CHANGES revision 387f5e872d40426acbc739d2e9b2bb37c123dd56
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews4632. [security] The BIND installer on Windows used an unquoted
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews service path, which can enable privilege escalation.
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews (CVE-2017-3141) [RT #45229]
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews4631. [security] Some RPZ configurations could go into an infinite
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews query loop when encountering responses with TTL=0.
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews (CVE-2017-3140) [RT #45181]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews4630. [bug] "dyndb" is dependent on dlopen existing / being
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews enabled. [RT #45291]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews4629. [bug] dns_client_startupdate could not be called with a
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews running client. [RT #45277]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews4628. [bug] Fixed a potential reference leak in query_getdb().
437404e8313481329baa5897eeda8c45bf748553Mark Andrews4626. [test] Added more tests for handling of different record
437404e8313481329baa5897eeda8c45bf748553Mark Andrews ordering in CNAME and DNAME responses. [QA #430]
841fc0fd70881499b62f15e35980dd14b905ba45Mark Andrews4625. [bug] Running "rndc addzone" and "rndc delzone" at close
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews to the same time could trigger a deadlock if using
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews LMDB. [RT #45209]
afa3f2fab7144761bbf481b9d40d667529c6ec76Mark Andrews4623. [bug] Use --with-protobuf-c and --with-libfstrm to find
afa3f2fab7144761bbf481b9d40d667529c6ec76Mark Andrews protoc-c and fstrm_capture. [RT #45187]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein4622. [bug] Remove unnecessary escaping of semicolon in CAA and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein URI records. [RT #45216]
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews4621. [port] Force alignment of oid arrays to silence loader
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews warnings. [RT #45131]
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews4620. [port] Handle EPFNOSUPPORT being returned when probing
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews to see if a socket type is supported. [RT #45214]
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews4619. [bug] Call isc_mem_put instead of isc_mem_free in
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein bin/named/server.c:setup_newzones. [RT #45202]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein4618. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Add logging for lmdb call failures. [RT #45204]
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews4617. [test] Update rndc system test to be more delay tolerant.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4616. [bug] When using LMDB, zones deleted using "rndc delzone"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews were not correctly removed from the new-zone
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews database. [RT #45185]
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews4615. [bug] AD could be set on truncated answer with no records
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews present in the answer and authority sections.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews4614. [test] Fixed an error in the sockaddr unit test. [RT #45146]
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews4612. [bug] Silence 'may be use uninitalised' warning and simplify
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews the code in lwres/getaddinfo:process_answer.
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews4611. [bug] The default LMDB mapsize was too low and caused
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews errors after few thousand zones were added using
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews rndc addzone. A new config option "lmdb-mapsize"
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews has been introduced to configure the LMDB
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews mapsize depending on operational needs.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews4609. [cleanup] Rearrange makefiles to enable parallel execution
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews (i.e. "make -j"). [RT #45078]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews4608. [func] DiG now warns about .local queries which are reserved
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews for Multicast DNS. [RT #44783]
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews4606. [port] Stop using experimental "Experimental keys on scalar"
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews feature of perl as it has been removed. [RT #45012]
30884083d4149a8ff838b84dac1ad55c86948da8Mark Andrews4604. [bug] Don't use ERR_load_crypto_strings() when building
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews with OpenSSL 1.1.0. [RT #45117]
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews4603. [doc] Automatically generate named.conf(5) man page
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews from doc/misc/options. Thanks to Tony Finch.
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews4602. [func] Threads are now set to human-readable
5a6874e4ed544186ccb8519765be8c3a1804e033Mark Andrews names to assist debugging, when supported by
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews the OS. [RT #43234]
2ab6dfca4b7432de4fb7da4cd21ee0e02a695c01Mark Andrews4601. [bug] Reject incorrect RSA key lengths during key
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews generation and and sign/verify context
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews creation. [RT #45043]
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews4600. [bug] Adjust RPZ trigger counts only when the entry
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews being deleted exists. [RT #43386]
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews4599. [bug] Fix inconsistencies in inline signing time
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews comparison that were introduced with the
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews introduction of rdatasetheader->resign_lsb.
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews4597. [bug] The validator now ignores SHA-1 DS digest type
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews when a DS record with SHA-384 digest type is
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews present and is a supported digest type.
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews4596. [bug] Validate glue before adding it to the additional
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews section. This also fixes incorrect TTL capping
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews when the RRSIG expired earlier than the TTL.
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews4593. [doc] Update README using markdown, remove outdated FAQ
52188225731669cd571984c45a1407a55c74ee78Mark Andrews file in favor of the knowledge base.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews4592. [bug] A race condition on shutdown could trigger an
52188225731669cd571984c45a1407a55c74ee78Mark Andrews assertion failure in dispatch.c. [RT #43822]
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews4591. [port] Addressed some python 3 compatibility issues.
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews Thanks to Ville Skytta. [RT #44955] [RT #44956]
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews4590. [bug] Support for PTHREAD_MUTEX_ADAPTIVE_NP was not being
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews properly detected. [RT #44871]
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews4589. [cleanup] "configure -q" is now silent. [RT #44829]
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews4588. [bug] nsupdate could send queries for TKEY to the wrong
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews server when using GSSAPI. Thanks to Tomas Hozza.
6d7007e807241ae0a32de8db8d3bf434626026eaMark Andrews4587. [bug] named-checkzone failed to handle occulted data below
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews DNAMEs correctly. [RT #44877]
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews4586. [func] dig, host and nslookup now use TCP for ANY queries.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews4585. [port] win32: Set CompileAS value. [RT #42474]
25899e7f1ff0db5322362ada01f7aec3006ff0beTatuya JINMEI 神明達哉4584. [bug] A number of memory usage statistics were not properly
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews reported when they exceeded 4G. [RT #44750]
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews4574. [bug] Dig leaked memory with multiple +subnet options.
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews4555. [func] dig +ednsopt: EDNS options can now be specified by
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews name in addition to numeric value. [RT #44461]
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews --- 9.11.1 released ---
5cf023372424c1a59fda4a994e3c85c08c26e2f1Tatuya JINMEI 神明達哉 --- 9.11.1rc3 released ---
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews4582. [security] 'rndc ""' could trigger a assertion failure in named.
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews (CVE-2017-3138) [RT #44924]
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews4581. [port] Linux: Add getpid and getrandom to the list of system
073dfc245fd921958b1ccd869ed3471f828cf283Mark Andrews calls named uses for seccomp. [RT #44883]
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews4580. [bug] 4578 introduced a regression when handling CNAME to
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews referral below the current domain. [RT #44850]
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews --- 9.11.1rc2 released ---
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews4578. [security] Some chaining (CNAME or DNAME) responses to upstream
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews queries could trigger assertion failures.
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews (CVE-2017-3137) [RT #44734]
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews4575. [security] DNS64 with "break-dnssec yes;" can result in an
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews assertion failure. (CVE-2017-3136) [RT #44653]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews --- 9.11.1rc1 released ---
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews4571. [bug] Out-of-tree builds of backtrace_test failed.
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews4570. [cleanup] named did not correctly fall back to the built-in
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews initializing keys if the bind.keys file was present
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews but empty. [RT #44531]
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews4569. [func] Store both local and remote addresses in dnstap
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews logging, and modify dnstap-read output format to
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews print them. [RT #43595]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews4568. [contrib] Added a --with-bind option to the dnsperf configure
28b65e6d0a03704f4faee88ebf5105addfa57968Mark Andrews script to specify BIND prefix path.
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews4567. [port] Call getprotobyname and getservbyname prior to calling
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews chroot so that shared libraries get loaded. [RT #44537]
14a97c343bc3adb840b13d515a8298c18f15be52Mark Andrews4565. [cleanup] The inline macro versions of isc_buffer_put*()
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews did not implement automatic buffer reallocation.
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews4564. [maint] Update the built in managed keys to include the
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews upcoming root KSK. [RT #44579]
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews4563. [bug] Modified zones would occasionally fail to reload.
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews4561. [port] Silence a warning in strict C99 compilers. [RT #44414]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews4560. [bug] mdig: add -m option to enable memory debugging rather
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews than having it on all the time. [RT #44509]
cdb15282589682b664dfb70428a3c1750fe05250Mark Andrews4559. [bug] openssl_link.c didn't compile if ISC_MEM_TRACKLINES
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews was turned off. [RT #44509]
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews4558. [bug] Synthesised CNAME before matching DNAME was still
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews being cached when it should not have been. [RT #44318]
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews4557. [security] Combining dns64 and rpz can result in dereferencing
4c47c184b98a5ec1b303281959c1f3b0db85d733Mark Andrews a NULL pointer (read). (CVE-2017-3135) [RT#44434]
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews4553. [bug] Named could deadlock there were multiple changes to
c04f4437ff8b2aba326e5099eae0cacb7de6f74bMark Andrews NSEC/NSEC3 parameters for a zone being processed at
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews the same time. [RT #42770]
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews4552. [bug] Named could trigger a assertion when sending notify
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews messages. [RT #44019]
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews4551. [test] Add system tests for integrity checks of MX and
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews SRV records. [RT #43953]
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews4550. [cleanup] Increased the number of available master file
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews output style flags from 32 to 64. [RT #44043]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews4547. [port] Add support for --enable-native-pkcs11 on the AEP
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews Keyper HSM. [RT #42463]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews --- 9.11.1b1 released ---
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews4545. [func] Expand YAML output from dnstap-read to include
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews a detailed breakdown of the DNS message contents.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews4544. [bug] Add message/payload size to dnstap-read YAML output.
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews4543. [bug] dns_client_startupdate now delays sending the update
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews request until isc_app_ctxrun has been called.
b68fe6c0fbfee1dc0659661993de5c6727b66c76Mark Andrews4541. [bug] rndc addzone should properly reject non master/slave
70e854766f5304f43e94212dc38ebaefe214148cMark Andrews zones. [RT #43665]
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews4539. [bug] Referencing a nonexistent zone with RPZ could lead
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews to a assertion failure when configuring. [RT #43787]
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews4538. [bug] Call dns_client_startresolve from client->task.
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews4537. [bug] Handle timeouts better in dig/host/nslookup. [RT #43576]
5173d52b3eb9715259a2890614f869c6baeb18e1Mark Andrews4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews when reusing the event structure. [RT #43885]
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews4535. [bug] Address race condition in setting / testing of
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews DNS_REQUEST_F_SENDING. [RT #43889]
d5f13fecca944fc7229dac3215581cebec3ac314Mark Andrews4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
d844741f5516bce45f8897435342731edb2307cbMark Andrews4533. [bug] dns_client_update should terminate on prerequisite
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews and also on BADZONE. [RT #43865]
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews4531. [security] 'is_zone' was not being properly updated by redirect2
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews and subsequently preserved leading to an assertion
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews failure. (CVE-2016-9778) [RT #43837]
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews in responses resulting in SERVFAIL being returned.
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews4529. [cleanup] Silence noisy log warning when DSCP probe fails
e9a0e12b2b732285e00e0d9436961d0fe3655aa6Mark Andrews due to firewall rules. [RT #43847]
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews4528. [bug] Only set the flag bits for the i/o we are waiting
23f2338819fd1a38a828b417eb05be95207e76e2Mark Andrews for on EPOLLERR or EPOLLHUP. [RT #43617]
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews4526. [doc] Corrected errors and improved formatting of
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews grammar definitions in the ARM. [RT #43739]
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews4525. [doc] Fixed outdated documentation on managed-keys.
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews4524. [bug] The net zero test was broken causing IPv4 servers
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews with addresses ending in .0 to be rejected. [RT #43776]
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews4523. [doc] Expand config doc for <querysource4> and
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews <querysource6>. [RT #43768]
71e7ac828e9f4f2b124455b00c3d11560aa5d4c1Mark Andrews4522. [bug] Handle big gaps in log file version numbers better.
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews4521. [cleanup] Log it as an error if an entropy source is not
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews found and there is no fallback available. [RT #43659]
3aca8e5bf3740bbcc3bb13dde242d7cc369abb27Mark Andrews4520. [cleanup] Alphabetize more of the grammar when printing it
f34970d390482ceea61bd4d5bcd6ead7828157daMark Andrews out. Fix unbalanced indenting. [RT #43755]
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews4517. [security] Named could mishandle authority sections that were
e9e869569a92c4b1d5339d3bfb22232e5b401db1Mark Andrews missing RRSIGs triggering an assertion failure.
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews (CVE-2016-9444) [RT # 43632]
6f1ad0fc645250c240f21a9201e8cdb0f263c218Mark Andrews4516. [bug] isc_socketmgr_renderjson was missing from the
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews windows build. [RT #43602]
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews4515. [port] FreeBSD: Find readline headers when they are in
783707ee556191b974e951f04accf09f443f5fdfMark Andrews edit/readline/ instead of readline/. [RT #43658]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews4510. [security] Named mishandled some responses where covering RRSIG
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews records are returned without the requested data
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews resulting in a assertion failure. (CVE-2016-9147)
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews4509. [test] Make the rrl system test more reliable on slower
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews machines by using mdig instead of dig. [RT #43280]
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews4508. [security] Named incorrectly tried to cache TKEY records which
cd0a7c71c0edd9540a7e917a2389a3ad0accc835Mark Andrews could trigger a assertion failure when there was
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews a class mismatch. (CVE-2016-9131) [RT #43522]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews4507. [bug] Named could incorrectly log 'allows updates by IP
c1807114ce574896694e3f449c73b098fe91730fMark Andrews address, which is insecure' [RT #43432]
0066165079c7d85033f4b623153e404df31b9c75Mark Andrews4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews4504. [security] Allow the maximum number of records in a zone to
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews be specified. This provides a control for issues
055597532db52233e80f617b8b015e8caadcb577Mark Andrews raised in CVE-2016-6170. [RT #42143]
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews4503. [cleanup] "make uninstall" now removes files installed by
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews BIND. (This currently excludes Python files
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews due to lack of support in setup.py.) [RT #42912]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews4502. [func] Report multiple and experimental options when printing
055597532db52233e80f617b8b015e8caadcb577Mark Andrews grammar. [RT #43134]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews4499. [port] MacOSX: silence deprecated function warning
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews by using arc4random_stir() when available
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews instead of arc4random_addrandom(). [RT #43503]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews4498. [test] Simplify prerequisite checks in system tests.
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews4496. [func] dig: add +idnout to control whether labels are
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews display in punycode or not. Requires idn support
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews to be enabled at compile time. [RT #43398]
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews4495. [bug] A isc_mutex_init call was not being checked.
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews4494. [bug] Look for <editline/readline.h>. [RT #43429]
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews SO_TARGETS. [RT# 43336]
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews4492. [bug] irs_resconf_load failed to initialize sortlistnxt
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews causing bad writes if resolv.conf contained a
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews sortlist directive. [RT #43459]
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews4491. [bug] Improve message emitted when testing whether sendmsg
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews works with TOS/TCLASS fails. [RT #43483]
5ec95dc3cbba160d03be874941930bdf3e515bbdMark Andrews4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews4489. [security] It was possible to trigger assertions when processing
aeb33b58e1979b716d1eb0521df8bc3a0aa41a52Mark Andrews a response containing a DNAME answer. (CVE-2016-8864)
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews4487. [test] Make system tests work on Windows. [RT #42931]
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews the python modules we install. [RT #43330]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews4485. [bug] Failure to find readline when requested should be
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews fatal to configure. [RT #43328]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews4484. [func] Check prefixes in acls to make sure the address and
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews prefix lengths are consistent. Warn only in
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews BIND 9.11 and earlier. [RT #43367]
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews4483. [bug] Address use before require check and remove extraneous
4b030f887e5e51c00dac499682d0b5b870ece45bMark Andrews dns_message_gettsigkey call in dns_tsig_sign.
561863ed947f18c8bfcaa631ad83a6bee3b7200bMark Andrews4482. [cleanup] Change #4455 was incomplete. [RT #43252]
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews4478. [func] Add +continue option to mdig, allow continue on socket
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews errors. [RT #43281]
7a1cba6262f099aa5ecf9ed4db9c0345489653ccMark Andrews4477. [test] Fix mkeys test timing issues. [RT #41028]
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews4476. [test] Fix reclimit test on slower machines. [RT #43283]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews4475. [doc] Update named-checkconf documentation. [RT #43153]
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews getprotobyname and getservbyname work. [RT #43197]
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews4472. [bug] Named could fail to find the correct NSEC3 records when
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews a zone was updated between looking for the answer and
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews looking for the NSEC3 records proving nonexistence
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews of the answer. [RT #43247]
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews --- 9.11.0 released ---
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews --- 9.11.0rc3 released ---
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews4471. [cleanup] Render client/query logging format consistent for
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews ease of log file parsing. (Note that this affects
41be71bae48846d9525be6f71e19944e34748e26Mark Andrews "querylog" format: there is now an additional field
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews indicating the client object address.) [RT #43238]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews4470. [bug] Reset message with intent parse before
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews calling dns_dispatch_getnext. [RT #43229]
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews --- 9.11.0rc2 released ---
4f32995bf6af48ab410b6d14b160348f5ffe0556Mark Andrews4468. [bug] Address ECS option handling issues. [RT #43191]
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews4467. [security] It was possible to trigger an assertion when
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews rendering a message. (CVE-2016-2776) [RT #43139]
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews4466. [bug] Interface scanning didn't work on a Windows system
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews without a non local IPv6 addresses. [RT #43130]
23ac30603a7639bea1d331537634b079b046b122Mark Andrews4465. [bug] Don't use "%z" as Windows doesn't support it.
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews4464. [bug] Fix windows python support. [RT #43173]
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews4463. [bug] The dnstap system test failed on some systems.
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews4462. [bug] Don't describe a returned EDNS COOKIE as "good"
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews when there isn't a valid server cookie. [RT #43167]
326449ec24b069f5ef59c8e282ae22a50aa27049Mark Andrews4461. [bug] win32: not all external data was properly marked
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews as external data for windows dll. [RT #43161]
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews --- 9.11.0rc1 released ---
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews4460. [test] Add system test for dnstap using unix domain sockets.
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews4459. [bug] TCP client objects created to handle pipeline queries
825fccf631aa71cfbb8bfcf4e2009ca21de28f36Mark Andrews were not cleaned up correctly, causing uncontrolled
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews memory growth. [RT #43106]
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews4458. [cleanup] Update assertions to be more correct, and also remove
689023771c563d8660e45d439a207e06e96de28fMark Andrews use of a reserved word. [RT #43090]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
3a1d86e8f51c953c2407e112e15b47328b6ee4feMark Andrews4455. [cleanup] Allow dyndb modules to correctly log the filename
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews and line number when processing configuration text
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews from named.conf. [RT #43050]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉4453. [bug] Prefetching of DS records failed to update their
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews RRSIGs. [RT #42865]
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews4452. [bug] The default key manager policy file is now
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews <sysdir>/dnssec-policy.conf (usually
e37dff26c6bb6e2ffbba7b089ca3599d5e3e04fbMark Andrews4451. [cleanup] Log more useful information if a PKCS#11 provider
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews library cannot be loaded. [RT #43076]
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews4450. [port] Provide more nuanced HSM support which better matches
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews the specific PKCS11 providers capabilities. [RT #42458]
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews4449. [test] Fix catalog zones test on slower systems. [RT #42997]
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews4448. [bug] win32: ::1 was not being found when iterating
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews interfaces. [RT #42993]
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews4447. [tuning] Allow the fstrm_iothr_init() options to be set using
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews named.conf to control how dnstap manages the data
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews flow. [RT #42974]
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews4446. [bug] The cache_find() and _findrdataset() functions
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews could find rdatasets that had been marked stale.
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews4445. [cleanup] isc_errno_toresult() can now be used to call the
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews formerly private function isc__errno2result().
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews4444. [bug] Fixed some issues related to dyndb: A bug caused
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews braces to be omitted when passing configuration text
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein from named.conf to a dyndb driver, and there was a
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein use-after-free in the sample dyndb driver. [RT #43050]
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews TCP sockets. [RT #42864]
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews tree data structure with overlapping networks
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews (longest prefix match was ineffective).
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews4441. [cleanup] Alphabetize host's help output. [RT #43031]
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews4440. [func] Enable TCP fast open support when available on the
3b2032121d6e8ae1f4ad24b31a69e1a4b33c91a0Mark Andrews server side. [RT #42866]
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews4439. [bug] Address race conditions getting ownernames of nodes.
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews4438. [func] Use LIFO rather than FIFO when processing startup
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews notify and refresh queries. [RT #42825]
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews4437. [func] Minimal-responses now has two additional modes
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews no-auth and no-auth-recursive which suppress
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews adding the NS records to the authority section
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews as well as the associated address records for the
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews nameservers. [RT #42005]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews4436. [func] Return TLSA records as additional data for MX and SRV
bb3e43000807197e776407fd8d524a87dcc17a10Mark Andrews lookups. [RT #42894]
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews will not fit into a single IPv4 encapsulated IPv6
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews UDP packet when transmitted over a Ethernet link.
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews4434. [protocol] Return EDNS EXPIRE option for master zones in addition
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews to slave zones. [RT #43008]
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews4433. [cleanup] Report an error when passing an invalid option or
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews view name to "rndc dumpdb". [RT #42958]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews4432. [test] Hide rndc output on expected failures in logfileconfig
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews system test. [RT #27996]
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews4431. [bug] named-checkconf now checks the rate-limit clause.
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews4430. [bug] Lwresd died if a search list was not defined.
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews Found by 0x710DDDD At Alibaba Security. [RT #42895]
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein4429. [bug] Address potential use after free on fclose() error.
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews4428. [bug] The "test dispatch getnext" unit test could fail
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews in a threaded build. [RT #42979]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews4427. [bug] The "query" and "response" parameters to the
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews "dnstap" option had their functions reversed.
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein --- 9.11.0b3 released ---
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews4426. [bug] Addressed Coverity warnings. [RT #42908]
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews4425. [bug] arpaname, dnstap-read and named-rrchecker were not
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews being installed into ${prefix}/bin. Tidy up
5f059eef4360bc6c35a38241deb2561884dd9001Mark Andrews installation issues with CHANGE 4421. [RT #42910]
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews to provide feedback to the trust-anchor administrators
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews about how key rollovers are progressing as per
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews draft-ietf-dnsop-edns-key-tag-02. This can be
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews disabled using 'trust-anchor-telemetry no;'.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews4423. [maint] Added missing IPv6 address 2001:500:84::b for
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews4422. [port] Silence clang warnings in dig.c and dighost.c.
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews4421. [func] When built with LMDB (Lightning Memory-mapped
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews Database), named will now use a database to store
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews the configuration for zones added by "rndc addzone"
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews instead of using a flat NZF file. This improves
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews performance of "rndc delzone" and "rndc modzone"
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews significantly. Existing NZF files will
c80b5ef256d9c289c403bc90e0fbee3699552808Mark Andrews automatically by converted to NZD databases.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews To view the contents of an NZD or to roll back to
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews NZF format, use "named-nzd2nzf". To disable
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews this feature, use "configure --without-lmdb".
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews4420. [func] nslookup now looks for AAAA as well as A by default.
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews4419. [bug] Don't cause undefined result if the label of an
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews entry in catalog zone is changed. [RT #42708]
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews4417. [bug] dnssec-keymgr could fail to create successor keys
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews if the prepublication interval was set to a value
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews smaller than the default. [RT #42820]
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews4416. [bug] dnssec-keymgr: Domain names in policy files could
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews fail to match due to trailing dots. [RT #42807]
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews excluded. [RT #42884]
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews4414. [bug] Corrected a bug in the MIPS implementation of
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews isc_atomic_xadd(). [RT #41965]
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews was returned. [RT #42733]
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews --- 9.11.0b2 released ---
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
738bffe2ee7dd6f3efeae8e2cca9017acc9c5f94Mark Andrews removed. [RT #42721]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews4411. [func] "rndc dnstap -roll" automatically rolls the
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews dnstap output file; the previous version is
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews saved with ".0" suffix, and earlier versions
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews with ".1" and so on. An optional numeric argument
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews indicates how many prior files to save. [RT #42830]
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews4410. [bug] Address use after free and memory leak with dnstap.
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews4409. [bug] DNS64 should exclude mapped addresses by default when
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews an exclude acl is not defined. [RT #42810]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews4408. [func] Continue waiting for expected response when we the
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews response we get does not match the request. [RT #41026]
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews4407. [performance] Use GCC builtin for clz in RPZ lookup code.
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews4406. [security] getrrsetbyname with a non absolute name could
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews trigger an infinite recursion bug in lwresd
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews and named with lwres configured if when combined
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews with a search list entry the resulting name is
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews too long. (CVE-2016-2775) [RT #42694]
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews4405. [bug] Change 4342 introduced a regression where you could
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews not remove a delegation in a NSEC3 signed zone using
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews OPTOUT via nsupdate. [RT #42702]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews4404. [misc] Allow krb5-config to be used when configuring gssapi.
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews4403. [bug] Rename variables and arguments that shadow: basename,
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews clone and gai_error.
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 --- 9.11.0b1 released ---
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉4401. [misc] Change LICENSE to MPL 2.0.
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉4400. [bug] ttl policy was not being inherited in policy.py.
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews 'ECDSAP384SHA384' don't have settable keysize.
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews4397. [bug] Update Windows python support. [RT #42538]
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews4395. [bug] Improve out-of-tree installation of python modules.
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews4394. [func] Add rndc command "dnstap-reopen" to close and
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 reopen dnstap output files. [RT #41803]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews4393. [bug] Address potential NULL pointer dereferences in
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews traffic-sizes and rcode-volume reporting. [RT #41475]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews4390. [doc] Description of masters with TSIG, allow-query and
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews allow-transfer options in catalog zones. [RT #42692]
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews4389. [test] Rewritten test suite for catalog zones. [RT #42676]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews4388. [func] Support for master entries with TSIG keys in catalog
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews zones. [RT #42577]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews4387. [bug] Change 4336 was not complete leading to SERVFAIL
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews being return as NS records expired. [RT #42683]
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews4385. [func] Add support for allow-query and allow-transfer ACLs
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews to catalog zones. [RT #42578]
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews4384. [bug] Change 4256 accidentally disabled logging of the
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews rndc command. [RT #42654]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews4383. [bug] Correct spelling error in stats channel description of
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews "EDNS client subnet option received". [RT #42633]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews compare the zone name using a canonical format.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews4381. [bug] Missing "zone-directory" option in catalog zone
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews definition caused BIND to crash. [RT #42579]
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews --- 9.11.0a3 released ---
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews4380. [experimental] Added a "zone-directory" option to "catalog-zones"
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews syntax, allowing local masterfiles for slaves
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews that are provisioned by catalog zones to be stored
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews in a directory other than the server's working
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews directory. [RT #42527]
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews4379. [bug] An INSIST could be triggered if a zone contains
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews RRSIG records with expiry fields that loop
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews using serial number arithmetic. [RT #40571]
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews4377. [bug] Don't reuse zero TTL responses beyond the current
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews client set (excludes ANY/SIG/RRSIG queries).
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews4376. [experimental] Added support for Catalog Zones, a new method for
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews provisioning secondary servers in which a list of
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews zones to be served is stored in a DNS zone and can
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews be propagated to slaves via AXFR/IXFR. [RT #41581]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews4375. [func] Add support for automatic reallocation of isc_buffer
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews to isc_buffer_put* functions. [RT #42394]
d4e1933abc4bfa3d42dcc2f093c81816a317dde6Mark Andrews4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews probability of reference counting errors as seen
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews in 4365. [RT #42405]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews4372. [bug] Address undefined behavior in libt_api. [RT #42480]
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews4371. [func] New "minimal-any" option reduces the size of UDP
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews responses for qtype ANY by returning a single
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews arbitrarily selected RRset instead of all RRsets.
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews Thanks to Tony Finch. [RT #41615]
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews4370. [bug] Address python3 compatibility issues with RNDC module.
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews [RT #42499] [RT #42506]
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews --- 9.11.0a2 released ---
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews4369. [bug] Fix 'make' and 'make install' out-of-tree python
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews support. [RT #42484]
bae21f249ead77e442a025b9b18d90e21ebf72ceMark Andrews4368. [bug] Fix a crash when calling "rndc stats" on some
321df4df1972da49223fc8ee1180f94b88295568Mark Andrews Windows builds because some Visual Studio compilers
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews generated crashing code for the "%z" printf()
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews format specifier. [RT #42380]
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews4367. [bug] Remove unnecessary assignment of loadtime in
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews zone_touched. [RT #42440]
50105afc551903541608b11851d73278b23579a3Mark Andrews4366. [bug] Address race condition when updating rbtnode bit
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews fields. [RT #42379]
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews4365. [bug] Address zone reference counting errors involving
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews nxdomain-redirect. [RT #42258]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews4363. [port] win32: Disable explicit triggering UAC when running
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews BINDInstall.
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews4362. [func] Changed rndc reconfig behavior so that newly added
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews zones are loaded asynchronously and the loading does
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews not block the server. [RT #41934]
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews4361. [cleanup] Where supported, file modification times returned
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews by isc_file_getmodtime() are now accurate to the
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews nanosecond. [RT #41968]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews4360. [bug] Silence spurious 'bad key type' message when there is
50105afc551903541608b11851d73278b23579a3Mark Andrews a existing TSIG key. [RT #42195]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews4359. [bug] Inherited 'also-notify' lists were not being checked
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews by named-checkconf. [RT #42174]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews4358. [test] Added American Fuzzy Lop harness that allows
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews feeding fuzzed packets into BIND.
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews4357. [func] Add the python RNDC module. [RT #42093]
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews4356. [func] Add the ability to specify whether to wait for
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews nameserver addresses to be looked up or not to
91c79af4755df2d892511512e0fc886639518a92Mark Andrews RPZ with a new modifying directive 'nsip-wait-recurse'.
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews4355. [func] "pkcs11-list" now displays the extractability
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews attribute of private or secret keys stored in
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews an HSM, as either "true", "false", or "never"
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews Thanks to Daniel Stirnimann. [RT #36557]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews4354. [bug] Check that the received HMAC length matches the
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews expected length prior to check the contents on the
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews control channel. This prevents a OOB read error.
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews This was reported by Lian Yihan, <lianyihan@360.cn>.
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews4353. [cleanup] Update PKCS#11 header files. [RT #42175]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
dbc4666b1b153775001613af160541da986429b2Mark Andrews is scheduled to be disabled in 2017. A warning is
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews now logged when named is configured to use it,
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews either explicitly or via "dnssec-lookaside auto;"
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews4351. [bug] 'dig +noignore' didn't work. [RT #42273]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews4349. [contrib] kasp2policy: A python script to create a DNSSEC
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews policy file from an OpenDNSSEC KASP XML file.
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews4348. [func] dnssec-keymgr: A new python-based DNSSEC key
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews management utility, which reads a policy definition
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews file and can create or update DNSSEC keys as needed
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews to ensure that a zone's keys match policy, roll over
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews correctly on schedule, etc. Thanks to Sebastian
807d4a4c54ab9a328afeb5f69dc680ffbcb384c8Tatuya JINMEI 神明達哉 Castro for assistance in development. [RT #39211]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews4346. [bug] Fixed a regression introduced in change #4337 which
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews caused signed domains with revoked KSKs to fail
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews validation. [RT #42147]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews4345. [contrib] perftcpdns mishandled the return values from
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews clock_nanosleep. [RT #42131]
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews4344. [port] Address openssl version differences. [RT #42059]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews4342. [bug] 'rndc flushtree' could fail to clean the tree if there
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews wasn't a node at the specified name. [RT #41846]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews --- 9.11.0a1 released ---
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews4341. [bug] Correct the handling of ECS options with
90c4900d5cf1a1b556ae4c1de6338b2e7475ee55Mark Andrews address family 0. [RT #41377]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews4340. [performance] Implement adaptive read-write locks, reducing the
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews overhead of locks that are only held briefly.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews4338. [bug] Reimplement change 4324 as it wasn't properly doing
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews all the required book keeping. [RT #41941]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4337. [bug] The previous change exposed a latent flaw in
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews key refresh queries for managed-keys when
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews a cached DNSKEY had TTL 0. [RT #41986]
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews4336. [bug] Don't emit records with zero ttl unless the records
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews were learnt with a zero ttl. [RT #41687]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews4335. [bug] zone->view could be detached too early. [RT #41942]
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews4334. [func] 'named -V' now reports zlib version. [RT #41913]
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews 2001:500:9f::42.
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews4332. [placeholder]
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews4331. [func] When loading managed signed zones detect if the
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews RRSIG's inception time is in the future and regenerate
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews the RRSIG immediately. [RT #41808]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews4330. [protocol] Identify the PAD option as "PAD" when printing out
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews4329. [func] Warn about a common misconfiguration when forwarding
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews RFC 1918 zones. [RT #41441]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews4327. [func] Log query and depth counters during fetches when
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews querytrace (./configure --enable-querytrace) is
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews enabled (helps in diagnosing). [RT #41787]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews4326. [protocol] Add support for AVC. [RT #41819]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews4325. [func] Add a line to "rndc status" indicating the
7052e191ce63fdf063a977695718ff426a27628eMark Andrews hostname and operating system details. [RT #41610]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4324. [bug] When deleting records from a zone database, interior
7052e191ce63fdf063a977695718ff426a27628eMark Andrews nodes could be left empty but not deleted, damaging
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews search performance afterward. [RT #40997]
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews4323. [bug] Improve HTTP header processing on statschannel.
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews4322. [security] Duplicate EDNS COOKIE options in a response could
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews trigger an assertion failure. (CVE-2016-2088)
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews4321. [bug] Zones using mapped files containing out-of-zone data
f853c77478af94109291ea93f800444b949be558Mark Andrews could return SERVFAIL instead of the expected NODATA
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews or NXDOMAIN results. [RT #41596]
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews4320. [bug] Insufficient memory allocation when handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "none" ACL could cause an assertion failure in
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews named when parsing ACL configuration. [RT #41745]
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews4319. [security] Fix resolver assertion failure due to improper
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews DNAME handling when parsing fetch reply messages.
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews (CVE-2016-1286) [RT #41753]
37225662b64e44a3c59f92dd6156db37b52ca7a3Mark Andrews4318. [security] Malformed control messages can trigger assertions
eabf7ff29a88c578619fdc0d307f9e0bad0d6ce8Mark Andrews in named and rndc. (CVE-2016-1285) [RT #41666]
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews4316. [func] Add option to tools to print RRs in unknown
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews presentation format [RT #41595].
5caf500beeb91b96a2bb2fd55080141569aead97Mark Andrews4315. [bug] Check that configured view class isn't a meta class.
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews [RT #41572].
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews testing tools provided by Nominum, Inc.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews4313. [bug] Handle ns_client_replace failures in test mode.
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 was not consistent. [RT #41600]
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉4311. [bug] Prevent "rndc delzone" from being used on
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 response-policy zones. [RT #41593]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉4310. [performance] Use __builtin_expect() where available to annotate
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 conditions with known behavior. [RT #41411]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉4309. [cleanup] Remove the spurious "none" filename from log messages
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 when processing built-in configuration. [RT #41594]
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews4308. [func] Added operating system details to "named -V"
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews output. [RT #41452]
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews4307. [bug] "dig +subnet" and "mdig +subnet" could send
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews incorrectly-formatted Client Subnet options
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews if the prefix length was not divisible by 8.
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews Also fixed a memory leak in "mdig". [RT #45178]
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews4306. [maint] Added a PKCS#11 openssl patch supporting
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews version 1.0.2f [RT #38312]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews from the zone's apex. [RT #41483]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews4304. [port] xfer system test failed as 'tail -n +value' is not
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews portable. [RT #41315]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews4303. [bug] "dig +subnet" was unable to send a prefix length of
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews zero, as it was incorrectly changed to 32 for v4
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews prefixes or 128 for v6 prefixes. In addition to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fixing this, "dig +subnet=0" has been added as a
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews short form for 0.0.0.0/0. The same changes have
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews also been made in "mdig". [RT #41553]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉4300. [bug] A flag could be set in the wrong field when setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up non-recursive queries; this could cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SERVFAIL cache to cache responses it shouldn't.
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews New querytrace logging has been added which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews identified this error. [RT #41155]
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews4299. [bug] Check that exactly totallen bytes are read when
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews reading a RRset from raw files in both single read
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews and incremental modes. [RT #41402]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4298. [bug] dns_rpz_add errors in loadzone were not being
baee883e378402698eeb7326538a7d432c8350d1Mark Andrews propagated up the call stack. [RT #41425]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4297. [test] Ensure delegations in RPZ zones fail robustly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4296. [bug] TCP packet sizes were calculated incorrectly in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stats channel; they could be counted in the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews histogram bucket. [RT #40587]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could allow incorrect text formatting of EDNS EXPIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options. [RT #41437]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews4294. [bug] Fixed a regression in which "rndc stop -p" failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to print the PID. [RT #41513]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews4293. [bug] Address memory leak on priming query creation failure.
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews4292. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4290. [func] The timers returned by the statistics channel
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews (indicating current time, server boot time, and
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews most recent reconfiguration time) are now reported
4607e7a9b8dfb1b41c70e51c2b603daaf22cf302Mark Andrews with millisecond accuracy. [RT #40082]
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews4289. [bug] The server could crash due to memory being used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after it was freed if a zone transfer timed out.
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews4288. [bug] Fixed a regression in resolver.c:possibly_mark()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which caused known-bogus servers to be queried
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews anyway. [RT #41321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4287. [bug] Silence an overly noisy log message when message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsing fails. [RT #41374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4286. [security] render_ecs errors were mishandled when printing out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a OPT record resulting in a assertion failure.
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews (CVE-2015-8705) [RT #41397]
0451757ad8f7c49a0d3dcdf7fbdd4ea64fcec298Mark Andrews4285. [security] Specific APL data could trigger a INSIST.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2015-8704) [RT #41396]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4284. [bug] Some GeoIP options were incorrectly documented
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews using abbreviated forms which were not accepted by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. The code has been updated to allow both
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews long and abbreviated forms. [RT #41381]
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews4282. [func] 'dig +[no]mapped' determine whether the use of mapped
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv4 addresses over IPv6 is permitted or not. The
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default is +mapped. [RT #41307]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews4280. [performance] Use optimal message sizes to improve compression
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in AXFRs. This reduces network traffic. [RT #40996]
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews4279. [test] Don't use fixed ports when unit testing. [RT #41194]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4277. [performance] Improve performance of the RBT, the central zone
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews datastructure: The aux hashtable was improved,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hash function was updated to perform more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews uniform mapping, uppernode was added to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rbtnode, and other cleanups and performance
ffdfae8e4188c143297393f80f22134503372452Mark Andrews improvements were made. [RT #41165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4276. [protocol] Add support for SMIMEA. [RT #40513]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4275. [performance] Lazily initialize dns_compress->table only when
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews compression is enabled. [RT #41189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4274. [performance] Speed up typemap processing from text. [RT #41196]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4273. [bug] Only call dns_test_begin() and dns_test_end() once each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in nsec3_test as it fails with GOST if called multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4272. [bug] dig: the +norrcomments option didn't work with +multi.
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews4270. [security] Update allowed OpenSSL versions as named is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews potentially vulnerable to CVE-2015-3193.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4269. [bug] Zones using "map" format master files currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't work as policy zones. This limitation has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now been documented; attempting to use such zones
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews in "response-policy" statements is now a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration error. [RT #38321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4268. [func] "rndc status" now reports the path to the
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews configuration file. [RT #36470]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews4267. [test] Check sdlz error handling. [RT #41142]
9c1eb2279d715188bf631d98d103f6f81a3c76fbMark Andrews4266. [placeholder]
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews4264. [bug] Check const of strchr/strrchr assignments match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews argument's const status. [RT #41150]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4263. [contrib] Address compiler warnings in mysqldyn module.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4262. [bug] Fixed a bug in epoll socket code that caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sockets to not be registered for ready
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews notification in some cases, causing named to not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews read from or write to them, resulting in what
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews appear to the user as blocked connections.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4260. [security] Insufficient testing when parsing a message allowed
1a4d687359d89ff3b3e4e3f7acc4b6b8d8c982e9Mark Andrews records with an incorrect class to be be accepted,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews triggering a REQUIRE failure when those records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were subsequently cached. (CVE-2015-8000) [RT #40987]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4259. [func] Add an option for non-destructive control channel
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews access using a "read-only" clause. In such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cases, a restricted set of rndc commands are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allowed for querying information from named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4258. [bug] Limit rndc query message sizes to 32 KiB. This should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not break any legitimate rndc commands, but will
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews prevent a rogue rndc query from allocating too
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews much memory. [RT #41073]
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4256. [bug] Allow rndc command arguments to be quoted so as
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews to allow spaces. [RT #36665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4255. [performance] Add 'message-compression' option to disable DNS
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews compression in responses. [RT #40726]
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews4254. [bug] Address missing lock when getting zone's serial.
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews4253. [security] Address fetch context reference count handling error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on socket error. (CVE-2015-8461) [RT#40945]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4252. [func] Add support for automating the generation CDS and
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews CDNSKEY rrsets to named and dnssec-signzone.
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews4251. [bug] NTAs were deleted when the server was reconfigured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or reloaded. [RT #41058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4250. [func] Log the TSIG key in use during inbound zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers. [RT #41075]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4249. [func] Improve error reporting of TSIG / SIG(0) records in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the wrong location. [RT #41030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4248. [performance] Add an isc_atomic_storeq() function, use it in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stats counters to improve performance.
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews [RT #39972] [RT #39979]
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defined to report json library version. [RT #41045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4246. [test] Ensure the statschannel system test runs when BIND
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not built with libjson. [RT #40944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4245. [placeholder]
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews4244. [bug] The parser was not reporting that use-ixfr is obsolete.
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews4242. [bug] Replace the client if not already replaced when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prefetching. [RT #41001]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews the ARM. [RT #40955]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4240. [port] Fix LibreSSL compatibility. [RT #40977]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews4239. [func] Changed default servfail-ttl value to 1 second from 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, the maximum value is now 30 instead of 300.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews4237. [doc] Upgraded documentation toolchain to use DocBook 5
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dblatex. [RT #40766]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4236. [performance] On machines with 2 or more processors (CPU), the
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews default value for the number of UDP listeners
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been changed to the number of detected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processors minus one. [RT #40761]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4235. [func] Added support in named for "dnstap", a fast method of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capturing and logging DNS traffic, and a new command
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews "dnstap-read" to read a dnstap log file. Use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "configure --enable-dnstap" to enable this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews feature (note that this requires libprotobuf-c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and libfstrm). See the ARM for configuration details.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews Thanks to Robert Edmonds of Farsight Security.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews4234. [func] Add deflate compression in statistics channel HTTP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server. [RT #40861]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4232. [contrib] Address unchecked memory allocation calls in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-loc and zone2ldap. [RT #40789]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews uninitialized result. [RT #40839]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews4229. [bug] A variable could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_update_signaturesinc. [RT #40784]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4228. [bug] Address race condition in dns_client_destroyrestrans.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4227. [bug] Silence static analysis warnings. [RT #40828]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews4226. [bug] Address a theoretical shutdown race in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone.c:notify_send_queue(). [RT #38958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews shared libraries. [RT #39557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4224. [func] Added support for "dyndb", a new interface for loading
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews zone data from an external database, developed by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Red Hat for the FreeIPA project.
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews DynDB drivers fully implement the BIND database
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API, and are capable of significantly better
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews performance and functionality than DLZ drivers,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while taking advantage of advanced database
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews features not available in BIND such as multi-master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replication.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Thanks to Adam Tkac and Petr Spacek of Red Hat.
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews4223. [func] Add support for setting max-cache-size to percentage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of available physical memory, set default to 90%.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4222. [func] Bias IPv6 servers when selecting the next server to
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews query. [RT #40836]
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4220. [doc] Improve documentation for zone-statistics.
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews EGAIN when these soft error are not retried for
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews isc_socket_send*().
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews4218. [bug] Potential null pointer dereference on out of memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if mmap is not supported. [RT #40777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4217. [protocol] Add support for CSYNC. [RT #40532]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews4216. [cleanup] Silence static analysis warnings. [RT #40649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4215. [bug] nsupdate: skip to next request on GSSTKEY create
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews failure. [RT #40685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4214. [protocol] Add support for TALINK. [RT #40544]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4213. [bug] Don't reuse a cache across multiple classes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4212. [func] Re-query if we get a bad client cookie returned over
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews UDP. [RT #40748]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4211. [bug] Ensure that lwresd gets at least one task to work
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with if enabled. [RT #40652]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4210. [cleanup] Silence use after free false positive. [RT #40743]
ff2ef33a84550fa5dbd9e8fdcd82a33288f053adMark Andrews4209. [bug] Address resource leaks in dlz modules. [RT #40654]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4208. [bug] Address null pointer dereferences on out of memory.
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews4207. [bug] Handle class mismatches with raw zone files.
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews4206. [bug] contrib: fixed a possible NULL dereference in
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews DLZ wildcard module. [RT #40745]
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews4205. [bug] 'named-checkconf -p' could include unwanted spaces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when printing tuples with unset optional fields.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4204. [bug] 'dig +trace' failed to lookup the correct type if
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews the initial root NS query was retried. [RT #40296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4203. [test] The rrchecker system test now tests conversion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to and from unknown-type format. [RT #40584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4202. [bug] isccc_cc_fromwire() could return an incorrect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result. [RT #40614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4201. [func] The default preferred-glue is now the address record
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews type of the transport the query was received
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over. [RT #40468]
90295f915c883d1aeeda856f518584d4219a704aMark Andrews4200. [cleanup] win32: update BINDinstall to be BIND release
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews independent. [RT #38915]
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #40545] [RT #40547] [RT #40561] [RT #40563]
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews4198. [placeholder]
99776003811a413457a2c35a808ad860df877d24Mark Andrews4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews4196. [doc] Improve how "enum + other" types are documented.
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4194. [bug] named-checkconf -p failed to properly print a port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range. [RT #40634]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4193. [bug] Handle broken servers that return BADVERS incorrectly.
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews4192. [bug] The default rrset-order of random was not always being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews applied. [RT #40456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews as per RFC 6763. [RT #37889]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid with check-names. <forest> still needs to be
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews LDH. [RT #40399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4189. [cleanup] Don't exit on overly long tokens in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4188. [bug] Support HTTP/1.0 client properly on the statistics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel. [RT #40261]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4187. [func] When any RR type implementation doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implement totext() for the RDATA's wire
2945ac15af547df0268e449252902ead599e2451Mark Andrews representation and returns ISC_R_NOTIMPLEMENTED,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews such RDATA is now printed in unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews presentation format (RFC 3597). RR types affected
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 include LOC(29) and APL(42). [RT #40317].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4186. [bug] Fixed an RPZ bug where a QNAME would be matched
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews against a policy RR with wildcard owner name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (trigger) where the QNAME was the wildcard owner
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name's parent. For example, the bug caused a query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with QNAME "example.com" to match a policy RR with
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews "*.example.com" as trigger. [RT #40357]
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews owner name (trigger) would prevent another policy RR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with its parent owner name from being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded. For example, the bug caused a policy RR
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews with trigger "example.com" to not have any
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews effect when a previous policy RR with trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "*.example.com" existed in that RPZ zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4184. [bug] Fixed a possible memory leak in name compression
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews when rendering long messages. (Also, improved
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wire_test for testing such messages.) [RT #40375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4183. [cleanup] Use timing-safe memory comparisons in cryptographic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews code. Also, the timing-safe comparison functions have
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews been renamed to avoid possible confusion with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memcmp(). Thanks to Loganaden Velvindron of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AFRINIC. [RT #40148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4182. [cleanup] Use mnemonics for RR class and type comparisons.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4181. [bug] Queued notify messages could be dequeued from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong rate limiter queue. [RT #40350]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4180. [bug] Error responses in pipelined queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause a crash in client.c. [RT #40289]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4179. [bug] Fix double frees in getaddrinfo() in libirs.
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews text. [RT #40274]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4177. [bug] Fix assertion failure in parsing NSAP records from
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews text. [RT #40285]
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews4176. [bug] Address race issues with lwresd. [RT #40284]
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews4175. [bug] TKEY with GSS-API keys needed bigger buffers.
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews4174. [bug] "dnssec-coverage -r" didn't handle time unit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suffixes correctly. [RT #38444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4173. [bug] dig +sigchase was not properly matching the trusted
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews key. [RT #40188]
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews4171. [bug] Fixed incorrect class checks in TSIG RR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation. [RT #40287]
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews4170. [security] An incorrect boundary check in the OPENPGPKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdatatype could trigger an assertion failure.
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews (CVE-2015-5986) [RT #40286]
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews4169. [test] Added a 'wire_test -d' option to read input as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews raw binary data, for use as a fuzzing harness.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4168. [security] A buffer accounting error could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure when parsing certain malformed
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews DNSSEC keys. (CVE-2015-5722) [RT #40212]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4167. [func] Update rndc's usage output to include recently added
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews commands. Thanks to Tony Finch for submitting a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews patch. [RT #40010]
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews4166. [func] Print informative output from rndc showzone when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-new-zones is not enabled for a view. Thanks to
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews Tony Finch for submitting a patch. [RT #40009]
4c342614f80d867bba23e63795ec6ee79dd6395dMark Andrews4165. [security] A failure to reset a value to NULL in tkey.c could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result in an assertion failure. (CVE-2015-5477)
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews4164. [bug] Don't rename slave files and journals on out of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4163. [bug] Address compiler warnings. [RT #40024]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4161. [test] Add JSON test for traffic size stats; also test
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for consistency between "rndc stats" and the XML
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews and JSON statistics channel contents. [RT #38700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4160. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4159. [cleanup] Alphabetize dig's help output. [RT #39966]
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer4158. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4157. [placeholder]
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews4156. [func] Added statistics counters to track the sizes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of incoming queries and outgoing responses in
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer histogram buckets, as specified in RSSAC002.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4155. [func] Allow RPZ rewrite logging to be configured on a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews per-zone basis using a newly introduced log clause in
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews the response-policy option. [RT #39754]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4154. [bug] A OPT record should be included with the FORMERR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response when there is a malformed EDNS option.
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews4153. [bug] Dig should zero non significant +subnet bits. Check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that non significant ECS bits are zero on receipt.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4152. [func] Implement DNS COOKIE option. This replaces the
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews experimental SIT option of BIND 9.10. The following
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.conf directives are available: send-cookie,
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews cookie-secret, cookie-algorithm, nocookie-udp-size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and require-server-cookie. The following dig options
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews are available: +[no]cookie[=value] and +[no]badcookie.
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews minimal fix. [RT #39667]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4149. [bug] Fixed a race condition in the getaddrinfo()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation in libirs, which caused the delv
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews utility to crash with an assertion failure when using
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews the '@server' syntax with a hostname argument.
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews4148. [bug] Fix a bug when printing zone names with '/' character
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in XML and JSON statistics output. [RT #39873]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was returning referrals rather than nodata responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the AAAA records were filtered. [RT #39843]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4146. [bug] Address reference leak that could prevent a clean
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutdown. [RT #37125]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4145. [bug] Not all unassociated adb entries where being printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4144. [func] Add statistics counters for nxdomain redirections.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4143. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4142. [bug] rndc addzone with view specified saved NZF config
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews that could not be read back by named. This has now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been fixed. [RT #39845]
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews4141. [bug] A formatting bug caused rndc zonestatus to print
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative numbers for large serial values. This has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now been fixed. [RT #39854]
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews4140. [cleanup] Remove redundant nzf_remove() call during delzone.
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4138. [security] An uninitialized value in validator.c could result
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews in an assertion failure. (CVE-2015-4620) [RT #39795]
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews4137. [bug] Make rndc reconfig report configuration errors the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same way rndc reload does. [RT #39635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4136. [bug] Stale statistics counters with the leading
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews '#' prefix (such as #NXDOMAIN) were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated correctly. This has been fixed. [RT #39141]
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews4135. [cleanup] Log expired NTA at startup. [RT #39680]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4134. [cleanup] Include client-ip rules when logging the number
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews of RPZ rules of each type. [RT #39670]
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews4133. [port] Update how various json libraries are handled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4132. [cleanup] dig: added +rd as a synonym for +recurse,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews added +class as an unabbreviated alternative
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews to +cl. [RT #39686]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4131. [bug] Addressed further problems with reloading RPZ
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews zones. [RT #39649]
33c538015323f4576679e427088372eea614feebMark Andrews4130. [bug] The compatibility shim for *printf() misprinted some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews large numbers. [RT #39586]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key as per RFC 7344, Section 4.1. [RT #37215]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4126. [bug] Addressed a regression introduced in change #4121.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4125. [test] Added tests for dig, renamed delv test to digdelv.
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews4124. [func] Log errors or warnings encountered when parsing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal default configuration. Clarify the logging
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews of errors and warnings encountered in rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addzone or modzone parameters. [RT #39440]
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews4123. [port] Added %z (size_t) format options to the portable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal printf/sprintf implementation. [RT #39586]
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews4122. [bug] The server could match a shorter prefix than what was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available in CLIENT-IP policy triggers, and so, an
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews unexpected action could be taken. This has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrected. [RT #39481]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4121. [bug] On servers with one or more policy zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured as slaves, if a policy zone updated
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews during regular operation (rather than at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews startup) using a full zone reload, such as via
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews AXFR, a bug could allow the RPZ summary data to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fall out of sync, potentially leading to an
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews assertion failure in rpz.c when further
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incremental updates were made to the zone, such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as via IXFR. [RT #39567]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews4120. [bug] A bug in RPZ could cause the server to crash if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews policy zones were updated while recursion was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pending for RPZ processing of an active query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4119. [test] Allow dig to set the message opcode. [RT #39550]
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews4118. [bug] Teach isc-config.sh about irs. [RT #39213]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4116. [bug] Fix a bug in RPZ that could cause some policy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones that did not specifically require
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews recursion to be treated as if they did;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consequently, setting qname-wait-recurse no; was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes ineffective. [RT #39229]
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews4115. [func] "rndc -r" now prints the result code (e.g.,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews running the requested command. [RT #38913]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4114. [bug] Fix a regression in radix tree implementation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews introduced by ECS code. This bug was never
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews released, but it was reported by a user testing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master. [RT #38983]
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews4113. [test] Check for Net::DNS is some system test
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites. [RT #39369]
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews4112. [bug] Named failed to load when "root-delegation-only"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was used without a list of domains to exclude.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4111. [doc] Alphabetize rndc man page. [RT #39360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4110. [bug] Address memory leaks / null pointer dereferences
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on out of memory. [RT #39310]
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews4109. [port] linux: support reading the local port range from
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews4108. [func] An additional NXDOMAIN redirect method (option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "nxdomain-redirect") has been added, allowing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews redirection to a specified DNS namespace instead
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews of a single redirect zone. [RT #37989]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4107. [bug] Address potential deadlock when updating zone content.
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews4106. [port] Improve readline support. [RT #38938]
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews4105. [port] Misc fixes for Microsoft Visual Studio
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2015 CTP6 in 64 bit mode. [RT #39308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4104. [bug] Address uninitialized elements. [RT #39252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4103. [port] Misc fixes for Microsoft Visual Studio
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2015 CTP6. [RT #39267]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4102. [bug] Fix a use after free bug introduced in change
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews #4094. [RT #39281]
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews4101. [bug] dig: the +split and +rrcomments options didn't
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews work with +short. [RT #39291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4100. [bug] Inherited owernames on the line immediately following
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews a $INCLUDE were not working. [RT #39268]
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews4099. [port] clang: make unknown commandline options hard errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when determining what options are supported.
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews4098. [bug] Address use-after-free issue when using a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews predecessor key with dnssec-settime. [RT #39272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4097. [func] Add additional logging about xfrin transfer status.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4096. [bug] Fix a use after free of query->sendevent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4095. [bug] zone->options2 was not being properly initialized.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4094. [bug] A race during shutdown or reconfiguration could
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews cause an assertion in mem.c. [RT #38979]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4093. [func] Dig now learns the SIT value from truncated
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews responses when it retries over TCP. [RT #39047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews4090. [bug] Fix a crash while parsing malformed CAA RRs in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews presentation format, i.e., from text such as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from master files. Thanks to John Van de
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews Meulebrouck Brendgard for discovering and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reporting this problem. [RT #39003]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4089. [bug] Send notifies immediately for slave zones during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews startup. [RT #38843]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4088. [port] Fixed errors when building with libressl. [RT #38899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4087. [bug] Fix a crash due to use-after-free due to sequencing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of tasks actions. [RT #38495]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews4084. [bug] Fix a possible race in updating stats counters.
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews4083. [cleanup] Print the number of CPUs and UDP listeners
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistently in the log and in "rndc status"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output; indicate whether threads are supported
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews in "named -V" output. [RT #38811]
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews4082. [bug] Incrementally sign large inline zone deltas.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4080. [func] Completed change #4022, adding a "lock-file" option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to named.conf to override the default lock file,
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews in addition to the "named -X <filename>" command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews line option. Setting the lock file to "none"
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews using either method disables the check completely.
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews4079. [func] Preserve the case of the owner name of records to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the RRset level. [RT #37442]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews CMSG_SPACE(sizeof(char)). [RT #38621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4077. [test] Add static-stub regression test for DS NXDOMAIN
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews return making the static stub disappear. [RT #38564]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4076. [bug] Named could crash on shutdown with outstanding
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews reload / reconfig events. [RT #38622]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4075. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4073. [cleanup] Add libjson-c version number reporting to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "named -V"; normalize version number formatting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4072. [func] Add a --enable-querytrace configure switch for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews very verbose query trace logging. (This option
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews has a negative performance impact and should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used only for debugging.) [RT #37520]
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews4071. [cleanup] Initialize pthread mutex attrs just once, instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doing it per mutex creation. [RT #38547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4070. [bug] Fix a segfault in nslookup in a query such as
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews4069. [doc] Reorganize options in the nsupdate man page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4068. [bug] Omit unknown serial number from JSON zone statistics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4067. [cleanup] Reduce noise from RRL when query logging is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disabled. [RT #38648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4066. [doc] Reorganize options in the dig man page. [RT #38516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4065. [test] Additional RFC 5011 tests. [RT #38569]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4064. [contrib] dnssec-keyset.sh: Generates a specified number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC keys with timing set to implement a
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews pre-publication key rollover strategy. Thanks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to Jeffry A. Spain. [RT #38459]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4063. [bug] Asynchronous zone loads were not handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly when the zone load was already in
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews progress; this could trigger a crash in zt.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4062. [bug] Fix an out-of-bounds read in RPZ code. If the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews read succeeded, it doesn't result in a bug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews during operation. If the read failed, named
81e302788a444b81231a7cda721548a020ae5660Brian Wellington could segfault. [RT #38559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4061. [bug] Handle timeout in legacy system test. [RT #38573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4060. [bug] dns_rdata_freestruct could be called on a
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews uninitialized structure when handling a error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4059. [bug] Addressed valgrind warnings. [RT #38549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4058. [bug] UDP dispatches could use the wrong pseudorandom
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number generator context. [RT #38578]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4056. [bug] Expanded automatic testing of trust anchor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews management and fixed several small bugs including
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews a memory leak and a possible loss of key state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information. [RT #38458]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4055. [func] "rndc managed-keys" can be used to check status
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of trust anchors or to force keys to be refreshed,
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews Also, the managed keys data file has easier-to-read
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments. [RT #38458]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews4054. [func] Added a new tool 'mdig', a lightweight clone of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dig able to send multiple pipelined queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4053. [security] Revoking a managed trust anchor and supplying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an untrusted replacement could cause named
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews to crash with an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2015-1349) [RT #38344]
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews4052. [bug] Fix a leak of query fetchlock. [RT #38454]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4050. [bug] RPZ could send spurious SERVFAILs in response
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews to duplicate queries. [RT #38510]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4048. [bug] adb hash table was not being grown. [RT #38470]
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews4047. [cleanup] "named -V" now reports the current running versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of OpenSSL and the libxml2 libraries, in addition to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the versions that were in use at build time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4046. [bug] Accounting of "total use" in memory context
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews statistics was not correct. [RT #38370]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4045. [bug] Skip to next master on dns_request_createvia4 failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4044. [bug] Change 3955 was not complete, resulting in an assertion
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews failure if the timing was just right. [RT #38352]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4043. [func] "rndc modzone" can be used to modify the
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews configuration of an existing zone, using similar
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews syntax to "rndc addzone". [RT #37895]
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews4042. [bug] zone.c:iszonesecure was being called too late.
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews4041. [func] TCP sockets can now be shared while connecting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (This will be used to enable client-side support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of pipelined queries.) [RT #38231]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4040. [func] Added server-side support for pipelined TCP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. Clients may continue sending queries via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TCP while previous queries are being processed
986be654feec852eb9da0d15599f18d0035e569bMark Andrews in parallel. (The new "keep-response-order"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option allows clients to be specified for which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the old behavior will still be used.) [RT #37821]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews4038. [bug] Add 'rpz' flag to node and use it to determine whether
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to call dns_rpz_delete. This should prevent unbalanced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add / delete calls. [RT #36888]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4037. [bug] also-notify was ignoring the tsig key when checking
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for duplicates resulting in some expected notify
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews messages not being sent. [RT #38369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4036. [bug] Make call to open a temporary file name safe during
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews NZF creation. [RT #38331]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews4035. [bug] Close temporary and NZF FILE pointers before moving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the former into the latter's place, as required on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Windows. [RT #38332]
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews4034. [func] When added, negative trust anchors (NTA) are now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews saved to files (viewname.nta), in order to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews persist across restarts of the named server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4033. [bug] Missing out of memory check in request.c:req_send.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4032. [bug] Built-in "empty" zones did not correctly inherit the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "allow-transfer" ACL from the options or view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4031. [bug] named-checkconf -z failed to report a missing file
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews with a hint zone. [RT #38294]
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews4030. [func] "rndc delzone" is now applicable to zones that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured in named.conf, as well as zones that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were added via "rndc addzone". (Note, however, that
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews if named.conf is not also modified, the deleted zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will return when named is reloaded.) [RT #37887]
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews4029. [func] "rndc showzone" displays the current configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a specified zone. [RT #37887]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4028. [bug] $GENERATE with a zero step was not being caught as a
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington error. A $GENERATE with a / but no step was not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caught as a error. [RT #38262]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington4025. [port] bsdi: failed to build. [RT #38047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington dns_rdata_opt_current, dns_rdata_txt_first,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_txt_next and dns_rdata_txt_current were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documented but not implemented. These have now been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_spf_first, dns_rdata_spf_next and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_spf_current were documented but not
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington implemented. The prototypes for these
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions have been removed. [RT #38068]
683f10428e292811317df38fa324f242abbf7384Mark Andrews4023. [bug] win32: socket handling with explicit ports and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews invoking named with -4 was broken for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configurations. [RT #38068]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4022. [func] Stop multiple spawns of named by limiting number of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processes to 1. This is done by using a lockfile and
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews checking whether we can listen on any configured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TCP interfaces. [RT #37908]
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews4021. [bug] Adjust max-recursion-queries to accommodate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the need for more queries when the cache is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty. [RT #38104]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in updates being sent to the wrong server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4019. [func] If named is not configured to validate the answer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews then allow fallback to plain DNS on timeout even
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington when we know the server supports EDNS. [RT #37978]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4018. [placeholder]
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington4017. [test] Add system test to check lookups to legacy servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with broken DNS behavior. [RT #37965]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4016. [bug] Fix a dig segfault due to bad linked list usage.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4015. [bug] Nameservers that are skipped due to them being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CNAMEs were not being logged. They are now logged
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews to category 'cname' as per BIND 8. [RT #37935]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4014. [bug] When including a master file origin_changed was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not being properly set leading to a potentially
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews spurious 'inherited owner' warning. [RT #37919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4013. [func] Add a new tcp-only option to server (config) /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews peer (struct) to use TCP transport to send
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries (in place of UDP transport with a
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews TCP fallback on truncated (TC set) response).
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews4012. [cleanup] Check returned status of OpenSSL digest and HMAC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions when they return one. Note this applies
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only to FIPS capable OpenSSL libraries put in
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews FIPS mode and MD5. [RT #37944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4011. [bug] master's list port and dscp inheritance was not
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson properly implemented. [RT #37792]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4010. [cleanup] Clear the prefetchable state when initiating a
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews prefetch. [RT #37399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4009. [func] delv: added a +tcp option. [RT #37855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4007. [doc] Remove acl forward reference restriction. [RT #37772]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4006. [security] A flaw in delegation handling could be exploited
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews to put named into an infinite loop. This has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been addressed by placing limits on the number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of levels of recursion named will allow (default 7),
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews and the number of iterative queries that it will
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews send (default 50) before terminating a recursive
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews query (CVE-2014-8500).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The recursion depth limit is configured via the
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews "max-recursion-depth" option, and the query limit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via the "max-recursion-queries" option. [RT #37580]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4005. [func] The buffer used for returning text from rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands is now dynamically resizable, allowing
23fb770906bf1fd98210f16ad660078274242963Mark Andrews arbitrarily large amounts of text to be sent back
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the client. (Prior to this change, it was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible for the output of "rndc tsig-list" to be
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington truncated.) [RT #37731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4004. [bug] When delegations had AAAA glue but not A, a
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews reference could be leaked causing an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure on shutdown. [RT #37796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4003. [security] When geoip-directory was reconfigured during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named run-time, the previously loaded GeoIP
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews data could remain, potentially causing wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ACLs to be used or wrong results to be served
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on geolocation (CVE-2014-8680). [RT #37720]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4002. [security] Lookups in GeoIP databases that were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded could cause an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2014-8680). [RT #37679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews4001. [security] The caching of GeoIP lookups did not always
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handle address families correctly, potentially
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews resulting in an assertion failure (CVE-2014-8680).
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the redirect zone. [RT #37722]
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3999. [func] "mkeys" and "nzf" files are now named after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews their corresponding views, unless the view name
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson contains characters that would be incompatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with use in a filename (i.e., slash, backslash,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or capital letters). If a view name does contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews these characters, the files will still be named
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson using a cryptographic hash of the view name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Regardless of this, if a file using the old name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format is found to exist, it will continue to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used. [RT #37704]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3998. [bug] isc_radix_search was returning matches that were
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews too precise. [RT #37680]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3996. [bug] Address use after free on out of memory error in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keyring_add. [RT #37639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3995. [bug] receive_secure_serial holds the zone lock for too
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews long. [RT #37626]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3994. [func] Dig now supports setting the last unassigned DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews header flag bit (dig +zflag). [RT #37421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3993. [func] Dig now supports EDNS negotiation by default.
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson (dig +[no]ednsnegotiation).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: This is disabled by default in BIND 9.10
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington and enabled by default in BIND 9.11. [RT #37604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3992. [func] DiG can now send queries without questions
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington (dig +header-only). [RT #37599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3991. [func] Add the ability to buffer logging output by specifying
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington "buffered yes;" when defining a channel. [RT #26561]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3990. [test] Add tests for unknown DNSSEC algorithm handling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3988. [func] Allow the zone serial of a dynamically updatable
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson zone to be updated via "rndc signing -serial".
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews3987. [port] Handle future Visual Studio 14 incompatible changes.
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews3986. [doc] Add the BIND version number to page footers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the ARM. [RT #37398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3985. [doc] Describe how +ndots and +search interact in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3984. [func] Accept 256 byte long PINs in native PKCS#11
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson crypto. [RT #37410]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3983. [bug] Change #3940 was incomplete: negative trust anchors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be set to last up to a week, but the
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews "nta-lifetime" and "nta-recheck" options were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews still limited to one day. [RT #37522]
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson3982. [doc] Include release notes in product documentation.
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews3981. [bug] Cache DS/NXDOMAIN independently of other query types.
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews size. [RT #37187]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3979. [bug] Negative trust anchor fetches were not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed. [RT #37488]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3978. [test] Added a unit test for Diffie-Hellman key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews computation, completing change #3974. [RT #37477]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson3977. [cleanup] "rndc secroots" reported a "not found" error when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews there were no negative trust anchors set. [RT #37506]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson3976. [bug] When refreshing managed-key trust anchors, clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any cached trust so that they will always be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revalidated with the current set of secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews roots. [RT #37506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3975. [bug] Don't populate or use the bad cache for queries that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't request or use recursion. [RT #37466]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3974. [bug] Handle DH_compute_key() failure correctly in
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews3973. [test] Added hooks for Google Performance Tools CPU profiler,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews including real-time/wall-clock profiling. Use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "configure --with-gperftools-profiler" to enable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3972. [bug] Fix host's usage statement. [RT #37397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3971. [bug] Reduce the cascading failures due to a bad $TTL line
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson in named-checkconf / named-checkzone. [RT #37138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3969. [test] Added 'delv' system test. [RT #36901]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews3968. [bug] Silence spurious log messages when using 'named -[46]'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3967. [test] Add test for inlined signed zone in multiple views
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with different DNSKEY sets. [RT #35759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson3965. [func] Log outgoing packets and improve packet logging to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support logging the remote address. [RT #36624]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3964. [func] nsupdate now performs check-names processing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3963. [test] Added NXRRSET test cases to the "dlzexternal"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews system test. [RT #37344]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conditions. [RT #34663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BADSIG. [RT #37216]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3959. [bug] Updates could be lost if they arrived immediately
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews after a rndc thaw. [RT #37233]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3958. [bug] Detect when writeable files have multiple references
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer in named.conf. [RT #37172]
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and ECDSAP384SHA384. [RT #37183]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews startup-notify-rate instead of serial-query-rate.
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews3955. [bug] Notify messages due to changes are no longer queued
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews behind startup notify messages. [RT #24454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two name pointers were the same. [RT #37176]
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington3951. [func] Add the ability to set yet-to-be-defined EDNS flags
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to dig (+ednsflags=#). [RT #37142]
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews3950. [port] Changed the bin/python Makefile to work around a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3949. [experimental] Experimental support for draft-andrews-edns1 by sending
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews building). Add support for limiting the EDNS version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews advertised to servers: server { edns-version 0; };
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews Log the EDNS version received in the query log.
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-tuning=large. [RT #37059]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3947. [cleanup] Set the executable bit on libraries when using
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews libtool. [RT #36786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3946. [cleanup] Improved "configure" search for a python interpreter.
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews3945. [bug] Invalid wildcard expansions could be incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accepted by the validator. [RT #37093]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3944. [test] Added a regression test for "server-id". [RT #37057]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3943. [func] SERVFAIL responses can now be cached for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews limited time (configured by "servfail-ttl",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default 10 seconds, limit 30). This can reduce
923de3bb9cf4d619de206544975986a22b18196fMark Andrews the frequency of retries when an authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server is known to be failing, e.g., due to
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews ongoing DNSSEC validation problems. [RT #21347]
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews3942. [bug] Wildcard responses from a optout range should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews marked as insecure. [RT #37072]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews3941. [doc] Include the BIND version number in the ARM. [RT #37067]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews3940. [func] "rndc nta" now allows negative trust anchors to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set for up to one week. [RT #37069]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections to be shared. [RT #37039]
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews3938. [func] Added quotas to be used in recursive resolvers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that are under high query load for names in zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whose authoritative servers are nonresponsive or
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews are experiencing a denial of service attack.
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews - "fetches-per-server" limits the number of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews simultaneous queries that can be sent to any
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews single authoritative server. The configured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews value is a starting point; it is automatically
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews adjusted downward if the server is partially or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completely non-responsive. The algorithm used to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adjust the quota can be configured via the
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews "fetch-quota-params" option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "fetches-per-zone" limits the number of
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson simultaneous queries that can be sent for names
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews within a single domain. (Note: Unlike
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "fetches-per-server", this value is not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self-tuning.)
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson - New stats counters have been added to count
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries spilled due to these quotas.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See the ARM for details of these options. [RT #37125]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3937. [func] Added some debug logging to better indicate the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conditions causing SERVFAILs when resolving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3936. [func] Added authoritative support for the EDNS Client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Subnet (ECS) option.
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews ACLs can now include "ecs" elements which specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an address or network prefix; if an ECS option is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews included in a DNS query, then the address encoded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the option will be matched against "ecs" ACL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, if an ECS address is included in a query,
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson then it will be used instead of the client source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address when matching "geoip" ACL elements. This
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews behavior can be overridden with "geoip-use-ecs no;".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: to enable "geoip" ACLs, use "configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-geoip". This requires libGeoIP version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 1.5.0 or higher.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews When "ecs" or "geoip" ACL elements are used to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews select a view for a query, the response will include
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson an ECS option to indicate which client network the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answer is valid for.
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson (Thanks to Vincent Bernat.) [RT #36781]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3935. [bug] "geoip asnum" ACL elements would not match unless
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews the full organization name was specified. They
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can now match against the AS number alone (e.g.,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AS1234). [RT #36945]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sit-secret documentation. [RT #36980]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3933. [bug] Corrected the implementation of dns_rdata_casecompare()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the HIP rdata type. [RT #36911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3932. [test] Improved named-checkconf tests. [RT #36911]
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3930. [bug] "rndc nta -r" could cause a server hang if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NTA was not found. [RT #36909]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3928. [test] Improve rndc system test. [RT #36898]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews3927. [bug] dig: report PKCS#11 error codes correctly when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compiled with --enable-native-pkcs11. [RT #36956]
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews3926. [doc] Added doc for geoip-directory. [RT #36877]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson3923. [bug] Sanity check the xml2-config output. [RT #22246]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3922. [bug] When resigning, dnssec-signzone was removing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all signatures from delegation nodes. It now
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson retains DS and (if applicable) NSEC signatures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3919. [bug] dig: continue to next line if a address lookup fails
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews in batch mode. [RT #36755]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3918. [doc] Update check-spf documentation. [RT #36910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3917. [bug] dig, nslookup and host now continue on names that are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long after applying a search list elements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3916. [contrib] zone2sqlite checked wrong result code. Address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compiler warnings. [RT #36931]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3915. [bug] Address a assertion if a route event arrived while
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutting down. [RT #36887]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3914. [bug] Allow the URI target and CAA value fields to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be zero length. [RT #36737]
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews3913. [bug] Address race issue in dispatch. [RT #36731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3911. [func] Implement EDNS EXPIRE option client side, allowing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a slave server to set the expiration timer correctly
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews when transferring zone data from another slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server. [RT #35925]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3910. [bug] Fix races to free event during shutdown. [RT #36720]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3909. [bug] When computing the number of elements required for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews acl count_acl_elements could have a short count leading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to a assertion failure. Also zero out new acl elements
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dns_acl_merge. [RT #36675]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3908. [bug] rndc now differentiates between a zone in multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views and a zone that doesn't exist at all. [RT #36691]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3907. [cleanup] Alphabetize rndc help. [RT #36683]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3906. [protocol] Update URI record format to comply with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews draft-faltstrom-uri-08. [RT #36642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson3904. [func] Add the RPZ SOA to the additional section. [RT36507]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3903. [bug] Improve the accuracy of DiG's reported round trip
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT 36611]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3902. [bug] liblwres wasn't handling link-local addresses in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver clauses in resolv.conf. [RT #36039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3901. [protocol] Added support for CAA record type (RFC 6844).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3899. [bug] "request-ixfr" is only applicable to slave and redirect
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson zones. [RT #36608]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3898. [bug] Too small a buffer in tohexstr() calls in test code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3897. [bug] RPZ summary information was not properly being updated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after a AXFR resulting in changes sometimes being
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson ignored. [RT #35885]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3896. [bug] Address performance issues with DSCP code on some
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson platforms. [RT #36534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3895. [func] Add the ability to set the DSCP code point to dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3894. [bug] Buffers in isc_print_vsnprintf were not properly
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson initialized leading to potential overflows when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews printing out quad values. [RT #36505]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3893. [bug] Peer DSCP values could be returned without being set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3892. [bug] Setting '-t aaaa' in .digrc had unintended side
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews effects. [RT #36452]
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to install python programs.
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews3890. [bug] RRSIG sets that were not loaded in a single transaction
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at start up where not being correctly added to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews re-signing heaps. [RT #36302]
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews3889. [port] hurd: configure fixes as per:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews3888. [func] 'rndc status' now reports the number of automatic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones. [RT #36015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews they are easier to use in a debugger. [RT #36373]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3886. [bug] rbtdb_write_header should use a once to initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews FILE_VERSION. [RT #36374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3885. [port] Use 'open()' rather than 'file()' to open files in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3883. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3882. [func] By default, negative trust anchors will be tested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews periodically to see whether data below them can be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validated, and if so, they will be allowed to
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson expire early. The "rndc nta -force" option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overrides this behavior. The default NTA lifetime
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the recheck frequency can be configured by the
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson "nta-lifetime" and "nta-recheck" options. [RT #36146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3881. [bug] Address memory leak with UPDATE error handling.
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews3880. [test] Update ans.pl to work with new TSIG support in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Net::DNS; add additional Net::DNS version prerequisite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checks. [RT #36327]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3879. [func] Add version printing option to various BIND utilities.
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews3878. [bug] Using the incorrect filename for a DLZ module
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caused a segmentation fault on startup. [RT #36286]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3877. [bug] Inserting and deleting parent and child nodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in response policy zones could trigger an assertion
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson failure. [RT #36272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3876. [bug] Improve efficiency of DLZ redirect zones by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppressing unnecessary database lookups. [RT #35835]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3875. [cleanup] Clarify log message when unable to read private
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key files. [RT #24702]
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3874. [test] Check that only "check-names master" is needed for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updates to be accepted.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3872. [bug] Address issues found by static analysis. [RT #36209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3871. [bug] Don't publish an activated key automatically before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews its publish time. [RT #35063]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3870. [func] Updated the random number generator used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the resolver to use the updated ChaCha based one
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson (similar to OpenBSD's changes). Also moved the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RNG to libisc and added unit tests for it.
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson3869. [doc] Document that in-view zones cannot be used for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response policy zones. [RT #35941]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3868. [bug] isc_mem_setwater incorrectly cleared hi_called
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews potentially leaving over memory cleaner running.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson3867. [func] "rndc nta" can now be used to set a temporary
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative trust anchor, which disables DNSSEC
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson validation below a specified name for a specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews period of time (not exceeding 24 hours). This
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson can be used when validation for a domain is known
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be failing due to a configuration error on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the part of the domain owner rather than a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spoofing attack. [RT #29358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3866. [bug] Named could die on disk full in generate_session_key.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3865. [test] Improved testability of the red-black tree
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation and added unit tests. [RT #35904]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3864. [bug] RPZ didn't work well when being used as forwarder.
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson3863. [bug] The "E" flag was missing from the query log as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unintended side effect of code rearrangement to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support EDNS EXPIRE. [RT #36117]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3862. [cleanup] Return immediately if we are not going to log the
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington message in ns_client_dumpmessage.
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews3861. [security] Missing isc_buffer_availablelength check results
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a REQUIRE assertion when printing out a packet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2014-3859). [RT #36078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3860. [bug] ioctl(DP_POLL) array size needs to be determined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at run time as it is limited to {OPEN_MAX}.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3859. [placeholder]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3858. [bug] Disable GCC 4.9 "delete null pointer check".
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3857. [bug] Make it harder for a incorrect NOEDNS classification
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be made. [RT #36020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3856. [bug] Configuring libjson without also configuring libxml
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington resulted in a REQUIRE assertion when retrieving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics using json. [RT #36009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3855. [bug] Limit smoothed round trip time aging to no more than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews once a second. [RT #32909]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3854. [cleanup] Report unrecognized options, if any, in the final
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure summary. [RT #36014]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the handling of a rdataset with no records. [RT #35968]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3852. [func] Increase the default number of clients available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for servicing lightweight resolver queries, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews make them configurable via the "lwres-tasks" and
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews "lwres-clients" options. (Thanks to Tomas Hozza.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3851. [func] Allow libseccomp based system-call filtering
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson on Linux; use "configure --enable-seccomp" to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews turn it on. Thanks to Loganaden Velvindron
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of AFRINIC for the contribution. [RT #35347]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3849. [doc] Alphabetized dig's +options. [RT #35992]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3848. [bug] Adjust 'statistics-channels specified but not effective'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error message to account for JSON support. [RT #36008]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews3847. [bug] 'configure --with-dlz-postgres' failed to fail when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews there is not support available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr query. [RT #35980]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3845. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3844. [bug] Use the x64 version of the Microsoft Visual C++
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson Redistributable when built for 64 bit Windows.
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3842. [bug] Adjust RRL log-only logging category. [RT #35945]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington3840. [port] Check for arc4random_addrandom() before using it;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it's been removed from OpenBSD 5.5. [RT #35907]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3839. [test] Use only posix-compatible shell in system tests.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3837. [security] A NULL pointer is passed to query_prefetch resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a REQUIRE assertion failure when a fetch is actually
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initiated (CVE-2014-3214). [RT #35899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3836. [bug] Address C++ keyword usage in header file.
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews3835. [bug] Geoip ACL elements didn't work correctly when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referenced via named or nested ACLs. [RT #35879]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3834. [bug] The re-signing heaps were not being updated soon enough
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leading to multiple re-generations of the same RRSIG
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson when a zone transfer was in progress. [RT #35273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3833. [bug] Cross compiling was broken due to calling genrandom at
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson build time. [RT #35869]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3832. [func] "named -L <filename>" causes named to send log
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews messages to the specified file by default instead
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of to the system log. (Thanks to Tony Finch.)
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews3831. [cleanup] Reduce logging noise when EDNS state changes occur.
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews3830. [func] When query logging is enabled, log query errors at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the same level ('info') as the queries themselves.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3829. [func] "dig +ttlunits" causes dig to print TTL values
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson with time-unit suffixes: w, d, h, m, s for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews weeks, days, hours, minutes, and seconds. (Thanks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to Tony Finch.) [RT #35823]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3828. [func] "dnssec-signzone -N date" updates serial number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the current date in YYYYMMDDNN format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3827. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3825. [bug] Address sign extension bug in isc_regex_validate.
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3824. [bug] A collision between two flag values could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews problems with cache cleaning when SIT was enabled.
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews3823. [func] Log the rpz cname target when rewriting. [RT #35667]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3822. [bug] Log the correct type of static-stub zones when
330b421487d7c3a5e699472fe889aa633772057fMark Andrews removing them. [RT #35842]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update and transaction support. Thanks to Marty
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Lee for the contribution. [RT #35656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3820. [func] The DLZ API doesn't pass the database version to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the lookup() function; this can cause DLZ modules
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews that allow dynamic updates to mishandle prerequisite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checks. This has been corrected by adding a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dbversion' field to the dns_clientinfo_t
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews structure. [RT #35656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews displayed without padding. This is not a issue for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews currently defined algorithms but may be for future
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews hash algorithms. [RT #27925]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3818. [bug] Stop lying to the optimizer that 'void *arg' is a
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson constant in isc_event_allocate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3817. [func] The "delve" command is now spelled "delv" to avoid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a namespace collision with the Xapian project.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews Tony Finch.) [RT #35822]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3814. [func] The "masterfile-style" zone option controls the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews formatting of dumped zone files. Options are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "relative" (multiline format) and "full" (one
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews record per line). The default is "relative".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "debug" options when set in /etc/resolv.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Thanks to Adam Tkac at RedHat.) [RT #21885]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3812. [func] Dig now supports sending arbitrary EDNS options from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the command line (+ednsopt=code[:value]). [RT #35584]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3811. [func] "serial-update-method date;" sets serial number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on dynamic update to today's date in YYYYMMDDNN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format. (Thanks to Bradley Forschinger.) [RT #24903]
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3810. [bug] Work around broken nameservers that fail to ignore
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unknown EDNS options. [RT #35766]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3809. [doc] Fix SIT and NSID documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3808. [doc] Clean up "prefetch" documentation. [RT #35751]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3807. [bug] Fix sign extension bug in dns_name_fromtext when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lowercase is set. [RT #35743]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson3806. [test] Improved system test portability. [RT #35625]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3805. [contrib] Added contrib/perftcpdns, a performance testing tool
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for DNS over TCP. [RT #35710]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington --- 9.10.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portentry could be reset leading to an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in socket_search(). (Change #3708
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addressed the same issue but was incomplete.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3803. [bug] "named-checkconf -z" incorrectly rejected zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using alternate data sources for not having a "file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option. [RT #35685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3802. [bug] Various header files were not being installed.
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3800. [bug] A pending event on the route socket could cause an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure when shutting down named. [RT #35674]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3799. [bug] Improve named's command line error reporting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington time. [RT #35659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3797. [port] netbsd: geoip support probing was broken. [RT #35642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3795. [bug] Make named-checkconf detect raw masterfiles for
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington hint zones and reject them. [RT #35268]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews3793. [bug] zone.c:save_nsec3param() could assert when out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #35621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3792. [func] Provide links to the alternate statistics views when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews displaying in a browser. [RT #35605]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3791. [placeholder]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3790. [bug] Handle broken nameservers that send BADVERS in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response to unknown EDNS options. Maintain
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson statistics on BADVERS responses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3788. [bug] dns_peer_getrequestsit was returning request_nsid by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3787. [bug] The code that checks whether "auto-dnssec" is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allowed was ignoring "allow-update" ACLs set at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the options or view level. [RT #29536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3786. [func] Provide more detailed error codes when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews native PKCS#11. "pkcs11-tokens" now fails robustly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than asserting when run against an HSM with
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson an incomplete PKCS#11 API implementation. [RT #35479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3785. [bug] Debugging code dumphex didn't accept arbitrarily long
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington input (only compiled with -DDEBUG). [RT #35544]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington3784. [bug] Using "rrset-order fixed" when it had not been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled at compile time caused inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews results. It now works as documented, defaulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to cyclic mode. [RT #28104]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3783. [func] "tsig-keygen" is now available as an alternate
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson command name for "ddns-confgen". It generates
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a TSIG key in named.conf format without comments.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3782. [func] Specifying "auto" as the salt when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc signing -nsec3param" causes named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 64-bit salt at random. [RT #35322]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3781. [tuning] Use adaptive mutex locks when available; this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been found to improve performance under load
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington on many systems. "configure --with-locktype=standard"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restores conventional mutex locks. [RT #32576]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3780. [bug] $GENERATE handled negative numbers incorrectly.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3779. [cleanup] Clarify the error message when using an option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that was not enabled at compile time. [RT #35504]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3778. [bug] Log a warning when the wrong address family is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3777. [bug] EDNS EXPIRE code could dump core when processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLZ queries. [RT #35493]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington3776. [func] "rndc -q" suppresses output from successful
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc commands. Errors are printed on stderr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson code on API version mismatch, leading to a segfault.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3774. [func] When using "request-nsid", log the NSID value in
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington printable form as well as hex. [RT #20864]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3773. [func] "host", "nslookup" and "nsupdate" now have
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson options to print the version number and exit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson (Based in part on a contribution from Tim Tessier.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson messages. [RT #24383]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson needed to fall back to TCP due to a truncated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response. [RT #24660]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3769. [doc] Improved documentation of "rndc signing -list".
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. [RT #34000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3767. [func] Log explicitly when using rndc.key to configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews command channel. [RT #35316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3766. [cleanup] Fixed problems with building outside the source
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence tree when using native PKCS#11. [RT #35459]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3765. [bug] Fixed a bug in "rndc secroots" that could crash
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named when dumping an empty keynode. [RT #35469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (to set up a successor key and set the prepublication
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence interval) were missing from dnssec-keyfromlabel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson re-fetch them when restarting validation. [RT #35476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3762. [bug] Address build problems with --pkcs11-native +
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington --with-openssl with ECDSA support. [RT #35467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3759. [port] Enable delve on Windows. [RT #35441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3757. [port] Enable Python tools (dnssec-coverage,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-checkds) to run on Windows. [RT #34355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3756. [bug] GSSAPI Kerberos realm checking was broken in
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson check_config leading to spurious messages being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logged. [RT #35443]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3755. [func] Add stats counters for known EDNS options + others.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3754. [cleanup] win32: Installer now places files in the
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence Program Files area rather than system services.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3752. [bug] Address potential REQUIRE failure if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3751. [tuning] The default setting for the -U option (setting
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence the number of UDP listeners per interface) has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been adjusted to improve performance. [RT #35417]
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence3750. [experimental] Partially implement EDNS EXPIRE option as described
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the remaining time until expiry for slave zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EXPIRE uses an experimental option code (65002),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which is subject to change. [RT #35416]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson3749. [func] "dig +subnet" sends an EDNS client subnet option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews containing the specified address/prefix when
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson querying. (Thanks to Wilmer van der Gaast.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3747. [bug] A race condition could lead to a core dump when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroying a resolver fetch object. [RT #35385]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3746. [func] New "max-zone-ttl" option enforces maximum
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTLs for zones. If loading a zone containing a
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson higher TTL, the load fails. DDNS updates with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews higher TTLs are accepted but the TTL is truncated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: Currently supported for master zones only;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing slaves will be added.) [RT #38405]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3745. [func] "configure --with-tuning=large" adjusts various
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compiled-in constants and default settings to
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews values suited to large servers with abundant
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #29538]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (similar to DNS Cookies by Donald Eastlake 3rd),
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews which are designed to help clients detect off-path
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spoofed responses and for servers to identify
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews legitimate clients.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews SIT uses an experimental EDNS option code (65001),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which will be changed to an IANA-assigned value
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews if the experiment is deemed a success.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews SIT can be enabled via "configure --enable-sit" (or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-developer). It is enabled by default in
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews Servers can be configured to send smaller responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to clients that have not identified themselves via
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews SIT. RRL processing has also been updated;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews legitimate clients are not subject to rate
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews limiting. [RT #35389]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3743. [bug] delegation-only flag wasn't working in forward zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews declarations despite being documented. This is
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews needed to support turning off forwarding and turning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on delegation only at the same name. [RT #35392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3742. [port] linux: libcap support: declare curval at start of
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews block. [RT #35387]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3741. [func] "delve" (domain entity lookup and validation engine):
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A new tool with dig-like semantics for performing DNS
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews lookups, with internal DNSSEC validation, using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same resolver and validator logic as named. This
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews allows easy validation of DNSSEC data in environments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with untrustworthy resolvers, and assists with
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews troubleshooting of DNSSEC problems. [RT #32406]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3740. [contrib] Minor fixes to configure --with-dlz-bdb,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3739. [func] Added per-zone stats counters to track TCP and
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson UDP queries. [RT #35375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with inline zones. [RT #35353]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3736. [bug] nsupdate: When specifying a server by name,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fall back to alternate addresses if the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address for that name is not reachable. [RT #25784]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3735. [cleanup] Merged the libiscpk11 library into libisc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to simplify dependencies. [RT #35205]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3734. [bug] Improve building with libtool. [RT #35314]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3733. [func] Improve interface scanning support. Interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information will be automatically updated if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use "automatic-interface-scan no;" to disable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews driver to dump core on 64-bit systems. [RT #35324]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3731. [func] Added a "no-case-compress" ACL, which causes
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence named to use case-insensitive compression
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (disabling change #3645) for specified
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence clients. (This is useful when dealing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with broken client implementations that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use case-sensitive name comparisons,
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence rejecting responses that fail to match the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capitalization of the query that was sent.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence configuring key event dates in the dnssec tools.
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews3729. [bug] dnssec-keygen could set the publication date
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly when only the activation date was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified on the command line. [RT #35278]
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews3728. [doc] Expanded native-PKCS#11 documentation,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specifically pkcs11: URI labels. [RT #35287]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3727. [func] The isc_bitstring API is no longer used and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been removed from libisc. [RT #35284]
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews3726. [cleanup] Clarified the error message when attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to configure more than 32 response-policy zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleaned up and rearranged the contrib
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence directory, and added a README.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence host from exiting properly after completing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a UDP query. [RT #35288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3723. [cleanup] Imported keys are now handled the same way
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence regardless of DNSSEC algorithm. [RT #35215]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3722. [bug] Using geoip ACLs in a blackhole statement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause a segfault. [RT #35272]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3721. [doc] Improved documentation of the EDNS processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enhancements introduced in change #3593. [RT #35275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3720. [bug] Address compiler warnings. [RT #35261]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews probing to see if it is possible to set dscp values
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence on a per packet basis. [RT #35252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3716. [bug] The dns_request code was setting dcsp values when not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requested. [RT #35252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3715. [bug] The region and city databases could fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialize when using some versions of libGeoIP,
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence causing assertion failures when named was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured to use them. [RT #35427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3714. [test] System tests that need to test for cryptography
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support before running can now use a common
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "testcrypto.sh" script to do so. [RT #35213]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone objects that are configured not to send
5455f30a7532738d750252c00e649890c694ee30Brian Wellington notify requests. [RT #35195]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington3712. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3711. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3710. [bug] Address double dns_zone_detach when switching to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using automatic empty zones from regular zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on all platforms to avoid portability issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3708. [bug] Address a portentry locking issue in dispatch.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson on a missing resolv.conf file and initializes the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structure as if it had been configured with:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver ::1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver 127.0.0.1
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson Note: Callers will need to be updated to treat
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_FILENOTFOUND as a qualified success or else
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they will leak memory. The following code fragment
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will work with both old and new versions without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changing the behaviour of the existing code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resconf = NULL;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if (result != ISC_SUCCESS) {
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if (resconf != NULL)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews irs_resconf_destroy(&resconf);
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3706. [contrib] queryperf: Fixed a possible integer overflow when
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington printing results. [RT #35182]
751aa24c98fea02215cad95a08411af547d70e41Bob Halley3705. [func] "configure --enable-native-pkcs11" enables BIND
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to use the PKCS#11 API for all cryptographic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions, so that it can drive a hardware service
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews module directly without the need to use a modified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL as intermediary (so long as the HSM's vendor
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson provides a complete-enough implementation of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews PKCS#11 interface). This has been tested successfully
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with the Thales nShield HSM and with SoftHSMv2 from
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson the OpenDNSSEC project. [RT #29031]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3703. [func] To improve recursive resolver performance, cache
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews records which are still being requested by clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can now be automatically refreshed from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authoritative server before they expire, reducing
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson or eliminating the time window in which no answer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is available in the cache. See the "prefetch" option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for more details. [RT #35041]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of time to check for coverage; events further into
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington the future are ignored. 'dnssec-coverage -z'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checks only ZSK events, and 'dnssec-coverage -k'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3701. [func] named-checkconf can now obscure shared secrets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when printing by specifying '-x'. [RT #34465]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the stylesheet can now be cached by the browser;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section headers are omitted from the stats display
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when there is no data in those sections to be
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson displayed; counters are now right-justified for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews easier readability. [RT #35117]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson3698. [cleanup] Replaced all uses of memcpy() with memmove().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is enabled. [RT #35133]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence3696. [bug] dig failed to handle AXFR style IXFR responses which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews span multiple messages. [RT #35137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3695. [bug] Address a possible race in dispatch.c. [RT #35107]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson3694. [bug] Warn when a key-directory is configured for a zone,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but does not exist or is not a directory. [RT #35108]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3693. [security] memcpy was incorrectly called with overlapping
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson ranges resulting in malformed names being generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on some platforms. This could cause INSIST failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when serving NSEC3 signed zones (CVE-2014-0591).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson was no data at the node. [RT #35080]
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington3691. [contrib] Address null pointer dereference in LDAP and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews MySQL DLZ modules.
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington3690. [bug] Iterative responses could be missed when the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews port for an upstream query was the same as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listener port (53). [RT #34925]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3689. [bug] Fixed a bug causing an insecure delegation from one
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews static-stub zone to another to fail with a broken
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trust chain. [RT #35081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3688. [bug] loadnode could return a freed node on out of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson3686. [func] "dnssec-signzone -Q" drops signatures from keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that are still published but no longer active.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones using inline-signing. [RT #35105]
55ddb88e53838693370c213930beda1652b8a583Brian Wellington3684. [bug] The list of included files would grow on reload.
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington3683. [cleanup] Add a more detailed "not found" message to rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands which specify a zone name. [RT #35059]
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington3682. [bug] Correct the behavior of rndc retransfer to allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing slave zones to retain NSEC3 parameters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of reverting to NSEC. [RT #34745]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3681. [port] Update the Windows build system to support feature
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews selection and WIN64 builds. This is a work in
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley progress. [RT #34160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3679. [bug] dig could fail to clean up TCP sockets still
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence waiting on connect(). [RT #35074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews times. [RT #35073]
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington3676. [bug] "named-checkconf -z" now checks zones of type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hint and redirect as well as master. [RT #35046]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3675. [misc] Provide a place for third parties to add version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information for their extensions in the version
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington file by setting the EXTENSIONS variable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3673. [func] New "in-view" zone option allows direct sharing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of zones between views. [RT #32968]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3672. [func] Local address can now be specified when using
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson dns_client API. [RT #34811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson non-imported private key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3670. [bug] Address read after free in server side of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lwres_getrrsetbyname. [RT #29075]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3667. [test] dig: add support to keep the TCP socket open between
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington successive queries (+[no]keepopen). [RT #34918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson of individual resource records. This tool is intended
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be called by provisioning systems so that the front
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end does not need to be upgraded to support new DNS
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson record types. [RT #34778]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3665. [bug] Failure to release lock on error in receive_secure_db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews locking and other bugs. [RT #34855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3661. [bug] Address lock order reversal deadlock with inline zones.
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3659. [port] solaris: don't add explicit dependencies/rules for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews python programs as make won't use the implicit rules.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3658. [port] linux: Address platform specific compilation issue
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when libcap-devel is installed. [RT #34838]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3657. [port] Some readline clones don't accept NULL pointers when
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson calling add_history. [RT #34842]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence3656. [security] Treat an all zero netmask as invalid when generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the localnets acl. (The prior behavior could
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence allow unexpected matches when using some versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson3655. [cleanup] Simplify TCP message processing when requesting a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone transfer. [RT #34825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3654. [bug] Address race condition with manual notify requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3653. [func] Create delegations for all "children" of empty zones
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington except "forward first". [RT #34826]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify requests. [RT #30589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley the associated view. [RT #34765]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3647. [bug] Address a race condition when shutting down a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson causing garbage in log messages. [RT #34738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3645. [protocol] Use case sensitive compression when responding to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. [RT #34737]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley3642. [func] Allow externally generated DNSKEY to be imported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into the DNSKEY management framework. A new tool
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-importkey is used to do this. [RT #34698]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson better. [RT #34625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3640. [bug] ndots was not being checked when searching. Only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews continue searching on NXDOMAIN responses. Add the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ability to specify ndots to nslookup. [RT #34711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a key zone. [RT #34238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews encountered. [RT #34668]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews3637. [bug] 'allow-query-on' was checking the source address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than the destination address. [RT #34590]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson3636. [bug] Automatic empty zones now behave better with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forward only "zones" beneath them. [RT #34583]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3635. [bug] Signatures were not being removed from a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only KSK keys for a algorithm. [RT #34439]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington3634. [func] Report build-id in rndc status. Report build-id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when building from a git repository. [RT #20422]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to support new EDNS options. [RT #34414]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3632. [bug] Signature from newly inactive keys were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed. [RT #32178]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley qtype is SIG. [RT #34600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records by dig to be suppressed (dig +nocrypto).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3625. [bug] Don't send notify messages to machines outside of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the json library. [RT #34449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3623. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache statistics. [RT #34339]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can lead to a remotely triggerable REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-4854). [RT #34238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington RPZ responses to be configured on the basis of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the client IP address; this can be used, for
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington example, to blacklist misbehaving recursive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or stub resolvers. [RT #33605]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington3618. [func] "rndc reload" now checks modification times of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews include files as well as master files to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whether to skip reloading a zone. [RT #33936]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson3617. [bug] Named was failing to answer queries during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reload" [RT #34098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3616. [bug] Change #3613 was incomplete. [RT #34177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3615. [cleanup] "configure" now finishes by printing a summary
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson of optional BIND features and whether they are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active or inactive. ("configure --enable-full-report"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increases the verbosity of the summary.) [RT #31777]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson3614. [port] Check for <linux/types.h>. [RT #34162]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3613. [bug] named could crash when deleting inline-signing
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley zones with "rndc delzone". [RT #34066]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington attack based on differential timing. [RT #33939]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington installer. [RT #34116]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson3609. [bug] Corrected a possible deadlock in applications using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the export version of the isc_app API. [RT #33967]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson3608. [port] win32: added todos.pl script to ensure all text files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the win32 build depends on are converted to DOS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newline format. [RT #22067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington message. [RT #34045]
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington3606. [func] "rndc flushtree" now flushes matching
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records in the address database and bad cache
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson as well as the DNS cache. (Previously only the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS cache was flushed.) [RT #33970]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley3605. [port] win32: Addressed several compatibility issues
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with newer versions of Visual Studio. [RT #33916]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews3604. [bug] Fixed a compile-time error when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews JSON but not XML. [RT #33959]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews integrate with named and serve DNS data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Contributed by John Eaglesham of Yahoo.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attribute in DH derive key. [RT #33928]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3600. [cleanup] dig: Fixed a typo in the warning output when receiving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an oversized response. [RT #33910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson3598. [cleanup] Improved portability of map file code. [RT #33820]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson when loading zones in map format. [RT #33381]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3596. [port] Updated win32 build documentation, added
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews dnssec-verify. [RT #22067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3593. [func] Update EDNS processing to better track remote server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capabilities. [RT #30655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3592. [doc] Moved documentation of rndc command options to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc man page. [RT #33506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #33746]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3590. [bug] When using RRL on recursive servers, defer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rate-limiting until after recursion is complete;
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington also, use correct rcode for slipped NXDOMAIN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #33604]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson3589. [func] Report serial numbers in when starting zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Report accepted NOTIFY requests including serial.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3588. [bug] dig: addressed a memory leak in the sigchase code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that could cause a shutdown crash. [RT #33733]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews3587. [func] 'named -g' now checks the logging configuration but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews does not use it. [RT #33473]
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3585. [func] "rndc delzone -clean" option removes zone files
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson when deleting a zone. [RT #33570]
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington3584. [security] Caching data from an incompletely signed zone could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an assertion failure in resolver.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-3919). [RT #33690]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3582. [bug] Silence false positive warning regarding missing file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directive for inline slave zones. [RT #33662]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3580. [bug] Addressed a possible race in acache.c [RT #33602]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3579. [maint] Updates to PKCS#11 openssl patches, supporting
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington3576. [bug] Address a shutdown race when validating. [RT #33573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3575. [func] Changed the logging category for RRL events from
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington 'queries' to 'query-errors'. [RT #33540]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3574. [doc] The 'hostname' keyword was missing from server-id
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson description in the named.conf man page. [RT #33476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington zone names containing punctuation marks and other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nonstandard characters. [RT #33419]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington3572. [func] Threads are now enabled by default on most
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operating systems. [RT #25483]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson3571. [bug] Address race condition in dns_client_startresolve().
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews3570. [bug] Check internal pointers are valid when loading map
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #33403]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson module, and added multithread support. [RT #33394]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3568. [cleanup] Add a product description line to the version file,
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson to be reported by named -v/-V. [RT #33366]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington3565. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3562. [func] Update map file header format to include a SHA-1 hash
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews of the database content, so that corrupted map files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be rejected at load time. [RT #32459]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews or NOTIMP. Adjust usage message. [RT #33363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews when set via configure. [RT #33345]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3559. [func] Check that both forms of Sender Policy Framework
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson records exist or do not exist. [RT #33355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3555. [bug] Address theoretical race conditions in acache.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (change #3553 was incomplete). [RT #33252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3554. [bug] RRL failed to correctly rate-limit upward
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referrals and failed to count dropped error
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson responses in the statistics. [RT #33225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3550. [func] Unified the internal and export versions of the
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington BIND libraries, allowing external clients to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the same libraries as BIND. [RT #33131]
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington3549. [doc] Documentation for "request-nsid" was missing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3548. [bug] The NSID request code in resolver.c was broken
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington resulting in invalid EDNS options being sent.
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews3547. [bug] Some malformed unknown rdata records were not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews detected and rejected. [RT #33129]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington3546. [func] Add EUI48 and EUI64 types. [RT #33082]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3544. [contrib] check5011.pl: Script to report the status of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed keys as recorded in managed-keys.bind.
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson Contributed by Tony Finch <dot@dotat.at>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3543. [bug] Update socket structure before attaching to socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews manager after accept. [RT #33084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3542. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3541. [bug] Parts of libdns were not properly initialized when
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson built in libexport mode. [RT #33028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3539. [port] win32: timestamp format didn't match other platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3538. [test] Running "make test" now requires loopback interfaces
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson to be set up. [RT #32452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington to peers before being dumped to disk rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after. [RT #27242]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3536. [func] Add support for setting Differentiated Services Code
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington Point (DSCP) values in named. Most configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options which take a "port" option (e.g.,
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington listen-on, forwarders, also-notify, masters,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify-source, etc) can now also take a "dscp"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option specifying a code point for use with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews outgoing traffic, if supported by the underlying
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington OS. [RT #27596]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews3534. [bug] Extra text after an embedded NULL was ignored when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsing zone files. [RT #32699]
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3531. [bug] win32: A uninitialized value could be returned on out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3529. [func] Named now listens on both IPv4 and IPv6 interfaces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by default. Named previously only listened on IPv4
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington interfaces by default unless named was running in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 only mode. [RT #32945]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3528. [func] New "dnssec-coverage" command scans the timing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata for a set of DNSSEC keys and reports if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lapse in signing coverage has been scheduled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inadvertently. (Note: This tool depends on python;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it will not be built or installed on systems that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews do not have a python interpreter.) [RT #28098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3527. [compat] Add a URI to allow applications to explicitly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews request a particular XML schema from the statistics
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence channel, returning 404 if not supported. [RT #32481]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson3526. [cleanup] Set up dependencies for unit tests correctly during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #32803]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3525. [func] Support for additional signing algorithms in rndc:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence The -A option to rndc-confgen can be used to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews select the algorithm for the generated key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (The default is still hmac-md5; this may
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence change in a future release.) [RT #20363]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews3524. [func] Added an alternate statistics channel in JSON format,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the server is built with the json-c library:
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews http://[address]:[port]/json. [RT #32630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews dynamically-loadable modules, and added the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "wildcard" module based on a contribution from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson they ought to. [RT #32685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where it should have been. [RT #32794]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3519. [func] Full replay protection via four-way handshake is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now mandatory for rndc clients. Very old versions
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence of rndc will no longer work. [RT #32798]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews so that all dns_rrl_rtype_t enum values fit regardless
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence of whether it is teated as signed or unsigned by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the compiler. [RT #32792]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence3516. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3515. [port] '%T' is not portable in strftime(). [RT #32763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3514. [bug] The ranges for valid key sizes in ddns-confgen and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc-confgen were too constrained. Keys up to 512
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence bits are now allowed for most algorithms, and up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 1024 bits for hmac-sha384 and hmac-sha512.
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence3513. [func] "dig -u" prints times in microseconds rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews milliseconds. [RT #32704]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3512. [func] "rndc validation check" reports the current status
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC validation. [RT #21397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3511. [doc] Improve documentation of redirect zones. [RT #32756]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews3510. [func] "rndc status" and XML statistics channel now report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server start and reconfiguration times. [RT #21048]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3509. [cleanup] Added a product line to version file to allow for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews easy naming of different products (BIND
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington vs BIND ESV, for example). [RT #32755]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3508. [contrib] queryperf was incorrectly rejecting the -T option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to chart query data before any queries had been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received. [RT #32620]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the keyword "unlimited" is no longer defined as equal
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington to 4 gigabytes (except on 32-bit platforms); it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews means literally unlimited. [RT #32358]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson3505. [bug] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews larger values than 4 gigabytes could not be set
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson explicitly, though larger sizes were available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when setting cache size to 0. This has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrected; the full range is now available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3504. [func] Add support for ACLs based on geographic location,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using MaxMind GeoIP databases. Based on code
f53848e17123569387b279578f0100dca5407da5Mark Andrews contributed by Ken Brownfield <kb@slide.com>.
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington3503. [doc] Clarify size_spec syntax. [RT #32449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of "terse". [RT #29165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3501. [func] zone-statistics now takes three options: full,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews terse, and none. "yes" and "no" are retained as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews synonyms for full and terse, respectively. [RT #29165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3500. [security] Support NAPTR regular expression validation on
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington all platforms without using libregex, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be vulnerable to memory exhaustion attack
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-2266). [RT #32688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3498. [bug] zone statistics for zones which matched a potential
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty zone could have their zone-statistics setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3497. [func] When deleting a slave/stub zone using 'rndc delzone'
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson report the files that were being used so they can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be cleaned up if desired. [RT #27899]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson3496. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3495. [func] Support multiple response-policy zones (up to 32),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while improving RPZ performance. "response-policy"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews syntax now includes a "min-ns-dots" clause, with
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence default 1, to exclude top-level domains from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-rpz-nsdname are now the default. [RT #32251]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3494. [func] DNS RRL: Blunt the impact of DNS reflection and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews amplification attacks by rate-limiting substantially-
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews identical responses. [RT #28130]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence contributed by Mark Goldfinch. [RT #32549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3492. [bug] Fixed a regression in zone loading performance
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to lock contention. [RT #30399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington file name. [RT #31946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3490. [bug] When logging RDATA during update, truncate if it's
253f774e358dba38742a484426a4cadf4f248817Brian Wellington too long. [RT #32365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington dns_dlzcreate() failed to properly initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlzdb.link. When cloning a rdataset do not copy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the link contents. [RT #32651]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3487. [bug] Change 3444 was not complete. There was a additional
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson place where the NOQNAME proof needed to be saved.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that had been deleted and then recreated. [RT #32506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence3484. [bug] Some statistics were incorrectly rendered in XML.
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington3483. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3482. [func] dig +nssearch now prints name servers that don't
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer have address records (missing AAAA or A, or the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't exist). [RT #29348]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3481. [cleanup] Removed use of const const in atf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3480. [bug] Silence logging noise when setting up zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics. [RT #32525]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3479. [bug] Address potential memory leaks in gssapi support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews code. [RT #32405]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3478. [port] Fix a build failure in strict C99 environments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3477. [func] Expand logging when adding records via DDNS update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found" error on inline-signing zones. [RT #29226]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3475. [cleanup] Changed name of 'map' zone file format (previously
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'fast'). [RT #32458]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3474. [bug] nsupdate could assert when the local and remote
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address families didn't match. [RT #22897]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson3473. [bug] dnssec-signzone/verify could incorrectly report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error condition due to an empty node above an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews opt-out delegation lacking an NSEC3. [RT #32072]
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson3472. [bug] The active-connections counter in the socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics could underflow. [RT #31747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3471. [bug] The number of UDP dispatches now defaults to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the number of CPUs even if -n has been set to
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson a higher value. [RT #30964]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3470. [bug] Slave zones could fail to dump when successfully
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson refreshing after an initial failure. [RT #31276]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3469. [bug] Handle DLZ lookup failures more gracefully. Improve
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson backward compatibility between versions of DLZ dlopen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #32275]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3468. [security] RPZ rules to generate A records (but not AAAA records)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure when used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to check for delete date < inactive date. [RT #31719]
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in DLZ example driver. [RT #32275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3462. [doc] Clarify server selection behavior of dig when using
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson -4 or -6 options. [RT #32181]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews set. [RT #32237]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to specify the path to the journal file. [RT #30958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews domain named in a request. [RT #29682]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews failed. [RT #31960]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson3452. [bug] Accept duplicate singleton records. [RT #32329]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews strings so that compiler can perform sanity checks;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check the snprintf results. [RT #17576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3445. [bug] Warn about zone files with blank owner names
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley immediately after $ORIGIN directives. [RT #31848]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson insecure responses. [RT #21409]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejected when generating keys. [RT #31927]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3442. [port] Net::DNS 0.69 introduced a non backwards compatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews change. [RT #32216]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington3440. [bug] Reorder get_key_struct to not trigger a assertion when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleaning up due to out of memory error. [RT #32131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3439. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence buffers with constant data. [RT #32064]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3435. [bug] Cross compilation support in configure was broken.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3434. [bug] Pass client info to the DLZ findzone() entry
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point in addition to lookup(). This makes it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible for a database to answer differently
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence whether it's authoritative for a name depending
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on the address of the client. [RT #31775]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3433. [bug] dlz_findzone() did not correctly handle
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_NOMORE. [RT #31172]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLZ databases are searched in the order configured,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless set to "search no", in which case a
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson zone can be configured to be retrieved from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular DLZ database by using a "dlz <name>"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option in the zone statement. DLZ databases can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support type "master" and "redirect" zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson not accepted. [RT #31927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'T' between the date and time. [RT #32044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returning a valid serial. [RT #32007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3427. [bug] dig +trace incorrectly displayed name server
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson addresses instead of names. [RT #31641]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington found. [RT #31968]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in use after free. [RT #31908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of possible values. Address portability issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews match the referral. [RT #31281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews adds query type statistics at the zone level, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews flattens the XML tree and uses compressed format to
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington optimize parsing. Includes new XSL that permits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews charting via the Google Charts API on browsers that
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews support javascript in XSL. The old XML schema has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecated. [RT #30023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3417. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dispatches per interface. [RT #31743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3415. [bug] named could die with a REQUIRE failure if a validation
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews was canceled. [RT #31804]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews synthesized. [RT #27636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3412. [bug] Copy timeval structure from control message data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to UDP. [RT #31690]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from X.509 certificates, for use with DANE
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews (DNS-based Authentication of Named Entities).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews are now legal in slave zones as long as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing is in use. [RT #31078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3407. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3406. [bug] mem.c: Fix compilation errors when building with
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3405. [bug] Handle time going backwards in acache. [RT #31253]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRSIG and NSEC records from nodes that used to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in-zone but are now below a zone cut. [RT #31556]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3402. [test] The IPv6 interface numbers used for system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tests were incorrect on some platforms. [RT #25085]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington in the "srcid" file in the build tree and normally set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the most recent git hash. [RT #31494]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clash. [RT #31515]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3398. [bug] SOA parameters were not being updated with inline
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signed zones if the zone was modified while the
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington server was offline. [RT #29272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3396. [bug] OPT records were incorrectly removed from signed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews truncated responses. [RT #31439]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3394. [bug] Adjust 'successfully validated after lower casing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signer' log level and category. [RT #31414]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3388. [bug] Fixed several Coverity warnings.
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews Note: This change includes a fix for a bug that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was subsequently determined to be an exploitable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews security vulnerability, CVE-2012-5688: named could
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer die on specific queries with dns64 enabled.
588b63e1a86fb707172830e14897da624ed380edMark Andrews3387. [func] DS digest can be disabled at runtime with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disable-ds-digests. [RT #21581]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington3386. [bug] Address locking violation when generating new NSEC /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3 chains. [RT #31224]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews3385. [bug] named-checkconf didn't detect missing master lists
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in also-notify clauses. [RT #30810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3384. [bug] Improved logging of crypto errors. [RT #30963]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3383. [security] A certain combination of records in the RBT could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause named to hang while populating the additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section of a response. [RT #31090]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if set, regardless of the address family in use.
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington3381. [contrib] Update queryperf to support more RR types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3380. [bug] named could die if a nonexistent master list was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referenced in a also-notify. [RT #31004]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "const (type)* const". [RT #31069]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #31044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3376. [bug] Lack of EDNS support was being recorded without a
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer successful response. [RT #30811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems with 64 bit longs. [RT #30232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson3372. [bug] Silence spurious "deleted from unreachable cache"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #30501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington add NS RRsets to the additional section or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews if built with readline support. [RT #29550]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not C++ safe.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3367. [bug] dns_dnsseckey_create() result was not being checked.
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson3366. [bug] Fixed Read-After-Write dependency violation for IA64
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic operations. [RT #25181]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3365. [bug] Removed spurious newlines from log messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3364. [security] Named could die on specially crafted record.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington in static-stub zones; this had been overlooked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3362. [bug] Setting some option values to 0 in named.conf
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer could trigger an assertion failure on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer when salt was set to '-' (no salt). [RT #30099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3360. [bug] 'host -w' could die. [RT #18723]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3359. [bug] An improperly-formed TSIG secret could cause a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory leak. [RT #30607]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3358. [placeholder]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
e412ae947df6de858883564b8676a9650df70d9aMark Andrews approaching their expiry, so they don't remain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in caches after expiry. [RT #26429]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews3355. [port] Use more portable awk in verify system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3353. [bug] Use a single task for task exclusive operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson adb cache. [RT #29856]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory debugging flags are set. [RT #30243]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson3350. [bug] Memory read overrun in isc___mem_reallocate if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record matching the covering type exists at a higher
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trust level. Such data already can't be retrieved from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the cache since change 3218 -- this prevents it
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson being inserted into the cache as well. [RT #26809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file would cause a change in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews permissions of the existing file. [RT #27724]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3346. [security] Bad-cache data could be used before it was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialized, causing an assert. [RT #30025]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3345. [bug] Addressed race condition when removing the last item
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson or inserting the first item in an ISC_QUEUE.
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington3344. [func] New "dnssec-checkds" command checks a zone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews determine which DS records should be published
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews in the parent zone, or which DLV records should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews published in a DLV zone, and queries the DNS to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that it exists. (Note: This tool depends
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews on python; it will not be built or installed on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems that do not have a python interpreter.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3343. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in excessive cpu usage in some cases.
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3341. [func] New "dnssec-verify" command checks a signed zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chains. [RT #23673]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3340. [func] Added new 'map' zone file format, which is an image
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer of a zone database that can be loaded directly into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory via mmap(), allowing much faster zone loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: Because of pointer sizes and other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews considerations, this file format is platform-dependent;
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington 'map' zone files cannot always be transferred from one
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to another.) [RT #25419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington3338. [bug] Address race condition in units tests: asyncload_zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and asyncload_zt. [RT #26100]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer in controls. [RT #29694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3336. [func] Maintain statistics for RRsets tagged as "stale".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3335. [func] nslookup: return a nonzero exit code when unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to get an answer. [RT #29492]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3334. [bug] Hold a zone table reference while performing a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews asynchronous load of a zone. [RT #28326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named to not recover if it loses connectivity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataslabs. [RT #29644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3330. [func] Fix missing signatures on NOERROR results despite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ rewriting. Also
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson - add optional "recursive-only yes|no" to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response-policy statement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add optional "max-policy-ttl" to the response-policy
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews statement to limit the false data that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "recursive-only no" can introduce into
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews resolvers' caches
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley when queryperf is available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (The old encoding is still accepted.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer generate RRSIG records with the signer-name in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lower case. We accept them with any case, but if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they fail to validate, we try again in lower case.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley3328. [bug] Fixed inconsistent data checking in dst_parse.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff to 'filter-aaaa-on-v4' but applies to IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. (Use "configure --enable-filter-aaaa"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to enable this option.) [RT #27308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3326. [func] Added task list statistics: task model, worker
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson threads, quantum, tasks running, tasks ready.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3325. [func] Report cache statistics: memory use, number of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nodes, number of hash buckets, hit and miss counts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3323. [func] Report the number of buckets the resolver is using.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews3321. [func] Monitor the number of recursive fetches and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of open sockets, and report these values in
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff the statistics channel. [RT #27054]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson3320. [func] Added support for monitoring of recursing client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews count. [RT #27009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hash size. [RT #27057]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson3318. [tuning] Reduce the amount of work performed while holding a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bucket lock when finished with a fetch context.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3316. [tuning] Improved locking performance when recursing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson queries; this can improve performance on busy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiprocessor systems by reducing lock contention.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3314. [bug] The masters list could be updated while stub_callback
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff or refresh_callback were using it. [RT #26732]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3311. [bug] Abort the zone dump if zone->db is NULL in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley3308. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson3303. [bug] named could die when reloading. [RT #28606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys if the zone name contained character that
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington required special mappings. [RT #28600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for non-recursive queries. [RT #28565]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson3300. [bug] Named could die if gssapi was enabled in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but was not compiled in. [RT #28338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3298. [bug] Named could dereference a NULL pointer in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson3297. [bug] Named could die on a malformed master file. [RT #28467]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson3296. [bug] Named could die with a INSIST failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews client.c:exit_check. [RT #28346]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson portable. [RT # 26542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #28265]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson3288. [bug] dlz_destroy() function wasn't correctly registered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the DLZ dlopen driver. [RT #28056]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington3286. [bug] Managed key maintenance timer could fail to start
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after 'rndc reconfig'. [RT #26786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews proveunsecure after calling startfinddlvsep.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3284. [bug] Address race conditions with the handling of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to load. [RT #27863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the old NS RRset when replacing it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #27792] [RT #27884]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews despite succeeding over the loopback interface.
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington3280. [bug] Potential double free of a rdataset on out of memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with DNS64. [RT #27762]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson a asynchronous load. Address potential memory leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the asynchronous is cancelled. [RT #27750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3278. [bug] Make sure automatic key maintenance is started
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington when "auto-dnssec maintain" is turned on during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reconfig". [RT #26805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson3276. [bug] win32: ns_os_openfile failed to return NULL on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews safe_open failure. [RT #27696]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option had been misspelled as '-clear'. (To avoid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews future confusion, both options now work.) [RT #27173]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3274. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3273. [bug] AAAA responses could be returned in the additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section even when filter-aaaa-on-v4 was in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3272. [func] New "rndc zonestatus" command prints information
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson about the specified zone. [RT #21671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson times before giving up. mksymtbl was using non
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews --- 9.9.0rc2 released ---
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when inline-signing was in use. [RT #27650]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3269. [port] darwin 11 and later now built threaded by default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out the earliest expiry time. [RT #23311]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3267. [bug] Memory allocation failures could be mis-reported as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected error. New ISC_R_UNSET result code.
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson3266. [bug] The maximum number of NSEC3 iterations for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY RRset was not being properly computed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing code. [RT #27557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3264. [bug] Automatic regeneration of signatures in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing zone could stall when the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was restarted. [RT #27344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington inline-signing zone. [RT #27337]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for some query patterns. [RT #27170/27185]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0rc1 released ---
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington3259. [bug] named-compilezone: Suppress "dump zone to <file>"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message when writing to stdout. [RT #27109]
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington3258. [test] Add "forcing full sign with unreadable keys" test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington in a pipe or socket. [RT #27109]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3255. [func] No longer require that a empty zones be explicitly
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson enabled or that a empty zone is disabled for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long. [RT #26956]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington3252. [bug] When master zones using inline-signing were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated while the server was offline, the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone could fall out of sync with the signed
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson copy. They can now resynchronize. [RT #26676]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory dns_sdlz_putrr() can allocate per record to
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3250. [func] 'configure --enable-developer'; turn on various
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson configure options, normally off by default, that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews we want developers to build and test with. [RT #27103]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson3249. [bug] Update log message when saving slave zones files for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews analysis after load failures. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3248. [bug] Configure options --enable-fixed-rrset and
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews --enable-exportlib were incompatible with each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews other. [RT #27087]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3247. [bug] 'raw' format zones failed to preserve load order
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews breaking 'fixed' sort order. [RT #27087]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3246. [bug] Named failed to start with a empty also-notify list.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington3245. [bug] Don't report a error unchanged serials unless there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were other changes when thawing a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-fromdifferences. [RT #26845]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also simplified nsupdate syntax to make "update"
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer and "prereq" optional. [RT #24659]
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being properly set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3242. [func] Extended the header of raw-format master files to
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews include the serial number of the zone from which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they were generated, if different (as in the case
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence of inline-signing zones). This is to be used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing zones, to track changes between the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned and signed versions of the zone, which may
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence have different serial numbers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: raw zonefiles generated by this version of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND are no longer compatible with prior versions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To generate a backward-compatible raw zonefile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using dnssec-signzone or named-compilezone, specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output format "raw=0" instead of simply "raw".)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3241. [bug] Address race conditions in the resolver code.
529a6b5224d751504027293a766a4c8b81241869Brian Wellington3240. [bug] DNSKEY state change events could be missed. [RT #26874]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington timestamp. [RT #26883]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3238. [bug] keyrdata was not being reinitialized in
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington lib/dns/rbtdb.c:iszonesecure. [RT #26913]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson EDNS(0) fallback behavior. [RT #26416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington the generated diff and optionally writes it to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews journal. [RT #26386]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3232. [bug] Zero zone->curmaster before return in
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson dns_zone_setmasterswithkeys(). [RT #26732]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3231. [bug] named could fail to send a incompressible zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews axfr with a serial of 0. [RT #26796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3229. [bug] Fix local variable to struct var assignment
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found by CLANG warning.
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer3228. [tuning] Dynamically grow symbol table to improve zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loading performance. [RT #26523]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson and getservbyname() self thread safe. [RT #26232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #26507]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3221. [bug] Fixed a potential core dump on shutdown due to
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson referencing fetch context after it's been freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could fail to set the database version correctly,
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence causing an assertion failure. [RT #26180]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson nonexistent records, leading to an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #26590]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson3214. [func] Add 'named -U' option to set the number of UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listener threads per interface. [RT #26485]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews list prior to adding a reference to it leading a
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington possible assertion failure. [RT #23219]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington option prints in single-line-per-record format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overload could trigger an assertion failure. [RT #26463]
da527e4ff6a013364826637963e7ac372e024f33David Lawrence3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver behavior. Enable "dig +adflag" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dig +edns=0" by default. Enable "+dnssec" when
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence running "dig +trace". [RT #23497]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister3204. [bug] When a master server that has been marked as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unreachable sends a NOTIFY, mark it reachable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews again. [RT #25960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3203. [bug] Increase log level to 'info' for validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3202. [bug] NOEDNS caching on timeout was too aggressive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson instead of only being used as a toggle. [RT #18351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3200. [doc] Some rndc functions were undocumented or were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews missing from 'rndc -h' output. [RT #25555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3199. [func] When logging client information, include the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being queried. [RT #25944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews permissions. [RT #24866]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3197. [bug] Don't try to log the filename and line number when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the config parser can't open a file. [RT #22263]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't exist. [RT #25783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson managed-keys zone. [RT #26340]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #25203]
5096958739769958dd7a6b69356bf41260033873David Lawrence3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3192. [bug] A query structure could be used after being freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence3190. [bug] Underflow in error handling in isc_mutexblock_init.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence3189. [test] Added a summary report after system tests. [RT #25517]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references correctly when errors occurred, causing
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews a hang on shutdown. [RT #26372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington3185. [func] New 'rndc signing' option for auto-dnssec zones:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - 'rndc signing -list' displays the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews state of signing operations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - 'rndc signing -clear' clears the signing state
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington records for keys that have fully signed the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - 'rndc signing -nsec3param' sets the NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters for the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington3184. [bug] named had excessive cpu usage when a redirect zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured. [RT #26013]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister greater than 512 bytes may cause other servers to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews perform poorly. Now, adb retains edns information
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister and caches noedns servers. [RT #23392/24964]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3181. [func] Inline-signing is now supported for master zones.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3180. [func] Local copies of slave zones are now saved in raw
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format by default, to improve startup performance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'masterfile-format text;' can be used to override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the default, if desired. [RT #25867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3178. [bug] A race condition introduced by change #3163 could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure on shutdown. [RT #26271]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named has finished signing the zone with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corresponding key. [RT #26206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3176. [doc] Corrected example code and added a README to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sample external DLZ module in contrib/dlz/example.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3 signed zone are validated. Stop sending a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unnecessary NSEC3 record when generating such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #26200]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc addzone'. [RT #25600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3170. [func] RPZ update:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - fix precedence among competing rules
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improve ARM text including documenting rule precedence
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - try to rewrite CNAME chains until first hit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - new "rpz" logging channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - RDATA for CNAME rules can include wildcards
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - replace "NO-OP" named.conf policy override with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is still recognized)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3169. [func] Catch db/version mis-matches when calling dns_db_*().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a ANY query. [RT #26017]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3167. [bug] Negative answers from forwarders were not being
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson correctly tagged making them appear to not be cached.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resigning, even when valid signatures were already
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson present. [RT #26025]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3164. [func] Enable DLZ modules to retrieve client information,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews so that responses can be changed depending on the
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson source address of the query. [RT #25768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews concurrency problems with large numbers of threads.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3162. [test] start.pl: modified to allow for "named.args" in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ns*/ subdirectory to override stock arguments to
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews named. Largely from RT #26044, but no separate ticket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failures. [RT #25880]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the newline was not being printed causing type codes
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson to be run together. [RT #25873]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3159. [bug] On some platforms, named could assert on startup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when running in a chrooted environment without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /proc. [RT #25863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3158. [bug] Recursive servers would prefer a particular UDP
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson socket instead of using all available sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer the config file before pausing the server. [RT #21373]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3156. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a2 released ---
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3155. [bug] Fixed a build failure when using contrib DLZ
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assert. [RT #25452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews side effect of forcing an AXFR. [RT #25156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect use of __builtin_expect. [RT #25183]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence incorrectly. [RT #21050]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3150. [func] Improved startup and reconfiguration time by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabling zones to load in multiple threads. [RT #25333]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3149. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3148. [bug] Processing of normal queries could be stalled when
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson forwarding a UPDATE message. [RT #24711]
8775909be9fc67180fc480115716f88174e74471James Brister3147. [func] Initial inline signing support. [RT #23657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews there were any errors while running them. [RT #25527]
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence3144. [bug] dns_dbiterator_seek() could trigger an assert when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used with a nonexistent database node. [RT #25358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence3142. [bug] NAPTR is class agnostic. [RT #25429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews associated with empty zones. [RT #25079]
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence3140. [func] New command "rndc flushtree <name>" clears the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified name from the server cache along with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all names under it. [RT #19970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews their hmac counterparts). [RT #25067]
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson3138. [bug] Address memory leaks and out-of-order operations when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutting named down. [RT #25210]
99524919752c9b9abe1814007732b86592011cc1Brian Wellington3137. [func] Improve hardware scalability by allowing multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews worker threads to process incoming UDP packets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This can significantly increase query throughput
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson on some systems. [RT #22992]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty zones switched on by the 'empty-zones-enable'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option. [RT #24990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington statistics. [RT #16030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3132. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews per 100 zones at startup time, rather than using a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fixed-size task table. [RT #24406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3130. [func] Support alternate methods for managing a dynamic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone's serial number. Two methods are currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defined using serial-update-method, "increment"
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer (default) and "unixtime". [RT #23849]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-new-zones was set to yes and named ACLs
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews were used. [RT #22739]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews auto-dnssec zone that has not been signed yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will cause it to be signed with the specified NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters when keys are activated. The
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3PARAM record will not appear in the zone until
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is signed, but the parameters will be stored.
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister3127. [bug] 'rndc thaw' will now remove a zone's journal file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the zone serial number has been changed and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences is not in use. [RT #24687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3126. [security] Using DNAME record to generate replacements caused
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews RPZ to exit with a assertion failure. [RT #24766]
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews3125. [security] Using wildcard CNAME records as a replacement with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ caused named to exit with a assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3124. [bug] Use an rdataset attribute flag to indicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative-cache records rather than using rrtype 0;
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister this will prevent problems when that rrtype is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used in actual DNS packets. [RT #24777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3123. [security] Change #2912 exposed a latent flaw in
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister dns_rdataset_totext() that could cause named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crash with an assertion failure. [RT #24777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3121. [security] An authoritative name server sending a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response containing a very large RRset could
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson trigger an off-by-one error in the ncache code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and crash named. [RT #24650]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson that validated insecure without using DLV and had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS records in the parent zone. [RT #24631]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record could be created and never marked complete.
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister3118. [bug] nsupdate could dump core on shutdown when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIG(0) keys. [RT #24604]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister3117. [cleanup] Remove doc and parser references to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews never-implemented 'auto-dnssec create' option.
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC records in signed dynamic zones. Set to
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister 'no-resign' to disable automatic RRSIG regeneration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while retaining the ability to sign new or changed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews data. [RT #24533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3115. [bug] Named could fail to return requested data when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews following a CNAME that points into the same zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
47c196192afa37b2dea728e52579779f190bf07fJames Brister inactive and there is no replacement key. [RT #23136]
adf82221858138f295bce732e86dcac34645692eJames Brister3113. [doc] Document the relationship between serial-query-rate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and NOTIFY messages.
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington3112. [doc] Add missing descriptions of the update policy name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "krb5-subdomain", which allow machines to update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews their own records, to the BIND 9 ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-validation, added test cases to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checkconf system test. [RT #24398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when attempting to sign with no KSK. [RT #24369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3109. [func] The also-notify option now uses the same syntax
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister as a zone's masters clause. This means it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now possible to specify a TSIG key to use when
0380c44d0238a88e167526954d630d071739ed28Mark Andrews sending notifies to a given server, or to include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an explicit named masters list in an also-notify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement. [RT #23508]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington code (use -P instead). [RT #20852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when using -x. [RT #20852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3106. [func] When logging client requests, include the name of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the TSIG key if any. [RT #23619]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3105. [bug] GOST support can be suppressed by "configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --without-gost" [RT #24367]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson3104. [bug] Better support for cross-compiling. [RT #24367]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of in the options statement could trigger
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister an assertion failure in named-checkconf. [RT #24382]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3102. [func] New 'dnssec-loadkeys-interval' option configures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews how often, in minutes, to check the key repository
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for updates when using automatic key maintenance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Default is every 60 minutes (formerly hard-coded
d5399cc351a549db957185993b320a3bffa40e41James Brister to 12 hours). [RT #23744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3101. [bug] Zones using automatic key maintenance could fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to check the key repository for updates. [RT #23744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3100. [security] Certain response policy zone configurations could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an INSIST when receiving a query of type
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews RRSIG. [RT #24280]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister3099. [test] "dlz" system test now runs but gives R:SKIPPED if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3097. [test] Add a tool to test handling of malformed packets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_gssapi_acceptctx(). [RT #24004]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3094. [doc] Expand dns64 documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson3092. [bug] Signatures for records at the zone apex could go
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stale due to an incorrect timer setting. [RT #23769]
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence3091. [bug] Fixed a bug in which zone keys that were published
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and then subsequently activated could fail to trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic signing. [RT #22911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews standard input "dnssec-dsfromkey -f -". [RT #20662]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and add setup.sh in order to resolve changing
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence named.conf issue. [RT #23687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type "external" could cause a crash. [RT #23735]
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson3086. [bug] Running dnssec-settime -f on an old-style key will
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now force an update to the new key format even if no
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson other change has been specified, using "-P now -A now"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as default values. [RT #22474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff of signatures which have not yet expired but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were generated by a key that no longer exists.
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington3084. [func] A new command "rndc sync" dumps pending changes in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removes the journal file after syncing. Also,
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington "rndc freeze" no longer removes journal files.
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister3083. [bug] NOTIFY messages were not being sent when generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a NSEC3 chain incrementally. [RT #23702]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson3082. [port] strtok_r is threads only. [RT #23747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3081. [bug] Failure of DNAME substitution did not return
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson YXDOMAIN. [RT #23591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3078. [func] Added a new include file with function typedefs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the DLZ "dlopen" driver. [RT #23629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel sets the default TTL of the
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson key. When possible, automatic signing will use that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL when the key is published. [RT #23304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson timestamp when determining which keys are active.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3074. [bug] Make the adb cache read through for zone data and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue learn for zone named is authoritative for.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington3073. [bug] managed-keys changes were not properly being recorded.
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3071. [bug] has_nsec could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update.c:next_active. [RT #20256]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support. [RT #23473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews select the master/slave zones. [RT #23580]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson3066. [func] The DLZ "dlopen" driver is now built by default,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no longer requiring a configure option. To
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disable it, use "configure --without-dlopen".
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson Driver also supported on win32. [RT #23467]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson3065. [bug] RRSIG could have time stamps too far in the future.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson operations. [RT #23469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff3062. [func] Made several changes to enhance human readability
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC data in dig output and in generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - DNSKEY record comments are more verbose, no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews longer used in multiline mode only
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff - multiline RRSIG records reformatted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - multiline output mode for NSEC3PARAM records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "dig +split=X" breaks hex/base64 records into
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff fields of width X; "dig +nosplit" disables this.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson3061. [func] New option "dnssec-signzone -D", only write out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generated DNSSEC records. [RT #22896]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson specification of a separate expiration date
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3059. [test] Added a regression test for change #3023.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister reload to fail, if a log file specified in the conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file isn't a plain file. [RT #22771]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence and so could miss some views. [RT #23488]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3056. [func] Added support for URI resource record. [RT #23386]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3055. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3054. [bug] Added elliptic curve support check in
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson GOST OpenSSL engine detection. [RT #23485]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3053. [bug] Under a sustained high query load with a finite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-cache-size, it was possible for cache memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be exhausted and not recovered. [RT #23371]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3052. [test] Fixed last autosign test report. [RT #23256]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone if both are present. [RT #23035]
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence3050. [bug] The autosign system test was timing dependent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Wait for the initial autosigning to complete
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before running the rest of the test. [RT #23035]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3049. [bug] Save and restore the gid when creating creating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.pid at startup. [RT #23290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3048. [bug] Fully separate view key management. [RT #23419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validator.c. Tests added to dnssec system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and RRSIG TTL. [RT #23332]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3045. [removed] Replaced by change #3050.
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence3043. [test] Merged in the NetBSD ATF test framework (currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version 0.12) for development of future unit tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use configure --with-atf to build ATF internally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or configure --with-atf=prefix to use an external
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews copy. [RT #23209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses on systems with only IPv4 connectivity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ttl changes. [RT #23330]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington with a CNAME existed between the trust anchor and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews top of the zone. [RT #23338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3037. [doc] Update COPYRIGHT to contain all the individual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews copyright notices that cover various parts.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister3036. [bug] Check built-in zone arguments to see if the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is re-usable or not. [RT #21914]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson3029. [bug] isc_netaddr_format() handle a zero sized buffer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews catch NULL pointer dereferences before they happen.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after calling grow_headerspace() and if not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3024. [func] RTT Banding removed due to minor security increase
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but major impact on resolver latency. [RT #23310]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews3023. [bug] Named could be left in an inconsistent state when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews receiving multiple AXFR response messages that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not all TSIG-signed. [RT #23254]
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews changing the DNSKEY RRset. [RT #23232]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson3019. [test] Test: check apex NSEC3 records after adding DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record via UPDATE. [RT #23229]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if a zone may need to be re-signed. [RT #23120]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson3017. [doc] dnssec-keyfromlabel -I was not properly documented.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson3016. [bug] rndc usage missing '-b'. [RT #22937]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson3014. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister3012. [bug] Remove DNSKEY TTL change pairs before generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing records for any remaining DNSKEY changes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3011. [func] Change the default query timeout from 30 seconds
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister to 10. Allow setting this in named.conf using the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'resolver-query-timeout' option, which specifies a max
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time in seconds. 0 means 'default' and anything longer
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister than 30 will be silently set to 30. [RT #22852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister for refreshing managed-keys. [RT #22296]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister3009. [bug] clients-per-query code didn't work as expected with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular query patterns. [RT #22972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.8.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdata which is not compressible when writing master
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews files. [RT #22863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews across restarts of named. Initially this is for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3005. [port] Solaris: Work around the lack of
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson gsskrb5_register_acceptor_identity() by setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the KRB5_KTNAME environment variable to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contents of tkey-gssapi-keytab. Also fixed
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson test errors on MacOSX. [RT #22853]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3003. [experimental] Added update-policy match type "external",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabling named to defer the decision of whether to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow a dynamic update to an external daemon.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister (Contributed by Andrew Tridgell.) [RT #22758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister3001. [func] Added a default trust anchor for the root zone, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be switched on by setting "dnssec-validation auto;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the named.conf options. [RT #21727]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3000. [bug] More TKEY/GSS fixes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - nsupdate can now get the default realm from
36357e4304862fb47e9fae03c704cb6720310c45James Brister the user's Kerberos principal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - corrected gsstest compilation flags
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improved documentation
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence - fixed some NULL dereferences
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the task api. [RT #22776]
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence2997. [func] named -V now reports the OpenSSL and libxml2 verions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was compiled against. [RT #22687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the signer's identity. [RT #22770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
b99d080717fdd741961d736581270d37bad8bec0David Lawrence do not use threads on earlier versions. Also kill
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2993. [func] Dynamically grow adb hash tables. [RT #21186]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence for looking at a secure delegation. [RT #22059]
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamic zones. [RT #22365]
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence2990. [bug] 'dnssec-settime -S' no longer tests prepublication
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interval validity when the interval is set to 0.
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence2989. [func] Added support for writable DLZ zones. (Contributed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of external DLZ drivers that can be loaded as
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence shared objects at runtime rather than linked with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. Currently this is switched on via a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compile-time option, "configure --with-dlz-dlopen".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: the syntax for configuring DLZ zones
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence is likely to be refined in future releases.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Contributed by Andrew Tridgell of the Samba
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence adding a "tkey-gssapi-keytab" option. If set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updates will be allowed with any key matching
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence a principal in the specified keytab file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "tkey-gssapi-credential" is no longer required
eefea43215016bce437ab4a7441b2851fd182960David Lawrence and is expected to be deprecated. (Contributed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by Andrew Tridgell of the Samba project.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone, but the nameserver names and/or their IP
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence addresses are statically configured. [RT #21474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson2984. [bug] Don't run MX checks when the target of the MX record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is ".". [RT #22645]
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.8.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increment the reference count.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: dns_tsigkey_createfromkey() callers should now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always call dst_key_free() rather than setting it
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence to NULL on success. [RT #22672]
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2979. [bug] named could deadlock during shutdown if two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc stop" commands were issued at the same
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #22108]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key. [RT #22573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence wrong lock which could lead to server deadlock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews consistency check examining the existing version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the zone rather than the new version resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the UPDATE. [RT #22413]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at the end of configure resulting in build failures
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence where there is very old version of perl installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Move it to "make maintainer-clean". [RT #22230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence compacted on Windows systems as a result of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence2970. [security] Adding a NO DATA negative cache entry failed to clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any matching RRSIG records. A subsequent lookup of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of NO DATA cache entry could trigger a INSIST when the
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence unexpected RRSIG was also returned with the NO DATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache entry.
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer CVE-2010-3613, VU#706148. [RT #22288]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2969. [security] Fix acl type processing so that allow-query works
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in options and view statements. Also add a new
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence set of tests to verify proper functioning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CVE-2010-3615, VU#510208. [RT #22418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2968. [security] Named could fail to prove a data set was insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before marking it as insecure. One set of conditions
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence that can trigger this occurs naturally when rolling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY algorithms.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence CVE-2010-3614, VU#837744. [RT #22309]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence space available in the buffer when adding a left
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews justified character with a non zero width,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (e.g. "%-1c"). [RT #22270]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC 4634. [RT #21702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2964. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2963. [security] The allow-query acl was being applied instead of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2961. [bug] Be still more selective about the non-authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answers we apply change 2748 to. [RT #22074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2959. [func] Check that named starts with a missing masterfile.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2958. [bug] named failed to start with a missing master file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews respectively. [RT #21962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build_sqldbinstance failure. [RT #21623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exact match" message when returning a wildcard
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no data response. [RT #21744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to initialize winsock. [RT #21932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2951. [bug] named failed to generate a correct signed response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a optout, delegation only zone with no secure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence delegations. [RT #22007]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2950. [bug] named failed to perform a SOA up to date check when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews falling back to TCP on UDP timeouts when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences was set. [RT #21595]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was called multiple times. [RT #21942]
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2948. [port] MacOS: provide a mechanism to configure the test
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces at reboot. See bin/tests/system/README
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for details.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2947. [placeholder]
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence2946. [doc] Document the default values for the minimum and maximum
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence2943. [func] Add support to load new keys into managed zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without signing immediately with "rndc loadkeys".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Add support to link keys with "dnssec-keygen -S"
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence and "dnssec-settime -S". [RT #21351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence DNAME at the zone apex. [RT #21610]
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence2940. [port] Remove connection aborted error message on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Windows. [RT #21549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence that fail to match the NSEC3PARAM record currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in use. [RT #21868]
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence2938. [bug] When generating signed responses, from a signed zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that uses NSEC3, named would use a uninitialized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pointer if it needed to skip a NSEC3 record because
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley it didn't match the selected NSEC3PARAM record for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. [RT #21868]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2937. [bug] Worked around an apparent race condition in over
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley memory conditions. Without this fix a DNS cache DB or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ADB could incorrectly stay in an over memory state,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews effectively refusing further caching, which
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley subsequently made a BIND 9 caching server unworkable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This fix prevents this problem from happening by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polling the state of the memory context, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews making a copy of the state, which appeared to cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a race. This is a "workaround" in that it doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews solve the possible race per se, but several experiments
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence proved this change solves the symptom. Also, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polling overhead hasn't been reported to be an issue.
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence This bug should only affect a caching server that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specifies a finite max-cache-size. It's also quite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews likely that the bug happens only when enabling threads,
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence but it's not confirmed yet. [RT #21818]
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence2936. [func] Improved configuration syntax and multiple-view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for addzone/delzone feature (see change
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence #2930). Removed "new-zone-file" option, replaced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for each view is now created automatically, with
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence a filename generated from a hash of the view name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It is no longer necessary to "include" the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new-zone-file in named.conf; this happens
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington automatically. Zones that were not added via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc addzone" can no longer be removed with
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence "rndc delzone". [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scope. This could potentially result in a unknown,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews potentially malformed, EDNS option being sent instead
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the desired NSID option. [RT #21781]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2931. [bug] Temporarily and partially disable change 2864
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence because it would cause infinite attempts of RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. This is an urgent care fix; we'll
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revisit the issue and complete the fix later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson allow dynamic addition and deletion of zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To enable this feature, specify a "new-zone-file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option at the view or options level in named.conf.
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington Zone configuration information for the new zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will be written into that file. To make the new
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff zones persist after a restart, "include" the file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into named.conf in the appropriate view. (Note:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This feature is not yet documented, and its syntax
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington is expected to change.) [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2929. [bug] Improved handling of GSS security contexts:
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson - added LRU expiration for generated TSIGs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added the ability to use a non-default realm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added new "realm" keyword in nsupdate
d111a46c88adda33a93839f4934e127b6147d87dBob Halley - limited lifetime of generated keys to 1 hour
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or the lifetime of the context (whichever is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2928. [bug] Be more selective about the non-authoritative
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews answer we apply change 2748 to. [RT #21594]
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson2927. [placeholder]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2926. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington from insecure zones. [RT #21555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley current managed keys combined with trusted keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2923. [bug] 'dig +trace' could drop core after "connection
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington timeout". [RT #21514]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2922. [contrib] Update zkt to version 1.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington too soon. [RT #19878]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson to IPv4 clients. New acl 'filter-aaaa' (default any).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2916. [func] Add framework to use IPv6 in tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on configure options. [RT #21444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2914. [bug] Make the "autosign" system test more portable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the zone section. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was specified in named.conf. [RT #21416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington a DNSKEY. [RT #21384]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2907. [bug] The export version of libdns had undefined references.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be incorrectly marked as insecure instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews secure leading to negative proofs failing. This was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a unintended outcome from change 2890. [RT #21392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2902. [func] Add regression test for change 2897. [RT #21040]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2900. [bug] The placeholder negative caching element was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews properly constructed triggering a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_ncache_towire(). [RT #21346]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2899. [port] win32: Support linking against OpenSSL 1.0.0.
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence2898. [bug] nslookup leaked memory when -domain=value was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #21301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson to insecure. [RT #21040]
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence2896. [bug] "rndc sign" failed to properly update the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2895. [func] genrandom: add support for the generation of multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #20917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2893. [bug] Improve managed keys support. New named.conf option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed-keys-directory. [RT #20924]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2891. [maint] Update empty-zones list to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews draft-ietf-dnsop-default-local-zones-13. [RT #21099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2890. [bug] Handle the introduction of new trusted-keys and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS, DLV RRsets better. [RT #21097]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2888. [bug] Only the first EDNS option was displayed. [RT #21273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews local time is presented as a comment within the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comment. [RT #21223]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #21080]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2882. [bug] Remove memory context from list of active contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before clearing 'magic'. [RT #21274]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is held when closing a version. [RT #21198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistent. [RT #21078]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2878. [func] Incrementally write the master file after performing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a AXFR. [RT #21010]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2877. [bug] The validator failed to skip obviously mismatching
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRSIGs. [RT #21138]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2876. [bug] Named could return SERVFAIL for negative responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from unsigned zones. [RT #21131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successfully responds to the query using plain DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2873. [bug] Canceling a dynamic update via the dns/client module
be768c2e952c34438025999125f984995a2c675fBob Halley could trigger an assertion failure. [RT #21133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley require one of IPv4 or IPv6 rather than both.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the header file, causing build failure with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-exportlib. [RT #21138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson any changes made by configure are integrated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't like it. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2865. [bug] memset to zero event.data. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updating DS records. [RT #20896]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inactivation time. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2859. [bug] When canceling validation it was possible to leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #20800]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2856. [bug] The size of a memory allocation was not always properly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence recorded. [RT #20927]
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which