Each cache now has its own mctx.

48. [func] isc_task_create() no longer takes an mctx.

isc_task_mem() has been eliminated.

47. [func] A number of modules now use memory context reference

counting.

46. [func] Memory contexts are now reference counted.

Added isc_mem_inuse() and isc_mem_preallocate().

Renamed isc_mem_destroy_check() to

isc_mem_setdestroycheck().

45. [bug] The trusted-key statement incorrectly loaded keys.

44. [bug] Don't include authority data if it would force us

to unset the AD bit in the message.

43. [bug] DNSSEC verification of cached rdatasets was failing.

42. [cleanup] Simplified logging of messages with embedded domain

names by introducing a new convenience function

dns_name_format().

41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later

to allow 'named' to run as a non-root user while

retaining the ability to bind() to privileged

ports.

40. [func] Introduced new logging category "dnssec" and

logging module "dns/validator".

39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,

and isc_lex_t to <isc/types.h>.

38. [bug] TSIG signed incoming zone transfers work now.

37. [bug] If the first RR in an incoming zone transfer was

not an SOA, the server died with an assertion failure

instead of just reporting an error.

36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS

35. [performance] Log messages which are of a level too high to be

logged by any channel in the logging configuration

will not cause the log mutex to be locked.

34. [bug] Recursion was allowed even with 'recursion no'.

33. [func] The RBT now maintains a parent pointer at each node.

32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()

prototype.

31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.

30. [func] config file grammer change to support optional

class type for a view.

29. [func] support new config file view options:

auth-nxdomain recursion query-source

query-source-v6 transfer-source

transfer-source-v6 max-transfer-time-out

max-transfer-idle-out transfer-format

request-ixfr provide-ixfr cleaning-interval

fetch-glue notify rfc2308-type1 lame-ttl

max-ncache-ttl min-roots

28. [func] support lame-ttl, min-roots and serial-queries

config global options.

27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.

Including it on other platforms (eg, NetBSD) can

cause a forced #error from the C preprocessor.

26. [func] new match-clients statement in config file view.

25. [bug] make install failed to install <isc/log.h> and

<isc/ondestroy.h>.

24. [cleanup] Eliminate some unnecessary #includes of header

files from header files.

23. [cleanup] Provide more context in log messages about client

requests, using a new function ns_client_log().

22. [bug] SIGs weren't returned in the answer section when

the query resulted in a fetch.

21. [port] Look at STD_CINCLUDES after CINCLUDES during

compilation, so additional system include directories

can be searched but header files in the bind9 source

tree with conflicting names take precedence. This

avoids issues with installed versions of dnssafe and

openssl.

20. [func] Configuration file post-load validation of zones

failed if there were no zones.

19. [bug] dns_zone_notifyreceive() failed to unlock the zone

lock in certain error cases.

18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in

configure.in to check for presence of in6addr_any.

17. [func] Do configuration file post-load validation of zones.

16. [bug] put quotes around key names on config file

output to avoid possible keyword clashes.

15. [func] Add dns_name_dupwithoffsets(). This function is

improves comparison performance for duped names.

14. [bug] free_rbtdb() could have 'put' unallocated memory in

an unlikely error path.

13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore

out-of-zone data.

12. [bug] Fixed possible unitialized variable error.

11. [bug] axfr_rrstream_first() didn't check the result code of

db_rr_iterator_first(), possibly causing an assertion

to be triggered later.

10. [bug] A bug in the code which makes EDNS0 OPT records in

bin/named/client.c and lib/dns/resolver.c could

trigger an assertion.

9. [cleanup] replaced bit-setting code in confctx.c and replaced

repeated code with macro calls.

8. [bug] Shutdown of incoming zone transfer accessed

freed memory.

7. [cleanup] removed 'listen-on' from view statement.

6. [bug] quote RR names when generating config file to

prevent possible clash with config file keywords

(such as 'key').

5. [func] syntax change to named.conf file: new ssu grant/deny

statements must now be enclosed by an 'update-policy'

block.

4. [port] bin/named/unix/os.c didn't compile on systems with

linux 2.3 kernel includes due to conflicts between

C library includes and the kernel includes. We now

get only what we need from <linux/capability.h>, and

avoid pulling in other linux kernel .h files.

3. [bug] TKEYs go in the answer section of responses, not

the additional section.

2. [bug] Generating cryptographic randomness failed on

systems without /dev/random.

1. [bug] The installdirs rule in

lib/isc/unix/include/isc/Makefile.in had a typo which

prevented the isc directory from being created if it

didn't exist.

--- 9.0.0b2 released ---

# This tells Emacs to use hard tabs in this file.

# Local Variables:

# indent-tabs-mode: t

# End: