CHANGES revision 4d506ae0d1671e5a1272ef1ef13986af01616ac4
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews --- 9.11.0rc1 released ---
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews4459. [bug] TCP client objects created to handle pipeline queries
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews were not cleaned up correctly, causing uncontrolled
18d208a4a277eb460f5b47c6b167f60b04db3110Mark Andrews memory growth. [RT #43106]
18d208a4a277eb460f5b47c6b167f60b04db3110Mark Andrews4458. [cleanup] Update assertions to be more correct, and also remove
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt use of a reserved word. [RT #43090]
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt4455. [cleanup] Allow dyndb modules to correctly log the filename
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt and line number when processing configuration text
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt from named.conf. [RT #43050]
19c4187e35333119a2d1e40c92a55e09a59a3e93Evan Hunt4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
56c9fcf07580457442b80ac32bdb7c07aa0df870Evan Hunt4453. [bug] Prefetching of DS records failed to update their
41ca314cc2fafaaa9089438bdfd24880bafa9079Mark Andrews RRSIGs. [RT #42865]
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt4452. [bug] The default key manager policy file is now
15218d6ed062ec24c4a7ec10d22d1113b4c79556Evan Hunt <sysdir>/dnssec-policy.conf (usually
238e0e843834f24a40692a5ea28ace14ef5807ceMark Andrews4451. [cleanup] Log more useful information if a PKCS#11 provider
238e0e843834f24a40692a5ea28ace14ef5807ceMark Andrews library cannot be loaded. [RT #43076]
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews4450. [port] Provide more nuanced HSM support which better matches
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews the specific PKCS11 providers capabilities. [RT #42458]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews4449. [test] Fix catalog zones test on slower systems. [RT #42997]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews4448. [bug] win32: ::1 was not being found when iterating
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews interfaces. [RT #42993]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews4447. [tuning] Allow the fstrm_iothr_init() options to be set using
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews named.conf to control how dnstap manages the data
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews flow. [RT #42974]
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews4446. [bug] The cache_find() and _findrdataset() functions
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews could find rdatasets that had been marked stale.
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt4445. [cleanup] isc_errno_toresult() can now be used to call the
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt formerly private function isc__errno2result().
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews4444. [bug] Fixed some issues related to dyndb: A bug caused
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews braces to be omitted when passing configuration text
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews from named.conf to a dyndb driver, and there was a
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews use-after-free in the sample dyndb driver. [RT #43050]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews TCP sockets. [RT #42864]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews tree data structure with overlapping networks
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews (longest prefix match was ineffective).
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews4441. [cleanup] Alphabetize host's help output. [RT #43031]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews4440. [func] Enable TCP fast open support when available on the
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews server side. [RT #42866]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews4439. [bug] Address race conditions getting ownernames of nodes.
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews4438. [func] Use LIFO rather than FIFO when processing startup
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews notify and refresh queries. [RT #42825]
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews4437. [func] Minimal-responses now has two additional modes
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews no-auth and no-auth-recursive which suppress
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt adding the NS records to the authority section
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt as well as the associated address records for the
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt nameservers. [RT #42005]
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews4436. [func] Return TLSA records as additional data for MX and SRV
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews lookups. [RT #42894]
108788443c2d4e4c5cc16c103bdfc7da665ed0c3Mark Andrews4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt will not fit into a single IPv4 encapsulated IPv6
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt UDP packet when transmitted over a Ethernet link.
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt4434. [protocol] Return EDNS EXPIRE option for master zones in addition
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt to slave zones. [RT #43008]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt4433. [cleanup] Report an error when passing an invalid option or
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt view name to "rndc dumpdb". [RT #42958]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt4432. [test] Hide rndc output on expected failures in logfileconfig
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt system test. [RT #27996]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt4431. [bug] named-checkconf now checks the rate-limit clause.
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews4430. [bug] Lwresd died if a search list was not defined.
71e4c3ee745b9fbf0c627246a9896589344f613cMark Andrews Found by 0x710DDDD At Alibaba Security. [RT #42895]
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews4429. [bug] Address potential use after free on fclose() error.
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews4428. [bug] The "test dispatch getnext" unit test could fail
9c832595d40482529ac6d369664bb59fbc05b925Mark Andrews in a threaded build. [RT #42979]
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt4427. [bug] The "query" and "response" parameters to the
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt "dnstap" option had their functions reversed.
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt --- 9.11.0b3 released ---
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews4426. [bug] Addressed Coverity warnings. [RT #42908]
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews4425. [bug] arpaname, dnstap-read and named-rrchecker were not
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews being installed into ${prefix}/bin. Tidy up
b68dc65959cc38f997c365abed9f4e6c0415ecc7Mark Andrews installation issues with CHANGE 4421. [RT #42910]
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews to provide feedback to the trust-anchor administrators
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews about how key rollovers are progressing as per
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann draft-ietf-dnsop-edns-key-tag-02. This can be
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann disabled using 'trust-anchor-telemetry no;'.
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews4423. [maint] Added missing IPv6 address 2001:500:84::b for
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews4422. [port] Silence clang warnings in dig.c and dighost.c.
5927944728a530e9f43597b64a555029e2d010bdScott Mann4421. [func] When built with LMDB (Lightning Memory-mapped
5927944728a530e9f43597b64a555029e2d010bdScott Mann Database), named will now use a database to store
0da3b4a9a76d24ce05e6330d9bb128f18f1ca0d4Evan Hunt the configuration for zones added by "rndc addzone"
0da3b4a9a76d24ce05e6330d9bb128f18f1ca0d4Evan Hunt instead of using a flat NZF file. This improves
0da3b4a9a76d24ce05e6330d9bb128f18f1ca0d4Evan Hunt performance of "rndc delzone" and "rndc modzone"
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews significantly. Existing NZF files will
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews automatically by converted to NZD databases.
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews To view the contents of an NZD or to roll back to
411d2914ade28174f3789d4a8e43636fc68eb310Mark Andrews NZF format, use "named-nzd2nzf". To disable
411d2914ade28174f3789d4a8e43636fc68eb310Mark Andrews this feature, use "configure --without-lmdb".
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews4420. [func] nslookup now looks for AAAA as well as A by default.
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews4419. [bug] Don't cause undefined result if the label of an
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews entry in catalog zone is changed. [RT #42708]
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews4417. [bug] dnssec-keymgr could fail to create successor keys
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt if the prepublication interval was set to a value
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt smaller than the default. [RT #42820]
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt4416. [bug] dnssec-keymgr: Domain names in policy files could
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews fail to match due to trailing dots. [RT #42807]
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt excluded. [RT #42884]
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt4414. [bug] Corrected a bug in the MIPS implementation of
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews isc_atomic_xadd(). [RT #41965]
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt was returned. [RT #42733]
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt --- 9.11.0b2 released ---
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt removed. [RT #42721]
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt4411. [func] "rndc dnstap -roll" automatically rolls the
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt dnstap output file; the previous version is
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt saved with ".0" suffix, and earlier versions
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt with ".1" and so on. An optional numeric argument
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt indicates how many prior files to save. [RT #42830]
13790b548c6660cba736756e5184e923d15d2659Evan Hunt4410. [bug] Address use after free and memory leak with dnstap.
2a05d28eb174b082b604d1de1969ee371d8af568Mark Andrews4409. [bug] DNS64 should exclude mapped addresses by default when
2a05d28eb174b082b604d1de1969ee371d8af568Mark Andrews an exclude acl is not defined. [RT #42810]
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt4408. [func] Continue waiting for expected response when we the
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt response we get does not match the request. [RT #41026]
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt4407. [performance] Use GCC builtin for clz in RPZ lookup code.
36a13a94c5636cbed464380e56f23fb9df363731Evan Hunt4406. [security] getrrsetbyname with a non absolute name could
ac436908582fe08c85c886b200664816b11fded6Mark Andrews trigger an infinite recursion bug in lwresd
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews and named with lwres configured if when combined
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews with a search list entry the resulting name is
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews too long. (CVE-2016-2775) [RT #42694]
5584cbf427d85488e3fbed682ea3f2406bdb8b4fEvan Hunt4405. [bug] Change 4342 introduced a regression where you could
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt not remove a delegation in a NSEC3 signed zone using
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt OPTOUT via nsupdate. [RT #42702]
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews4404. [misc] Allow krb5-config to be used when configuring gssapi.
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews4403. [bug] Rename variables and arguments that shadow: basename,
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt clone and gai_error.
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt --- 9.11.0b1 released ---
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt4401. [misc] Change LICENSE to MPL 2.0.
a5166d5fce30e5924f279d3e92d1f20b9fb7b4dcMark Andrews4400. [bug] ttl policy was not being inherited in policy.py.
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt 'ECDSAP384SHA384' don't have settable keysize.
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt4397. [bug] Update Windows python support. [RT #42538]
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
1c1879b7efe32e6fe95de0ba923249925e3a320cEvan Hunt4395. [bug] Improve out-of-tree installation of python modules.
7f2a245b96f3fb2fd7c644316c426b1edaa57984Evan Hunt4394. [func] Add rndc command "dnstap-reopen" to close and
7f2a245b96f3fb2fd7c644316c426b1edaa57984Evan Hunt reopen dnstap output files. [RT #41803]
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt4393. [bug] Address potential NULL pointer dereferences in
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt dnstap code.
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt traffic-sizes and rcode-volume reporting. [RT #41475]
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
146057d7e755d646283adfe5d813f756b0538095Mark Andrews4390. [doc] Description of masters with TSIG, allow-query and
146057d7e755d646283adfe5d813f756b0538095Mark Andrews allow-transfer options in catalog zones. [RT #42692]
fe3472c80b76b6fed0ae674fd63471d02477a03aMark Andrews4389. [test] Rewritten test suite for catalog zones. [RT #42676]
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews4388. [func] Support for master entries with TSIG keys in catalog
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews zones. [RT #42577]
e2271ee953be1f0cde0cdebfdf498f81ea901d09Evan Hunt4387. [bug] Change 4336 was not complete leading to SERVFAIL
e2271ee953be1f0cde0cdebfdf498f81ea901d09Evan Hunt being return as NS records expired. [RT #42683]
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt4385. [func] Add support for allow-query and allow-transfer ACLs
36e97eb661df71069df2d75f5fd3b5bb0dcf1efeMark Andrews to catalog zones. [RT #42578]
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews4384. [bug] Change 4256 accidentally disabled logging of the
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews rndc command. [RT #42654]
7b4b6f361b2fb2291c2019b377a9c0c8e80cfd6bMark Andrews4383. [bug] Correct spelling error in stats channel description of
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt "EDNS client subnet option received". [RT #42633]
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt compare the zone name using a canonical format.
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt4381. [bug] Missing "zone-directory" option in catalog zone
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt definition caused BIND to crash. [RT #42579]
c4352fb17ebb1cf29ccabdf1c4273a86f035f38bMark Andrews --- 9.11.0a3 released ---
cd22c3e4e4ff8ad6eb399155bd8df9330aa39547Mark Andrews4380. [experimental] Added a "zone-directory" option to "catalog-zones"
0148654d85b2818f9317b428a67701f4585c8243Scott Mann syntax, allowing local masterfiles for slaves
0148654d85b2818f9317b428a67701f4585c8243Scott Mann that are provisioned by catalog zones to be stored
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann in a directory other than the server's working
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann directory. [RT #42527]
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann4379. [bug] An INSIST could be triggered if a zone contains
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann RRSIG records with expiry fields that loop
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews using serial number arithmetic. [RT #40571]
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt4377. [bug] Don't reuse zero TTL responses beyond the current
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt client set (excludes ANY/SIG/RRSIG queries).
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews4376. [experimental] Added support for Catalog Zones, a new method for
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt provisioning secondary servers in which a list of
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt zones to be served is stored in a DNS zone and can
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt be propagated to slaves via AXFR/IXFR. [RT #41581]
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews4375. [func] Add support for automatic reallocation of isc_buffer
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews to isc_buffer_put* functions. [RT #42394]
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt probability of reference counting errors as seen
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt in 4365. [RT #42405]
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews4373. [bug] Address undefined behaviour in getaddrinfo. [RT #42479]
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews4372. [bug] Address undefined behaviour in libt_api. [RT #42480]
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews4371. [func] New "minimal-any" option reduces the size of UDP
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews responses for qtype ANY by returning a single
4cac7d0949f2e76561b9450b2af4ebe3eece5aa2Evan Hunt arbitrarily selected RRset instead of all RRsets.
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews Thanks to Tony Finch. [RT #41615]
020c4484fe510434c1b3aaac040ab6cfb3340115Mark Andrews4370. [bug] Address python3 compatibility issues with RNDC module.
e94c7d23589f79d5ece5a068ee6a661cebf9c2b4Mark Andrews [RT #42499] [RT #42506]
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews --- 9.11.0a2 released ---
0a1009ae64036ad2473bc48be8c98a54392b6cb5Mark Andrews4369. [bug] Fix 'make' and 'make install' out-of-tree python
0a1009ae64036ad2473bc48be8c98a54392b6cb5Mark Andrews support. [RT #42484]
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews4368. [bug] Fix a crash when calling "rndc stats" on some
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews Windows builds because some Visual Studio compilers
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews generated crashing code for the "%z" printf()
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews format specifier. [RT #42380]
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews4367. [bug] Remove unnecessary assignment of loadtime in
48a3b282636db2c67c6e2dc10833689f58b05422Vernon Schryver zone_touched. [RT #42440]
bddc7537c220d2be1f496f7271382ef825826818Evan Hunt4366. [bug] Address race condition when updating rbtnode bit
bddc7537c220d2be1f496f7271382ef825826818Evan Hunt fields. [RT #42379]
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews4365. [bug] Address zone reference counting errors involving
8b04568c804d6c50abb7c99adb03c689fbb00cf9Evan Hunt nxdomain-redirect. [RT #42258]
ebe4f01a8fd93b6b8aeec936ae0703a97784f7b4Mark Andrews4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews4363. [port] win32: Disable explicit triggering UAC when running
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews BINDInstall.
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews4362. [func] Changed rndc reconfig behaviour so that newly added
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews zones are loaded asynchronously and the loading does
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews not block the server. [RT #41934]
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews4361. [cleanup] Where supported, file modification times returned
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews by isc_file_getmodtime() are now accurate to the
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt nanosecond. [RT #41968]
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt4360. [bug] Silence spurious 'bad key type' message when there is
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt a existing TSIG key. [RT #42195]
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt4359. [bug] Inherited 'also-notify' lists were not being checked
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt by named-checkconf. [RT #42174]
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt4358. [test] Added American Fuzzy Lop harness that allows
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt feeding fuzzed packets into BIND.
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann4357. [func] Add the python RNDC module. [RT #42093]
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann4356. [func] Add the ability to specify whether to wait for
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann nameserver addresses to be looked up or not to
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews RPZ with a new modifying directive 'nsip-wait-recurse'.
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews4355. [func] "pkcs11-list" now displays the extractability
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews attribute of private or secret keys stored in
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews an HSM, as either "true", "false", or "never"
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews Thanks to Daniel Stirnimann. [RT #36557]
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt4354. [bug] Check that the received HMAC length matches the
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt expected length prior to check the contents on the
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt control channel. This prevents a OOB read error.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt This was reported by Lian Yihan, <lianyihan@360.cn>.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt4353. [cleanup] Update PKCS#11 header files. [RT #42175]
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt is scheduled to be disabled in 2017. A warning is
3d5423a48472936f3b1ad423995c5baffe9ff3b1Evan Hunt now logged when named is configured to use it,
41ce9f5c27cfb50874b3274cea4f93d1fac14a91Mark Andrews either explicitly or via "dnssec-lookaside auto;"
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt4351. [bug] 'dig +noignore' didn't work. [RT #42273]
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt4349. [contrib] kasp2policy: A python script to create a DNSSEC
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt policy file from an OpenDNSSEC KASP XML file.
de382ae91aa6b3df7f8684135f08e6db45ab1402Scott Mann4348. [func] dnssec-keymgr: A new python-based DNSSEC key
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann management utility, which reads a policy definition
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt file and can create or update DNSSEC keys as needed
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt to ensure that a zone's keys match policy, roll over
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt correctly on schedule, etc. Thanks to Sebastian
9e4afc9b39fe5c5e44798944b72d6686a5be435cEvan Hunt Castro for assistance in development. [RT #39211]
9e4afc9b39fe5c5e44798944b72d6686a5be435cEvan Hunt4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt4346. [bug] Fixed a regression introduced in change #4337 which
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt caused signed domains with revoked KSKs to fail
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt validation. [RT #42147]
2c35c682362049f823248542e07e7dca4008b986Mark Andrews4345. [contrib] perftcpdns mishandled the return values from
2c35c682362049f823248542e07e7dca4008b986Mark Andrews clock_nanosleep. [RT #42131]
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews4344. [port] Address openssl version differences. [RT #42059]
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt4343. [bug] dns_dnssec_syncupdate misdeclared in <dns/dnssec.h>.
5e2704d0ae827dbb9296d7352219a11daa1170bcEvan Hunt4342. [bug] 'rndc flushtree' could fail to clean the tree if there
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt wasn't a node at the specified name. [RT #41846]
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt --- 9.11.0a1 released ---
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt4341. [bug] Correct the handling of ECS options with
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt address family 0. [RT #41377]
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews4340. [performance] Implement adaptive read-write locks, reducing the
0f972644190291c832677fafd0826532770d11d8Mark Andrews overhead of locks that are only held briefly.
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt4338. [bug] Reimplement change 4324 as it wasn't properly doing
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt all the required book keeping. [RT #41941]
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt4337. [bug] The previous change exposed a latent flaw in
c1e655fe4c2192d1c4198153d32b2506a8b3d02dEvan Hunt key refresh queries for managed-keys when
c1e655fe4c2192d1c4198153d32b2506a8b3d02dEvan Hunt a cached DNSKEY had TTL 0. [RT #41986]
8787b357e69c8c548cdad59e8c9d492a0f4a7105Curtis Blackburn4336. [bug] Don't emit records with zero ttl unless the records
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews were learnt with a zero ttl. [RT #41687]
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews4335. [bug] zone->view could be detached too early. [RT #41942]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt4334. [func] 'named -V' now reports zlib version. [RT #41913]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt 2001:500:9f::42.
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt4332. [placeholder]
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt4331. [func] When loading managed signed zones detect if the
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews RRSIG's inception time is in the future and regenerate
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews the RRSIG immediately. [RT #41808]
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews4330. [protocol] Identify the PAD option as "PAD" when printing out
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews4329. [func] Warn about a common misconfiguration when forwarding
b47c020d5c635b662ac57e5485d266fd62c796c0Evan Hunt RFC 1918 zones. [RT #41441]
4b08de94999f7cbd990685f7ba1ed91ede81708eEvan Hunt4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
632e44d19e8d875eb78ddd1d028c0f9c29360420Scott Mann4327. [func] Log query and depth counters during fetches when
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt querytrace (./configure --enable-querytrace) is
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt enabled (helps in diagnosing). [RT #41787]
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews4326. [protocol] Add support for AVC. [RT #41819]
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews4325. [func] Add a line to "rndc status" indicating the
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews hostname and operating system details. [RT #41610]
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt4324. [bug] When deleting records from a zone database, interior
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt nodes could be left empty but not deleted, damaging
53d308d83bfe32bf3328bac628670bd8876b1629Mark Andrews search performance afterward. [RT #40997]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt4323. [bug] Improve HTTP header processing on statschannel.
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt4322. [security] Duplicate EDNS COOKIE options in a response could
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt trigger an assertion failure. (CVE-2016-2088)
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt4321. [bug] Zones using mapped files containing out-of-zone data
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt could return SERVFAIL instead of the expected NODATA
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt or NXDOMAIN results. [RT #41596]
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt4320. [bug] Insufficient memory allocation when handling
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews "none" ACL could cause an assertion failure in
4939b6c7df2cb10171726a3f5ee23eda43aa042aPaul Ebersman named when parsing ACL configuration. [RT #41745]
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews4319. [security] Fix resolver assertion failure due to improper
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews DNAME handling when parsing fetch reply messages.
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews (CVE-2016-1286) [RT #41753]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt4318. [security] Malformed control messages can trigger assertions
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt in named and rndc. (CVE-2016-1285) [RT #41666]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt4316. [func] Add option to tools to print RRs in unknown
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt presentation format [RT #41595].
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt4315. [bug] Check that configured view class isn't a meta class.
6b95b91c617a3e56aff611772744af32b5410e1fEvan Hunt [RT #41572].
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt testing tools provided by Nominum, Inc.
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt4313. [bug] Handle ns_client_replace failures in test mode.
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews was not consistent. [RT #41600]
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt4311. [bug] Prevent "rndc delzone" from being used on
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt response-policy zones. [RT #41593]
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt4310. [performance] Use __builtin_expect() where available to annotate
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt conditions with known behavior. [RT #41411]
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt4309. [cleanup] Remove the spurious "none" filename from log messages
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt when processing built-in configuration. [RT #41594]
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt4308. [func] Added operating system details to "named -V"
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt output. [RT #41452]
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt4307. [bug] "dig +subnet" and "mdig +subnet" could send
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt incorrectly-formatted Client Subnet options
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt if the prefix length was not divisible by 8.
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt Also fixed a memory leak in "mdig". [RT #45178]
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews4306. [maint] Added a PKCS#11 openssl patch supporting
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews version 1.0.2f [RT #38312]
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
2a4f4945657f4dd321d30a01aa5d74159c74dbcbEvan Hunt from the zone's apex. [RT #41483]
a50ce0f80bd665545389cfd91df31d3f4fe66b04Scott Mann4304. [port] xfer system test failed as 'tail -n +value' is not
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews portable. [RT #41315]
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews4303. [bug] "dig +subnet" was unable to send a prefix length of
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews zero, as it was incorrectly changed to 32 for v4
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews prefixes or 128 for v6 prefixes. In addition to
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews fixing this, "dig +subnet=0" has been added as a
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews short form for 0.0.0.0/0. The same changes have
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews also been made in "mdig". [RT #41553]
de7df3e56fe99c33a415674b018aae93eee94750Evan Hunt4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
de7df3e56fe99c33a415674b018aae93eee94750Evan Hunt4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt4300. [bug] A flag could be set in the wrong field when setting
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt up non-recursive queries; this could cause the
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt SERVFAIL cache to cache responses it shouldn't.
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt New querytrace logging has been added which
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt identified this error. [RT #41155]
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt4299. [bug] Check that exactly totallen bytes are read when
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt reading a RRset from raw files in both single read
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt and incremental modes. [RT #41402]
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt4298. [bug] dns_rpz_add errors in loadzone were not being
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt propagated up the call stack. [RT #41425]
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt4297. [test] Ensure delegations in RPZ zones fail robustly.
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt4296. [bug] TCP packet sizes were calculated incorrectly in the
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt stats channel; they could be counted in the wrong
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt histogram bucket. [RT #40587]
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt could allow incorrect text formatting of EDNS EXPIRE
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt options. [RT #41437]
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt4294. [bug] Fixed a regression in which "rndc stop -p" failed
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt to print the PID. [RT #41513]
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt4293. [bug] Address memory leak on priming query creation failure.
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt4292. [placeholder]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt4290. [func] The timers returned by the statistics channel
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt (indicating current time, server boot time, and
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt most recent reconfiguration time) are now reported
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt with millisecond accuracy. [RT #40082]
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt4289. [bug] The server could crash due to memory being used
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt after it was freed if a zone transfer timed out.
7a2173839c5ca103090431f36709fde99b599097Evan Hunt4288. [bug] Fixed a regression in resolver.c:possibly_mark()
7a2173839c5ca103090431f36709fde99b599097Evan Hunt which caused known-bogus servers to be queried
7a2173839c5ca103090431f36709fde99b599097Evan Hunt anyway. [RT #41321]
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt4287. [bug] Silence an overly noisy log message when message
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt parsing fails. [RT #41374]
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews4286. [security] render_ecs errors were mishandled when printing out
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews a OPT record resulting in a assertion failure.
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews (CVE-2015-8705) [RT #41397]
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews4285. [security] Specific APL data could trigger a INSIST.
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews (CVE-2015-8704) [RT #41396]
9f36aef24cac3890e24e57d1821f7ede5e34ff8eMark Andrews4284. [bug] Some GeoIP options were incorrectly documented
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann using abbreviated forms which were not accepted by
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann named. The code has been updated to allow both
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt long and abbreviated forms. [RT #41381]
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt4282. [func] 'dig +[no]mapped' determine whether the use of mapped
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman IPv4 addresses over IPv6 is permitted or not. The
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt default is +mapped. [RT #41307]
4fc55db699529ce60f7f1e12aae40e315831c67fScott Mann4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews4280. [performance] Use optimal message sizes to improve compression
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews in AXFRs. This reduces network traffic. [RT #40996]
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann4279. [test] Don't use fixed ports when unit testing. [RT #41194]
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt4277. [performance] Improve performance of the RBT, the central zone
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt datastructure: The aux hashtable was improved,
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt hash function was updated to perform more
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt uniform mapping, uppernode was added to
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt dns_rbtnode, and other cleanups and performance
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt improvements were made. [RT #41165]
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt4276. [protocol] Add support for SMIMEA. [RT #40513]
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt4275. [performance] Lazily initialize dns_compress->table only when
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt compression is enabled. [RT #41189]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt4274. [performance] Speed up typemap processing from text. [RT #41196]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt4273. [bug] Only call dns_test_begin() and dns_test_end() once each
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt in nsec3_test as it fails with GOST if called multiple
5095e72ac3c0f1e16c246b56e8277614571bf132Mark Andrews4272. [bug] dig: the +norrcomments option didn't work with +multi.
653cad790b4dc6c1330f634150a8941b75ed761eMark Andrews4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont4270. [security] Update allowed OpenSSL versions as named is
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont potentially vulnerable to CVE-2015-3193.
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont4269. [bug] Zones using "map" format master files currently
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews don't work as policy zones. This limitation has
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews now been documented; attempting to use such zones
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews in "response-policy" statements is now a
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont configuration error. [RT #38321]
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont4268. [func] "rndc status" now reports the path to the
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews configuration file. [RT #36470]
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews4267. [test] Check sdlz error handling. [RT #41142]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt4266. [placeholder]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews4264. [bug] Check const of strchr/strrchr assignments match
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews argument's const status. [RT #41150]
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews4263. [contrib] Address compiler warnings in mysqldyn module.
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews4262. [bug] Fixed a bug in epoll socket code that caused
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews sockets to not be registered for ready
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews notification in some cases, causing named to not
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews read from or write to them, resulting in what
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews appear to the user as blocked connections.
cf4ceeee5fee2ebdca74f82514c14fd50939f85bMark Andrews4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
4f587beb8eb70f198346333bce5b89df3ac5c88eMark Andrews4260. [security] Insufficient testing when parsing a message allowed
649452635065426fcc08b99b351db904939a6580Mark Andrews records with an incorrect class to be be accepted,
649452635065426fcc08b99b351db904939a6580Mark Andrews triggering a REQUIRE failure when those records
649452635065426fcc08b99b351db904939a6580Mark Andrews were subsequently cached. (CVE-2015-8000) [RT #40987]
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews4259. [func] Add an option for non-destructive control channel
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews access using a "read-only" clause. In such
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews cases, a restricted set of rndc commands are
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews allowed for querying information from named.
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews4258. [bug] Limit rndc query message sizes to 32 KiB. This should
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews not break any legitimate rndc commands, but will
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt prevent a rogue rndc query from allocating too
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt much memory. [RT #41073]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews4256. [bug] Allow rndc command arguments to be quoted so as
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews to allow spaces. [RT #36665]
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews4255. [performance] Add 'message-compression' option to disable DNS
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews compression in responses. [RT #40726]
f02b5d87a561ba669bd368a8a6422f364f7702ecEvan Hunt4254. [bug] Address missing lock when getting zone's serial.
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt4253. [security] Address fetch context reference count handling error
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt on socket error. (CVE-2015-8461) [RT#40945]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt4252. [func] Add support for automating the generation CDS and
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt CDNSKEY rrsets to named and dnssec-signzone.
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt4251. [bug] NTAs were deleted when the server was reconfigured
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt or reloaded. [RT #41058]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt4250. [func] Log the TSIG key in use during inbound zone
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews transfers. [RT #41075]
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews4249. [func] Improve error reporting of TSIG / SIG(0) records in
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt the wrong location. [RT #41030]
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt4248. [performance] Add an isc_atomic_storeq() function, use it in
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt stats counters to improve performance.
c2f051aaaab60dbac4bc754f09d594846d99fb89Evan Hunt [RT #39972] [RT #39979]
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann defined to report json library version. [RT #41045]
35efe74edbdae034447a5bf73c78d8243e50b0b8Mark Andrews4246. [test] Ensure the statschannel system test runs when BIND
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt is not built with libjson. [RT #40944]
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt4245. [placeholder]
11c282d8a4c87618538cfc89c9004666dc841036Francis Dupont4244. [bug] The parser was not reporting that use-ixfr is obsolete.
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont4242. [bug] Replace the client if not already replaced when
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt prefetching. [RT #41001]
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt the ARM. [RT #40955]
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont4240. [port] Fix LibreSSL compatibility. [RT #40977]
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews4239. [func] Changed default servfail-ttl value to 1 second from 10.
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews Also, the maximum value is now 30 instead of 300.
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews4237. [doc] Upgraded documentation toolchain to use DocBook 5
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews and dblatex. [RT #40766]
4c05f9a6a3d0fe27d5fad1599b10500e21c705feMark Andrews4236. [performance] On machines with 2 or more processors (CPU), the
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann default value for the number of UDP listeners
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann has been changed to the number of detected
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann processors minus one. [RT #40761]
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont4235. [func] Added support in named for "dnstap", a fast method of
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont capturing and logging DNS traffic, and a new command
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont "dnstap-read" to read a dnstap log file. Use
be789bc7eb6f683979cd1405a06284ee00cda366Mark Andrews "configure --enable-dnstap" to enable this
17bc56e321574b43c5837d1741e9157c8f2fcd91Francis Dupont feature (note that this requires libprotobuf-c
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews and libfstrm). See the ARM for configuration details.
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews Thanks to Robert Edmonds of Farsight Security.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt4234. [func] Add deflate compression in statistics channel HTTP
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt server. [RT #40861]
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman4232. [contrib] Address unchecked memory allocation calls in
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt query-loc and zone2ldap. [RT #40789]
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews uninitialized result. [RT #40839]
ddd40390be246189f10dc18782914b295befb139Mark Andrews4229. [bug] A variable could be used uninitialized in
0e507dbb816575e6220fe309e8ada68897ffcdbeMark Andrews dns_update_signaturesinc. [RT #40784]
fd5d7b4b1cf3b11ff248a361e5b2c56ca7372225Mark Andrews4228. [bug] Address race condition in dns_client_destroyrestrans.
5715e1c6f6b549e95b312f1529efd849f7c9503fMark Andrews4227. [bug] Silence static analysis warnings. [RT #40828]
b795de862ba8e75f3b9c56abb9553c28255c8567Mark Andrews4226. [bug] Address a theoretical shutdown race in
b795de862ba8e75f3b9c56abb9553c28255c8567Mark Andrews zone.c:notify_send_queue(). [RT #38958]
c12904ec531fb210066bafc33bde74d43889caacMark Andrews4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
0a92db42c6be6a158cd41ff863831a8d2d257935Mark Andrews shared libraries. [RT #39557]
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews4224. [func] Added support for "dyndb", a new interface for loading
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews zone data from an external database, developed by
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews Red Hat for the FreeIPA project.
699e00089fb1a6eb31d7bd1c96bf973608953159Mark Andrews DynDB drivers fully implement the BIND database
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews API, and are capable of significantly better
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews performance and functionality than DLZ drivers,
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews while taking advantage of advanced database
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews features not available in BIND such as multi-master
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews replication.
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews Thanks to Adam Tkac and Petr Spacek of Red Hat.
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews4223. [func] Add support for setting max-cache-size to percentage
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews of available physical memory, set default to 90%.
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews4222. [func] Bias IPv6 servers when selecting the next server to
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews query. [RT #40836]
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews4220. [doc] Improve documentation for zone-statistics.
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews EGAIN when these soft error are not retried for
e3fbbde8fc2e7d6e50583926d34e25a7b638e5adMichael Graff isc_socket_send*().
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt4218. [bug] Potential null pointer dereference on out of memory
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt if mmap is not supported. [RT #40777]
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt4217. [protocol] Add support for CSYNC. [RT #40532]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews4216. [cleanup] Silence static analysis warnings. [RT #40649]
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt4215. [bug] nsupdate: skip to next request on GSSTKEY create
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt failure. [RT #40685]
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews4214. [protocol] Add support for TALINK. [RT #40544]
2870e5fb54c4a7e3980307b191c7e6ae649119bcEvan Hunt4213. [bug] Don't reuse a cache across multiple classes.
4d205bf79b4abacfef41c9f01ee63938deba2f31Mark Andrews4212. [func] Re-query if we get a bad client cookie returned over
74b7355f1ee4a914aa09a6c6493aae64c588b026Mark Andrews UDP. [RT #40748]
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews4211. [bug] Ensure that lwresd gets at least one task to work
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews with if enabled. [RT #40652]
5b79d154014f87b6c54b1ec2d3912c35b02042a1Mark Andrews4210. [cleanup] Silence use after free false positive. [RT #40743]
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews4209. [bug] Address resource leaks in dlz modules. [RT #40654]
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews4208. [bug] Address null pointer dereferences on out of memory.
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews4207. [bug] Handle class mismatches with raw zone files.
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews4206. [bug] contrib: fixed a possible NULL dereference in
63d9e735c402ff883d86b22484742d11623745dbMark Andrews DLZ wildcard module. [RT #40745]
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews4205. [bug] 'named-checkconf -p' could include unwanted spaces
000a8970f840a0c27c5cc404826853c4674362acMark Andrews when printing tuples with unset optional fields.
000a8970f840a0c27c5cc404826853c4674362acMark Andrews4204. [bug] 'dig +trace' failed to lookup the correct type if
000a8970f840a0c27c5cc404826853c4674362acMark Andrews the initial root NS query was retried. [RT #40296]
903b3c84e2428160b2921364335363bb33452dabEvan Hunt4203. [test] The rrchecker system test now tests conversion
903b3c84e2428160b2921364335363bb33452dabEvan Hunt to and from unknown-type format. [RT #40584]
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews4202. [bug] isccc_cc_fromwire() could return an incorrect
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews result. [RT #40614]
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews4201. [func] The default preferred-glue is now the address record
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews type of the transport the query was received
87708bde16713bc02ff2598f4a82f98c699a2f2dMark Andrews over. [RT #40468]
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews4200. [cleanup] win32: update BINDinstall to be BIND release
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews independent. [RT #38915]
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews [RT #40545] [RT #40547] [RT #40561] [RT #40563]
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews4198. [placeholder]
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt4196. [doc] Improve how "enum + other" types are documented.
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
3916872f379457fe344afb02398a009701c5016aEvan Hunt4194. [bug] named-checkconf -p failed to properly print a port
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews range. [RT #40634]
3916872f379457fe344afb02398a009701c5016aEvan Hunt4193. [bug] Handle broken servers that return BADVERS incorrectly.
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews4192. [bug] The default rrset-order of random was not always being
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews applied. [RT #40456]
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt as per RFC 6763. [RT #37889]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt valid with check-names. <forest> still needs to be
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt LDH. [RT #40399]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt4189. [cleanup] Don't exit on overly long tokens in named.conf.
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt4188. [bug] Support HTTP/1.0 client properly on the statistics
37dee1ff94960a61243f611c0f87f8c316815c53Mark Andrews channel. [RT #40261]
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews4187. [func] When any RR type implementation doesn't
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews implement totext() for the RDATA's wire
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews representation and returns ISC_R_NOTIMPLEMENTED,
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews such RDATA is now printed in unknown
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews presentation format (RFC 3597). RR types affected
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews include LOC(29) and APL(42). [RT #40317].
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews4186. [bug] Fixed an RPZ bug where a QNAME would be matched
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews against a policy RR with wildcard owner name
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews (trigger) where the QNAME was the wildcard owner
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews name's parent. For example, the bug caused a query
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews with QNAME "example.com" to match a policy RR with
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews "*.example.com" as trigger. [RT #40357]
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews owner name (trigger) would prevent another policy RR
82f77687abd21349fa7c7f51e71fdc0c7367d2e2Mark Andrews with its parent owner name from being
82f77687abd21349fa7c7f51e71fdc0c7367d2e2Mark Andrews loaded. For example, the bug caused a policy RR
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews with trigger "example.com" to not have any
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews effect when a previous policy RR with trigger
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews "*.example.com" existed in that RPZ zone.
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews4184. [bug] Fixed a possible memory leak in name compression
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt when rendering long messages. (Also, improved
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt wire_test for testing such messages.) [RT #40375]
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt4183. [cleanup] Use timing-safe memory comparisons in cryptographic
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt code. Also, the timing-safe comparison functions have
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt been renamed to avoid possible confusion with
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt memcmp(). Thanks to Loganaden Velvindron of
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt AFRINIC. [RT #40148]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4182. [cleanup] Use mnemonics for RR class and type comparisons.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4181. [bug] Queued notify messages could be dequeued from the
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt wrong rate limiter queue. [RT #40350]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4180. [bug] Error responses in pipelined queries could
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt cause a crash in client.c. [RT #40289]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4179. [bug] Fix double frees in getaddrinfo() in libirs.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt text. [RT #40274]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt4177. [bug] Fix assertion failure in parsing NSAP records from
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt text. [RT #40285]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews4176. [bug] Address race issues with lwresd. [RT #40284]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews4175. [bug] TKEY with GSS-API keys needed bigger buffers.
8d8f0b465959b799cb0d29ed694dc50ea7a73202Mark Andrews4174. [bug] "dnssec-coverage -r" didn't handle time unit
8d8f0b465959b799cb0d29ed694dc50ea7a73202Mark Andrews suffixes correctly. [RT #38444]
7659fdb3aab0a96e10aac67669b6c8d79faef44fjohnd4173. [bug] dig +sigchase was not properly matching the trusted
7659fdb3aab0a96e10aac67669b6c8d79faef44fjohnd key. [RT #40188]
858c4a86c12fdaf90d8d24a6535c7e0f89d0a962johnd4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews4171. [bug] Fixed incorrect class checks in TSIG RR
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews implementation. [RT #40287]
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews4170. [security] An incorrect boundary check in the OPENPGPKEY
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews rdatatype could trigger an assertion failure.
e334405421979688f2d838805ac67ee47bd62976Mark Andrews (CVE-2015-5986) [RT #40286]
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews4169. [test] Added a 'wire_test -d' option to read input as
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews raw binary data, for use as a fuzzing harness.
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt4168. [security] A buffer accounting error could trigger an
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt assertion failure when parsing certain malformed
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt DNSSEC keys. (CVE-2015-5722) [RT #40212]
c0a76b3c0b42a110e14eb56103973944900400c4Mark Andrews4167. [func] Update rndc's usage output to include recently added
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews commands. Thanks to Tony Finch for submitting a
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews patch. [RT #40010]
36fc19f9397ac2469d5432e5eb6ff8774cf60676Mark Andrews4166. [func] Print informative output from rndc showzone when
b44b120c66d9c36f1648f18d169bb4daf4b921afMark Andrews allow-new-zones is not enabled for a view. Thanks to
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews Tony Finch for submitting a patch. [RT #40009]
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews4165. [security] A failure to reset a value to NULL in tkey.c could
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews result in an assertion failure. (CVE-2015-5477)
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt4164. [bug] Don't rename slave files and journals on out of memory.
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt4163. [bug] Address compiler warnings. [RT #40024]
5af195d1dbe4c266a47264111a9293069041209dMark Andrews4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
5af195d1dbe4c266a47264111a9293069041209dMark Andrews4161. [test] Add JSON test for traffic size stats; also test
5af195d1dbe4c266a47264111a9293069041209dMark Andrews for consistency between "rndc stats" and the XML
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews and JSON statistics channel contents. [RT #38700]
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt4160. [placeholder]
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt4159. [cleanup] Alphabetize dig's help output. [RT #39966]
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews4158. [placeholder]
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews4157. [placeholder]
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews4156. [func] Added statistics counters to track the sizes
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews of incoming queries and outgoing responses in
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews histogram buckets, as specified in RSSAC002.
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier4155. [func] Allow RPZ rewrite logging to be configured on a
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier per-zone basis using a newly introduced log clause in
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews the response-policy option. [RT #39754]
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier4154. [bug] A OPT record should be included with the FORMERR
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews response when there is a malformed EDNS option.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews4153. [bug] Dig should zero non significant +subnet bits. Check
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews that non significant ECS bits are zero on receipt.
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews4152. [func] Implement DNS COOKIE option. This replaces the
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews experimental SIT option of BIND 9.10. The following
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews named.conf directives are available: send-cookie,
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews cookie-secret, cookie-algorithm, nocookie-udp-size
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews and require-server-cookie. The following dig options
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews are available: +[no]cookie[=value] and +[no]badcookie.
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
b2c8cc4f2d61f0593300a5851e26e7ddb30b7e10Mark Andrews minimal fix. [RT #39667]
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews4149. [bug] Fixed a race condition in the getaddrinfo()
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews implementation in libirs, which caused the delv
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews utility to crash with an assertion failure when using
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews the '@server' syntax with a hostname argument.
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews4148. [bug] Fix a bug when printing zone names with '/' character
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews in XML and JSON statistics output. [RT #39873]
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews was returning referrals rather than nodata responses
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews when the AAAA records were filtered. [RT #39843]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews4146. [bug] Address reference leak that could prevent a clean
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews shutdown. [RT #37125]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews4145. [bug] Not all unassociated adb entries where being printed.
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews4144. [func] Add statistics counters for nxdomain redirections.
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews4143. [placeholder]
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews4142. [bug] rndc addzone with view specified saved NZF config
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews that could not be read back by named. This has now
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews been fixed. [RT #39845]
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews4141. [bug] A formatting bug caused rndc zonestatus to print
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews negative numbers for large serial values. This has
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews now been fixed. [RT #39854]
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews4140. [cleanup] Remove redundant nzf_remove() call during delzone.
1b42401954a8770d82a168ae1ac06ce66862fd25Mark Andrews4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews4138. [security] An uninitialized value in validator.c could result
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews in an assertion failure. (CVE-2015-4620) [RT #39795]
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews4137. [bug] Make rndc reconfig report configuration errors the
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews same way rndc reload does. [RT #39635]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews4136. [bug] Stale statistics counters with the leading
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews '#' prefix (such as #NXDOMAIN) were not being
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews updated correctly. This has been fixed. [RT #39141]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews4135. [cleanup] Log expired NTA at startup. [RT #39680]
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews4134. [cleanup] Include client-ip rules when logging the number
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews of RPZ rules of each type. [RT #39670]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews4133. [port] Update how various json libraries are handled.
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews4132. [cleanup] dig: added +rd as a synonym for +recurse,
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews added +class as an unabbreviated alternative
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews to +cl. [RT #39686]
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews4131. [bug] Addressed further problems with reloading RPZ
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews zones. [RT #39649]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews4130. [bug] The compatibility shim for *printf() misprinted some
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews large numbers. [RT #39586]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews key as per RFC 7344, Section 4.1. [RT #37215]
03952196946fc638af7f20a9b59cfd2f15de01acFrancis Dupont4126. [bug] Addressed a regression introduced in change #4121.
7c681d075027f3389c31d261e1a71473c42ac73bMark Andrews4125. [test] Added tests for dig, renamed delv test to digdelv.
da45cdaf79df00578c5bd2be9a9083a1bf95a4feMark Andrews4124. [func] Log errors or warnings encountered when parsing the
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews internal default configuration. Clarify the logging
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews of errors and warnings encountered in rndc
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews addzone or modzone parameters. [RT #39440]
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews4123. [port] Added %z (size_t) format options to the portable
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews internal printf/sprintf implementation. [RT #39586]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉4122. [bug] The server could match a shorter prefix than what was
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 available in CLIENT-IP policy triggers, and so, an
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 unexpected action could be taken. This has been
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 corrected. [RT #39481]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉4121. [bug] On servers with one or more policy zones
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 configured as slaves, if a policy zone updated
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 during regular operation (rather than at
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 startup) using a full zone reload, such as via
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 AXFR, a bug could allow the RPZ summary data to
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 fall out of sync, potentially leading to an
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 assertion failure in rpz.c when further
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 incremental updates were made to the zone, such
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 as via IXFR. [RT #39567]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉4120. [bug] A bug in RPZ could cause the server to crash if
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt policy zones were updated while recursion was
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt pending for RPZ processing of an active query.
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt4119. [test] Allow dig to set the message opcode. [RT #39550]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt4118. [bug] Teach isc-config.sh about irs. [RT #39213]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt4116. [bug] Fix a bug in RPZ that could cause some policy
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt zones that did not specifically require
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews recursion to be treated as if they did;
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews consequently, setting qname-wait-recurse no; was
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews sometimes ineffective. [RT #39229]
712b976a0633806b7140b17354a9398300f616b9Mark Andrews4115. [func] "rndc -r" now prints the result code (e.g.,
712b976a0633806b7140b17354a9398300f616b9Mark Andrews ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews running the requested command. [RT #38913]
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews4114. [bug] Fix a regression in radix tree implementation
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews introduced by ECS code. This bug was never
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews released, but it was reported by a user testing
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt master. [RT #38983]
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt4113. [test] Check for Net::DNS is some system test
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉 prerequisites. [RT #39369]
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉4112. [bug] Named failed to load when "root-delegation-only"
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉 was used without a list of domains to exclude.
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt4111. [doc] Alphabetize rndc man page. [RT #39360]
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt4110. [bug] Address memory leaks / null pointer dereferences
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt on out of memory. [RT #39310]
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt4109. [port] linux: support reading the local port range from
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt4108. [func] An additional NXDOMAIN redirect method (option
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt "nxdomain-redirect") has been added, allowing
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt redirection to a specified DNS namespace instead
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews of a single redirect zone. [RT #37989]
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt4107. [bug] Address potential deadlock when updating zone content.
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt4106. [port] Improve readline support. [RT #38938]
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt4105. [port] Misc fixes for Microsoft Visual Studio
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt 2015 CTP6 in 64 bit mode. [RT #39308]
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews4104. [bug] Address uninitialized elements. [RT #39252]
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉4103. [port] Misc fixes for Microsoft Visual Studio
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉 2015 CTP6. [RT #39267]
ddd40390be246189f10dc18782914b295befb139Mark Andrews4102. [bug] Fix a use after free bug introduced in change
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews #4094. [RT #39281]
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews4101. [bug] dig: the +split and +rrcomments options didn't
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews work with +short. [RT #39291]
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews4100. [bug] Inherited owernames on the line immediately following
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews a $INCLUDE were not working. [RT #39268]
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews4099. [port] clang: make unknown commandline options hard errors
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews when determining what options are supported.
4a8dc5f8efcc8bc3033a9383f958d1de22c844f4Mark Andrews4098. [bug] Address use-after-free issue when using a
0627874ff86b2d5c9d6d90ea9fde8111dc97654bMark Andrews predecessor key with dnssec-settime. [RT #39272]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews4097. [func] Add additional logging about xfrin transfer status.
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews4096. [bug] Fix a use after free of query->sendevent.
081b36ff9588e4d67a1a3095f5333a2b223482f7Mark Andrews4095. [bug] zone->options2 was not being properly initialized.
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews4094. [bug] A race during shutdown or reconfiguration could
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews cause an assertion in mem.c. [RT #38979]
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews4093. [func] Dig now learns the SIT value from truncated
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews responses when it retries over TCP. [RT #39047]
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
63af1a646a006867dbd99dc0aa74559d832a420fMark Andrews4090. [bug] Fix a crash while parsing malformed CAA RRs in
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews presentation format, i.e., from text such as
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews from master files. Thanks to John Van de
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews Meulebrouck Brendgard for discovering and
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews reporting this problem. [RT #39003]
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews4089. [bug] Send notifies immediately for slave zones during
a20996ab6ff2be473b85470fddd2380a3e180e7bMark Andrews startup. [RT #38843]
80852eb5a8df5f3d70efb764e00f8f09efc5730cMark Andrews4088. [port] Fixed errors when building with libressl. [RT #38899]
a27bbd21cf07371fc71e7ade75c3d78a5b98b7f9Mark Andrews4087. [bug] Fix a crash due to use-after-free due to sequencing
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews of tasks actions. [RT #38495]
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
ead77b9ad4821433ad45ef1de2c072b7c8f94f48Mark Andrews4084. [bug] Fix a possible race in updating stats counters.
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews4083. [cleanup] Print the number of CPUs and UDP listeners
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews consistently in the log and in "rndc status"
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews output; indicate whether threads are supported
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews in "named -V" output. [RT #38811]
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews4082. [bug] Incrementally sign large inline zone deltas.
7d9be933d7f4504cd0355ced1fb7fbd137e455b7Mark Andrews4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
5ae2eac4c16bdbbef032544bd9fc86f47e7bdc2cMark Andrews4080. [func] Completed change #4022, adding a "lock-file" option
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews to named.conf to override the default lock file,
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews in addition to the "named -X <filename>" command
b667946fa548bf8cb93029458ec130be6365419fMark Andrews line option. Setting the lock file to "none"
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews using either method disables the check completely.
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews4079. [func] Preserve the case of the owner name of records to
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews the RRset level. [RT #37442]
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews CMSG_SPACE(sizeof(char)). [RT #38621]
8d31dd9ab62d91b5f23ac687657c966d44074a3fMark Andrews4077. [test] Add static-stub regression test for DS NXDOMAIN
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews return making the static stub disappear. [RT #38564]
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews4076. [bug] Named could crash on shutdown with outstanding
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews reload / reconfig events. [RT #38622]
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews4075. [placeholder]
dc64df4479df5e7cb3ed1dead21888b5af98f67eMark Andrews4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews4073. [cleanup] Add libjson-c version number reporting to
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews "named -V"; normalize version number formatting.
44f175a90a855326725439b2f1178f0dcca8f67dMark Andrews4072. [func] Add a --enable-querytrace configure switch for
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews very verbose query trace logging. (This option
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews has a negative performance impact and should be
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews used only for debugging.) [RT #37520]
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews4071. [cleanup] Initialize pthread mutex attrs just once, instead of
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews doing it per mutex creation. [RT #38547]
e12030c433a08b9e9678717ec5e8092c9e4da72cMark Andrews4070. [bug] Fix a segfault in nslookup in a query such as
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews4069. [doc] Reorganize options in the nsupdate man page.
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews4068. [bug] Omit unknown serial number from JSON zone statistics.
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews4067. [cleanup] Reduce noise from RRL when query logging is
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews disabled. [RT #38648]
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews4066. [doc] Reorganize options in the dig man page. [RT #38516]
f083a44415365f6464f8bd35f439dc13ee0b684fMark Andrews4065. [test] Additional RFC 5011 tests. [RT #38569]
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews4064. [contrib] dnssec-keyset.sh: Generates a specified number
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews of DNSSEC keys with timing set to implement a
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews pre-publication key rollover strategy. Thanks
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews to Jeffry A. Spain. [RT #38459]
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews4063. [bug] Asynchronous zone loads were not handled
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews correctly when the zone load was already in
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews progress; this could trigger a crash in zt.c.
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews4062. [bug] Fix an out-of-bounds read in RPZ code. If the
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews read succeeded, it doesn't result in a bug
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews during operation. If the read failed, named
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews could segfault. [RT #38559]
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews4061. [bug] Handle timeout in legacy system test. [RT #38573]
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews4060. [bug] dns_rdata_freestruct could be called on a
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews uninitialized structure when handling a error.
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews4059. [bug] Addressed valgrind warnings. [RT #38549]
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews4058. [bug] UDP dispatches could use the wrong pseudorandom
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews number generator context. [RT #38578]
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews4056. [bug] Expanded automatic testing of trust anchor
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews management and fixed several small bugs including
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 a memory leak and a possible loss of key state
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 information. [RT #38458]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier4055. [func] "rndc managed-keys" can be used to check status
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier of trust anchors or to force keys to be refreshed,
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier Also, the managed keys data file has easier-to-read
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 comments. [RT #38458]
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉4054. [func] Added a new tool 'mdig', a lightweight clone of
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 dig able to send multiple pipelined queries.
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews4053. [security] Revoking a managed trust anchor and supplying
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews an untrusted replacement could cause named
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews to crash with an assertion failure.
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews (CVE-2015-1349) [RT #38344]
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews4052. [bug] Fix a leak of query fetchlock. [RT #38454]
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews4050. [bug] RPZ could send spurious SERVFAILs in response
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews to duplicate queries. [RT #38510]
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
ff9301990d83dedca3806a16b4c9693f16d6e8b1Mark Andrews4048. [bug] adb hash table was not being grown. [RT #38470]
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews4047. [cleanup] "named -V" now reports the current running versions
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews of OpenSSL and the libxml2 libraries, in addition to
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews the versions that were in use at build time.
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews4046. [bug] Accounting of "total use" in memory context
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews statistics was not correct. [RT #38370]
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews4045. [bug] Skip to next master on dns_request_createvia4 failure.
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews4044. [bug] Change 3955 was not complete, resulting in an assertion
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews failure if the timing was just right. [RT #38352]
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews4043. [func] "rndc modzone" can be used to modify the
22c4126ba51175af1453cd2254c303c6f65a766cMark Andrews configuration of an existing zone, using similar
22c4126ba51175af1453cd2254c303c6f65a766cMark Andrews syntax to "rndc addzone". [RT #37895]
b1003ace6f6e15ffa212c7982c80845f549e6cefMark Andrews4042. [bug] zone.c:iszonesecure was being called too late.
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews4041. [func] TCP sockets can now be shared while connecting.
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews (This will be used to enable client-side support
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews of pipelined queries.) [RT #38231]
d1a5fdc34a3d7caabead7bbf0cbf6fa7d89f0910Mark Andrews4040. [func] Added server-side support for pipelined TCP
5e95cf76e46d93d6b6c2e3cd1aca4c1ab33f827eMark Andrews queries. Clients may continue sending queries via
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews TCP while previous queries are being processed
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews in parallel. (The new "keep-response-order"
13396661f46572d7b94703a25721aad040fbd91aMark Andrews option allows clients to be specified for which
13396661f46572d7b94703a25721aad040fbd91aMark Andrews the old behavior will still be used.) [RT #37821]
64f8608ed6b7f42a4a7d358fade2c82dfd1e9c01Mark Andrews4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
0cae66577c69c89086cd065bb297690072b471b4Mark Andrews4038. [bug] Add 'rpz' flag to node and use it to determine whether
0cae66577c69c89086cd065bb297690072b471b4Mark Andrews to call dns_rpz_delete. This should prevent unbalanced
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews add / delete calls. [RT #36888]
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews4037. [bug] also-notify was ignoring the tsig key when checking
139cedabf9242add24d8326e216e451dd2d5a935Tatuya JINMEI 神明達哉 for duplicates resulting in some expected notify
3a28f0dc73549d8c59ad18898540892c7eed957bTatuya JINMEI 神明達哉 messages not being sent. [RT #38369]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews4036. [bug] Make call to open a temporary file name safe during
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews NZF creation. [RT #38331]
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt4035. [bug] Close temporary and NZF FILE pointers before moving
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt the former into the latter's place, as required on
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt Windows. [RT #38332]
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt4034. [func] When added, negative trust anchors (NTA) are now
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews saved to files (viewname.nta), in order to
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews persist across restarts of the named server.
19a62c240d4bac66eabc96139bc4a773250495ccFrancis Dupont4033. [bug] Missing out of memory check in request.c:req_send.
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews4032. [bug] Built-in "empty" zones did not correctly inherit the
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont "allow-transfer" ACL from the options or view.
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt4031. [bug] named-checkconf -z failed to report a missing file
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt with a hint zone. [RT #38294]
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews4030. [func] "rndc delzone" is now applicable to zones that were
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt configured in named.conf, as well as zones that
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt were added via "rndc addzone". (Note, however, that
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont if named.conf is not also modified, the deleted zone
e11a0c114cdaf8f7e7832e9f1a011138248093a6Evan Hunt will return when named is reloaded.) [RT #37887]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont4029. [func] "rndc showzone" displays the current configuration
b47d410f8409294863f214542a05c92cbe86cf04Evan Hunt of a specified zone. [RT #37887]
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont4028. [bug] $GENERATE with a zero step was not being caught as a
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont error. A $GENERATE with a / but no step was not being
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont caught as a error. [RT #38262]
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
a91029a00e83e3933046cc9354357bccaa66c272Francis Dupont4025. [port] bsdi: failed to build. [RT #38047]
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt dns_rdata_opt_current, dns_rdata_txt_first,
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt dns_rdata_txt_next and dns_rdata_txt_current were
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt documented but not implemented. These have now been
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt implemented.
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt dns_rdata_spf_first, dns_rdata_spf_next and
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt dns_rdata_spf_current were documented but not
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt implemented. The prototypes for these
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt functions have been removed. [RT #38068]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt4023. [bug] win32: socket handling with explicit ports and
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt invoking named with -4 was broken for some
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt configurations. [RT #38068]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt4022. [func] Stop multiple spawns of named by limiting number of
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt processes to 1. This is done by using a lockfile and
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt checking whether we can listen on any configured
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt TCP interfaces. [RT #37908]
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt4021. [bug] Adjust max-recursion-queries to accommodate
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt the need for more queries when the cache is
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt empty. [RT #38104]
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier resulting in updates being sent to the wrong server.
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt4019. [func] If named is not configured to validate the answer
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt then allow fallback to plain DNS on timeout even
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt when we know the server supports EDNS. [RT #37978]
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt4018. [placeholder]
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt4017. [test] Add system test to check lookups to legacy servers
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt with broken DNS behavior. [RT #37965]
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉4016. [bug] Fix a dig segfault due to bad linked list usage.
9ead684875ab0ab5fdb8b5dd837a88f7dbd0e01dEvan Hunt4015. [bug] Nameservers that are skipped due to them being
9ead684875ab0ab5fdb8b5dd837a88f7dbd0e01dEvan Hunt CNAMEs were not being logged. They are now logged
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt to category 'cname' as per BIND 8. [RT #37935]
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt4014. [bug] When including a master file origin_changed was
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews not being properly set leading to a potentially
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews spurious 'inherited owner' warning. [RT #37919]
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews4013. [func] Add a new tcp-only option to server (config) /
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews peer (struct) to use TCP transport to send
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews queries (in place of UDP transport with a
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews TCP fallback on truncated (TC set) response).
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews4012. [cleanup] Check returned status of OpenSSL digest and HMAC
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews functions when they return one. Note this applies
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews only to FIPS capable OpenSSL libraries put in
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt FIPS mode and MD5. [RT #37944]
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt4011. [bug] master's list port and dscp inheritance was not
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont properly implemented. [RT #37792]
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont4010. [cleanup] Clear the prefetchable state when initiating a
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont prefetch. [RT #37399]
bd31f734eec1884bd14024a232eb3ad3b0b86489Evan Hunt4009. [func] delv: added a +tcp option. [RT #37855]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
1361014b02f11cf8de8725d1770a3dccbc1c8975Evan Hunt4007. [doc] Remove acl forward reference restriction. [RT #37772]
40ad4ed01be1cace49a62214d11ef1309b3029a0Evan Hunt4006. [security] A flaw in delegation handling could be exploited
40ad4ed01be1cace49a62214d11ef1309b3029a0Evan Hunt to put named into an infinite loop. This has
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt been addressed by placing limits on the number
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt of levels of recursion named will allow (default 7),
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt and the number of iterative queries that it will
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt send (default 50) before terminating a recursive
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt query (CVE-2014-8500).
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews The recursion depth limit is configured via the
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews "max-recursion-depth" option, and the query limit
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews via the "max-recursion-queries" option. [RT #37580]
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt4005. [func] The buffer used for returning text from rndc
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt commands is now dynamically resizable, allowing
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt arbitrarily large amounts of text to be sent back
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews to the client. (Prior to this change, it was
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt possible for the output of "rndc tsig-list" to be
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt truncated.) [RT #37731]
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt4004. [bug] When delegations had AAAA glue but not A, a
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt reference could be leaked causing an assertion
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt failure on shutdown. [RT #37796]
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt4003. [security] When geoip-directory was reconfigured during
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt named run-time, the previously loaded GeoIP
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt data could remain, potentially causing wrong
28f4cd0a4503b91d7a48ed4d157347b251ae5686Mark Andrews ACLs to be used or wrong results to be served
c221360e9f511be38c1385b9a647ebd7dceb8b42Mark Andrews based on geolocation (CVE-2014-8680). [RT #37720]
485a435efecda961aa117b63d8e02494a5e11e37Mark Andrews4002. [security] Lookups in GeoIP databases that were not
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt loaded could cause an assertion failure
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt (CVE-2014-8680). [RT #37679]
16de5dbc7178b7fe8a9d4beb9ff50778cc8d3847Evan Hunt4001. [security] The caching of GeoIP lookups did not always
16de5dbc7178b7fe8a9d4beb9ff50778cc8d3847Evan Hunt handle address families correctly, potentially
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt resulting in an assertion failure (CVE-2014-8680).
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt from the redirect zone. [RT #37722]
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt3999. [func] "mkeys" and "nzf" files are now named after
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt their corresponding views, unless the view name
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt contains characters that would be incompatible
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt with use in a filename (i.e., slash, backslash,
71ba75c604df3604673232828a68bb28c420e698Mark Andrews or capital letters). If a view name does contain
71ba75c604df3604673232828a68bb28c420e698Mark Andrews these characters, the files will still be named
71ba75c604df3604673232828a68bb28c420e698Mark Andrews using a cryptographic hash of the view name.
71ba75c604df3604673232828a68bb28c420e698Mark Andrews Regardless of this, if a file using the old name
71ba75c604df3604673232828a68bb28c420e698Mark Andrews format is found to exist, it will continue to be
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews used. [RT #37704]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews3998. [bug] isc_radix_search was returning matches that were
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews too precise. [RT #37680]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews3996. [bug] Address use after free on out of memory error in
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews keyring_add. [RT #37639]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews3995. [bug] receive_secure_serial holds the zone lock for too
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews long. [RT #37626]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews3994. [func] Dig now supports setting the last unassigned DNS
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews header flag bit (dig +zflag). [RT #37421]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews3993. [func] Dig now supports EDNS negotiation by default.
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt (dig +[no]ednsnegotiation).
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt Note: This is disabled by default in BIND 9.10
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt and enabled by default in BIND 9.11. [RT #37604]
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt3992. [func] DiG can now send queries without questions
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt (dig +header-only). [RT #37599]
2a0d4c4d6ba5addb33cd1bccecc55ca4a095f191Mark Andrews3991. [func] Add the ability to buffer logging output by specifying
2a0d4c4d6ba5addb33cd1bccecc55ca4a095f191Mark Andrews "buffered yes;" when defining a channel. [RT #26561]
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews3990. [test] Add tests for unknown DNSSEC algorithm handling.
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
8b37c0dd6e1cf3f8849f4f28b77b43ab3fb20ea4Mark Andrews3988. [func] Allow the zone serial of a dynamically updatable
8b37c0dd6e1cf3f8849f4f28b77b43ab3fb20ea4Mark Andrews zone to be updated via "rndc signing -serial".
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt3987. [port] Handle future Visual Studio 14 incompatible changes.
5d9922e86f3d7f58f4c6b1234962ee4567108830Vernon Schryver3986. [doc] Add the BIND version number to page footers
c4e3976707829c3225983b80afb09215e49ea10dMark Andrews in the ARM. [RT #37398]
49f788cbd39eb9218c19e077c7b2519c617e044dMark Andrews3985. [doc] Describe how +ndots and +search interact in dig.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3984. [func] Accept 256 byte long PINs in native PKCS#11
cfc22e53a89ccac4eb04b4f41a93f73e629e80edEvan Hunt crypto. [RT #37410]
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt3983. [bug] Change #3940 was incomplete: negative trust anchors
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt could be set to last up to a week, but the
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt "nta-lifetime" and "nta-recheck" options were
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt still limited to one day. [RT #37522]
d0ca4e90e2dd584db70e403ef92ab08d78d9cd6dMark Andrews3982. [doc] Include release notes in product documentation.
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt3981. [bug] Cache DS/NXDOMAIN independently of other query types.
9dd2ee95f11de29e358cc01059861e724dbb5807Mark Andrews3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
db6cd7ee05471eddeaac642b2f45dde87e770da5Mark Andrews size. [RT #37187]
dc9270706619976c47236892c655ba76671c37f1Mark Andrews3979. [bug] Negative trust anchor fetches were not properly
dc9270706619976c47236892c655ba76671c37f1Mark Andrews managed. [RT #37488]
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews3978. [test] Added a unit test for Diffie-Hellman key
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews computation, completing change #3974. [RT #37477]
5985af3f5ca3bd3aecd177c7eab497e7414c3945Evan Hunt3977. [cleanup] "rndc secroots" reported a "not found" error when
5985af3f5ca3bd3aecd177c7eab497e7414c3945Evan Hunt there were no negative trust anchors set. [RT #37506]
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt3976. [bug] When refreshing managed-key trust anchors, clear
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt any cached trust so that they will always be
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews revalidated with the current set of secure
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt roots. [RT #37506]
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt3975. [bug] Don't populate or use the bad cache for queries that
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt don't request or use recursion. [RT #37466]
289dbe005c271d344296cad043157fee6604bdb0Mark Andrews3974. [bug] Handle DH_compute_key() failure correctly in
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont3973. [test] Added hooks for Google Performance Tools CPU profiler,
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont including real-time/wall-clock profiling. Use
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont "configure --with-gperftools-profiler" to enable.
0088b45de515b891622e7e81dee9602291231c10Evan Hunt3972. [bug] Fix host's usage statement. [RT #37397]
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt3971. [bug] Reduce the cascading failures due to a bad $TTL line
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt in named-checkconf / named-checkzone. [RT #37138]
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt3969. [test] Added 'delv' system test. [RT #36901]
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt3968. [bug] Silence spurious log messages when using 'named -[46]'.
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt3967. [test] Add test for inlined signed zone in multiple views
7048af0a551f13d2916a06cce21357714939a89bEvan Hunt with different DNSKEY sets. [RT #35759]
00295e065080e0b9856d00b15976d1ed5d280cbfEvan Hunt3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt3965. [func] Log outgoing packets and improve packet logging to
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt support logging the remote address. [RT #36624]
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt3964. [func] nsupdate now performs check-names processing.
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt3963. [test] Added NXRRSET test cases to the "dlzexternal"
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews system test. [RT #37344]
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
adb42115869b8258cd38bc7fd044766f662bdd78Mark Andrews conditions. [RT #34663]
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt BADSIG. [RT #37216]
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉3959. [bug] Updates could be lost if they arrived immediately
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 after a rndc thaw. [RT #37233]
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉3958. [bug] Detect when writeable files have multiple references
38397492000c996d50f9bf96a4da318a742bd07cEvan Hunt in named.conf. [RT #37172]
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
f82d52e82defd947805f0882f1559e88d830922aEvan Hunt and ECDSAP384SHA384. [RT #37183]
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt3956. [func] Notify messages are now rate limited by notify-rate and
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt startup-notify-rate instead of serial-query-rate.
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt3955. [bug] Notify messages due to changes are no longer queued
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt behind startup notify messages. [RT #24454]
e2facd7af296d90d0d1fef7994b6b8e795490a92Evan Hunt3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt two name pointers were the same. [RT #37176]
c1bfa5b0ad6a031b0a3038207938897128a241b4Evan Hunt3951. [func] Add the ability to set yet-to-be-defined EDNS flags
b99efc39de7711d483f62f42bf6c365843637238Mark Andrews to dig (+ednsflags=#). [RT #37142]
302ed789bd97f34500ee4ba3a8329590d6453fc6Mark Andrews3950. [port] Changed the bin/python Makefile to work around a
302ed789bd97f34500ee4ba3a8329590d6453fc6Mark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
6f6f08b7a4ea50806099b23ca97010195c1365cdEvan Hunt3949. [experimental] Experimental support for draft-andrews-edns1 by sending
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt building). Add support for limiting the EDNS version
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt advertised to servers: server { edns-version 0; };
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews Log the EDNS version received in the query log.
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews --with-tuning=large. [RT #37059]
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews3947. [cleanup] Set the executable bit on libraries when using
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews libtool. [RT #36786]
a3285e811de7204f1d4d296c7f16082fc58e1b7aMark Andrews3946. [cleanup] Improved "configure" search for a python interpreter.
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉3945. [bug] Invalid wildcard expansions could be incorrectly
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉 accepted by the validator. [RT #37093]
9d856845d63784690e347c8e8dc013f1c830c86dMark Andrews3944. [test] Added a regression test for "server-id". [RT #37057]
90065a6881d58420120ae33aac55e5ff10f65fd5Mark Andrews3943. [func] SERVFAIL responses can now be cached for a
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews limited time (configured by "servfail-ttl",
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews default 10 seconds, limit 30). This can reduce
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt the frequency of retries when an authoritative
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt server is known to be failing, e.g., due to
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt ongoing DNSSEC validation problems. [RT #21347]
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt3942. [bug] Wildcard responses from a optout range should be
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews marked as insecure. [RT #37072]
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews3941. [doc] Include the BIND version number in the ARM. [RT #37067]
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews3940. [func] "rndc nta" now allows negative trust anchors to be
5cb44a38d9b6fbd1144cf396a199db54e9e56f5bEvan Hunt set for up to one week. [RT #37069]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3939. [func] Improve UPDATE forwarding performance by allowing TCP
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt connections to be shared. [RT #37039]
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews3938. [func] Added quotas to be used in recursive resolvers
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews that are under high query load for names in zones
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews whose authoritative servers are nonresponsive or
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews are experiencing a denial of service attack.
9e9e7112f9d712fe9e1740162f88a82ef1aa4711Mark Andrews - "fetches-per-server" limits the number of
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews simultaneous queries that can be sent to any
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews single authoritative server. The configured
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews value is a starting point; it is automatically
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews adjusted downward if the server is partially or
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt completely non-responsive. The algorithm used to
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt adjust the quota can be configured via the
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt "fetch-quota-params" option.
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt - "fetches-per-zone" limits the number of
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt simultaneous queries that can be sent for names
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews within a single domain. (Note: Unlike
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews "fetches-per-server", this value is not
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt self-tuning.)
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt - New stats counters have been added to count
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt queries spilled due to these quotas.
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt See the ARM for details of these options. [RT #37125]
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt3937. [func] Added some debug logging to better indicate the
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt conditions causing SERVFAILs when resolving.
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt3936. [func] Added authoritative support for the EDNS Client
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt Subnet (ECS) option.
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt ACLs can now include "ecs" elements which specify
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont an address or network prefix; if an ECS option is
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont included in a DNS query, then the address encoded
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont in the option will be matched against "ecs" ACL
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont Also, if an ECS address is included in a query,
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont then it will be used instead of the client source
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews address when matching "geoip" ACL elements. This
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews behavior can be overridden with "geoip-use-ecs no;".
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews (Note: to enable "geoip" ACLs, use "configure
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt --with-geoip". This requires libGeoIP version
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt 1.5.0 or higher.)
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt When "ecs" or "geoip" ACL elements are used to
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt select a view for a query, the response will include
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt an ECS option to indicate which client network the
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt answer is valid for.
cc6cddfd94e8f0c58c290317b0853dac30b1b895Evan Hunt (Thanks to Vincent Bernat.) [RT #36781]
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt3935. [bug] "geoip asnum" ACL elements would not match unless
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt the full organization name was specified. They
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt can now match against the AS number alone (e.g.,
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews AS1234). [RT #36945]
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt sit-secret documentation. [RT #36980]
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt3933. [bug] Corrected the implementation of dns_rdata_casecompare()
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt for the HIP rdata type. [RT #36911]
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews3932. [test] Improved named-checkconf tests. [RT #36911]
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews3930. [bug] "rndc nta -r" could cause a server hang if the
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews NTA was not found. [RT #36909]
bfbd69c43f2b63ac122e4a47a510d46ffffb613cEvan Hunt3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews3928. [test] Improve rndc system test. [RT #36898]
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews3927. [bug] dig: report PKCS#11 error codes correctly when
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews compiled with --enable-native-pkcs11. [RT #36956]
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews3926. [doc] Added doc for geoip-directory. [RT #36877]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
4b30598fb908755c4fd04f51cf3ce1f550434bf3Mark Andrews3923. [bug] Sanity check the xml2-config output. [RT #22246]
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt3922. [bug] When resigning, dnssec-signzone was removing
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt all signatures from delegation nodes. It now
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews retains DS and (if applicable) NSEC signatures.
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
616560e3db487f548b383c7eecc6e855e8afe7d6Mark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews3919. [bug] dig: continue to next line if a address lookup fails
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews in batch mode. [RT #36755]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt3918. [doc] Update check-spf documentation. [RT #36910]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt3917. [bug] dig, nslookup and host now continue on names that are
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt too long after applying a search list elements.
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt3916. [contrib] zone2sqlite checked wrong result code. Address
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews compiler warnings. [RT #36931]
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt3915. [bug] Address a assertion if a route event arrived while
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt shutting down. [RT #36887]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt3914. [bug] Allow the URI target and CAA value fields to
3727725bb7d63605b68a644060857013d563b67fEvan Hunt be zero length. [RT #36737]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt3913. [bug] Address race issue in dispatch. [RT #36731]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt3911. [func] Implement EDNS EXPIRE option client side, allowing
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt a slave server to set the expiration timer correctly
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt when transferring zone data from another slave
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews server. [RT #35925]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews3910. [bug] Fix races to free event during shutdown. [RT #36720]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews3909. [bug] When computing the number of elements required for a
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews acl count_acl_elements could have a short count leading
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews to a assertion failure. Also zero out new acl elements
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews in dns_acl_merge. [RT #36675]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews3908. [bug] rndc now differentiates between a zone in multiple
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews views and a zone that doesn't exist at all. [RT #36691]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews3907. [cleanup] Alphabetize rndc help. [RT #36683]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt3906. [protocol] Update URI record format to comply with
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt draft-faltstrom-uri-08. [RT #36642]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt3904. [func] Add the RPZ SOA to the additional section. [RT36507]
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt3903. [bug] Improve the accuracy of DiG's reported round trip
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt time. [RT 36611]
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt3902. [bug] liblwres wasn't handling link-local addresses in
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt nameserver clauses in resolv.conf. [RT #36039]
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt3901. [protocol] Added support for CAA record type (RFC 6844).
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont3899. [bug] "request-ixfr" is only applicable to slave and redirect
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont zones. [RT #36608]
48b6d2f585d753ac89a11cb5bafb14f239e08430Evan Hunt3898. [bug] Too small a buffer in tohexstr() calls in test code.
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt3897. [bug] RPZ summary information was not properly being updated
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt after a AXFR resulting in changes sometimes being
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt ignored. [RT #35885]
4256ffffb9da267edf7925597714afaacabebf5aEvan Hunt3896. [bug] Address performance issues with DSCP code on some
4256ffffb9da267edf7925597714afaacabebf5aEvan Hunt platforms. [RT #36534]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3895. [func] Add the ability to set the DSCP code point to dig.
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews3894. [bug] Buffers in isc_print_vsnprintf were not properly
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews initialized leading to potential overflows when
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews printing out quad values. [RT #36505]
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier3893. [bug] Peer DSCP values could be returned without being set.
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier3892. [bug] Setting '-t aaaa' in .digrc had unintended side
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier effects. [RT #36452]
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
a93a66f61872a92ef4a272ca998aaff954ab4fedEvan Hunt to install python programs.
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews3890. [bug] RRSIG sets that were not loaded in a single transaction
debd489a44363870f96f75818e89ec27d3cab736Francis Dupont at start up where not being correctly added to
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews re-signing heaps. [RT #36302]
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt3889. [port] hurd: configure fixes as per:
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt3888. [func] 'rndc status' now reports the number of automatic
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt zones. [RT #36015]
ff850b81c814787c72e96b162f47a208665814c4Mark Andrews3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
ff850b81c814787c72e96b162f47a208665814c4Mark Andrews they are easier to use in a debugger. [RT #36373]
0f869e8d52fec87684c7551dcc0f315a7ed19da1Mark Andrews3886. [bug] rbtdb_write_header should use a once to initialize
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews FILE_VERSION. [RT #36374]
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews3885. [port] Use 'open()' rather than 'file()' to open files in
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
b3c8f1e9e864c30d1bb68fdf1ba7eb242c24be6eMark Andrews3883. [placeholder]
4d0e2cf9b9ffcf5941b347e6bea084a12455e388Mark Andrews3882. [func] By default, negative trust anchors will be tested
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont periodically to see whether data below them can be
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont validated, and if so, they will be allowed to
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt expire early. The "rndc nta -force" option
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt overrides this behavior. The default NTA lifetime
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt and the recheck frequency can be configured by the
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews "nta-lifetime" and "nta-recheck" options. [RT #36146]
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews3881. [bug] Address memory leak with UPDATE error handling.
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont3880. [test] Update ans.pl to work with new TSIG support in
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont Net::DNS; add additional Net::DNS version prerequisite
790e471f6e97fd4da5dc03dd34824d814a50b9a1Tatuya JINMEI 神明達哉 checks. [RT #36327]
790e471f6e97fd4da5dc03dd34824d814a50b9a1Tatuya JINMEI 神明達哉3879. [func] Add version printing option to various BIND utilities.
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt3878. [bug] Using the incorrect filename for a DLZ module
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt caused a segmentation fault on startup. [RT #36286]
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews3877. [bug] Inserting and deleting parent and child nodes
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews in response policy zones could trigger an assertion
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews failure. [RT #36272]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt3876. [bug] Improve efficiency of DLZ redirect zones by
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt suppressing unnecessary database lookups. [RT #35835]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt3875. [cleanup] Clarify log message when unable to read private
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt key files. [RT #24702]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt3874. [test] Check that only "check-names master" is needed for
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt updates to be accepted.
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt3872. [bug] Address issues found by static analysis. [RT #36209]
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉3871. [bug] Don't publish an activated key automatically before
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 its publish time. [RT #35063]
f267b27f0e1cdc55c7f1ca2a56632ce36907ff63Evan Hunt3870. [func] Updated the random number generator used in
f267b27f0e1cdc55c7f1ca2a56632ce36907ff63Evan Hunt the resolver to use the updated ChaCha based one
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt (similar to OpenBSD's changes). Also moved the
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt RNG to libisc and added unit tests for it.
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt3869. [doc] Document that in-view zones cannot be used for
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt response policy zones. [RT #35941]
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt3868. [bug] isc_mem_setwater incorrectly cleared hi_called
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt potentially leaving over memory cleaner running.
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews3867. [func] "rndc nta" can now be used to set a temporary
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont negative trust anchor, which disables DNSSEC
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont validation below a specified name for a specified
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont period of time (not exceeding 24 hours). This
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont can be used when validation for a domain is known
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont to be failing due to a configuration error on
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews the part of the domain owner rather than a
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews spoofing attack. [RT #29358]
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews3866. [bug] Named could die on disk full in generate_session_key.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt3865. [test] Improved testability of the red-black tree
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt implementation and added unit tests. [RT #35904]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt3864. [bug] RPZ didn't work well when being used as forwarder.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt3863. [bug] The "E" flag was missing from the query log as a
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt unintended side effect of code rearrangement to
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt support EDNS EXPIRE. [RT #36117]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt3862. [cleanup] Return immediately if we are not going to log the
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉 message in ns_client_dumpmessage.
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉3861. [security] Missing isc_buffer_availablelength check results
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 in a REQUIRE assertion when printing out a packet
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 (CVE-2014-3859). [RT #36078]
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt3860. [bug] ioctl(DP_POLL) array size needs to be determined
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt at run time as it is limited to {OPEN_MAX}.
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt3859. [placeholder]
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt3858. [bug] Disable GCC 4.9 "delete null pointer check".
479b80d4d706be399fd8974e941d9a0edb4259efMark Andrews3857. [bug] Make it harder for a incorrect NOEDNS classification
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews to be made. [RT #36020]
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt3856. [bug] Configuring libjson without also configuring libxml
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt resulted in a REQUIRE assertion when retrieving
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt statistics using json. [RT #36009]
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt3855. [bug] Limit smoothed round trip time aging to no more than
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 once a second. [RT #32909]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3854. [cleanup] Report unrecognized options, if any, in the final
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt configure summary. [RT #36014]
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt the handling of a rdataset with no records. [RT #35968]
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt3852. [func] Increase the default number of clients available
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews for servicing lightweight resolver queries, and
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews make them configurable via the "lwres-tasks" and
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews "lwres-clients" options. (Thanks to Tomas Hozza.)
d699672160ba01589227ac046a28e20d55336facEvan Hunt3851. [func] Allow libseccomp based system-call filtering
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews on Linux; use "configure --enable-seccomp" to
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews turn it on. Thanks to Loganaden Velvindron
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews of AFRINIC for the contribution. [RT #35347]
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews3849. [doc] Alphabetized dig's +options. [RT #35992]
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews3848. [bug] Adjust 'statistics-channels specified but not effective'
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews error message to account for JSON support. [RT #36008]
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews3847. [bug] 'configure --with-dlz-postgres' failed to fail when
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt there is not support available.
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
813b34ebecba1293ccfb91e52e3c69d5c819073dEvan Hunt ixfr query. [RT #35980]
813b34ebecba1293ccfb91e52e3c69d5c819073dEvan Hunt3845. [placeholder]
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews3844. [bug] Use the x64 version of the Microsoft Visual C++
1d9958c6cc291916010779792f0fbdf6cd5ba368Mark Andrews Redistributable when built for 64 bit Windows.
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews3842. [bug] Adjust RRL log-only logging category. [RT #35945]
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt3840. [port] Check for arc4random_addrandom() before using it;
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt it's been removed from OpenBSD 5.5. [RT #35907]
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt3839. [test] Use only posix-compatible shell in system tests.
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt3837. [security] A NULL pointer is passed to query_prefetch resulting
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt a REQUIRE assertion failure when a fetch is actually
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt initiated (CVE-2014-3214). [RT #35899]
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt3836. [bug] Address C++ keyword usage in header file.
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews3835. [bug] Geoip ACL elements didn't work correctly when
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews referenced via named or nested ACLs. [RT #35879]
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews3834. [bug] The re-signing heaps were not being updated soon enough
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews leading to multiple re-generations of the same RRSIG
ca8576a564a0ff6aa200936f0b5392f62b2ffe02Mark Andrews when a zone transfer was in progress. [RT #35273]
ca8576a564a0ff6aa200936f0b5392f62b2ffe02Mark Andrews3833. [bug] Cross compiling was broken due to calling genrandom at
520cea04a257e6009d855ddeb20f8d3a46cee22cMark Andrews build time. [RT #35869]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt3832. [func] "named -L <filename>" causes named to send log
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt messages to the specified file by default instead
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt of to the system log. (Thanks to Tony Finch.)
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt3831. [cleanup] Reduce logging noise when EDNS state changes occur.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt3830. [func] When query logging is enabled, log query errors at
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt the same level ('info') as the queries themselves.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt3829. [func] "dig +ttlunits" causes dig to print TTL values
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt with time-unit suffixes: w, d, h, m, s for
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt weeks, days, hours, minutes, and seconds. (Thanks
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt to Tony Finch.) [RT #35823]
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt3828. [func] "dnssec-signzone -N date" updates serial number
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt to the current date in YYYYMMDDNN format.
aeff7de836558fa8002ab5db35292d2bb6450da8Evan Hunt3827. [placeholder]
2792e226c786e739b2924efdf8246af389384a2fMark Andrews3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
ab280fdfc5e4251758aa9929457fba6dce3f1847Mark Andrews3825. [bug] Address sign extension bug in isc_regex_validate.
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews3824. [bug] A collision between two flag values could cause
08f860f800d32007a0c9bf456f6c35fbb2ecbc81Evan Hunt problems with cache cleaning when SIT was enabled.
63b17e175fc75adebf16563b08c89d54e6dfa253Evan Hunt3823. [func] Log the rpz cname target when rewriting. [RT #35667]
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt3822. [bug] Log the correct type of static-stub zones when
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt removing them. [RT #35842]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews update and transaction support. Thanks to Marty
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews Lee for the contribution. [RT #35656]
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt3820. [func] The DLZ API doesn't pass the database version to
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt the lookup() function; this can cause DLZ modules
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt that allow dynamic updates to mishandle prerequisite
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt checks. This has been corrected by adding a
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt 'dbversion' field to the dns_clientinfo_t
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt structure. [RT #35656]
5b7525f51fbcb074bf031d92f5cd95267c628137Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews displayed without padding. This is not a issue for
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews currently defined algorithms but may be for future
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews hash algorithms. [RT #27925]
6d5852f318a7d09cff05a347456d1cd12407ceb1Mark Andrews3818. [bug] Stop lying to the optimizer that 'void *arg' is a
98e8948bd715fbefa8870e6f344183bc67e22340Mark Andrews constant in isc_event_allocate.
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews3817. [func] The "delve" command is now spelled "delv" to avoid
d7d05319a67229b250de910b8876bea0f6e9a0b1Tatuya JINMEI 神明達哉 a namespace collision with the Xapian project.
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt Tony Finch.) [RT #35822]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt3814. [func] The "masterfile-style" zone option controls the
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt formatting of dumped zone files. Options are
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews "relative" (multiline format) and "full" (one
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews record per line). The default is "relative".
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews "debug" options when set in /etc/resolv.conf.
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews (Thanks to Adam Tkac at RedHat.) [RT #21885]
d8f118f4a06cae6ec6b4ae133882f0eee1478599Mark Andrews3812. [func] Dig now supports sending arbitrary EDNS options from
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews the command line (+ednsopt=code[:value]). [RT #35584]
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews3811. [func] "serial-update-method date;" sets serial number
877769641186144911152622b4345b27ca393df8Mark Andrews on dynamic update to today's date in YYYYMMDDNN
f7b683b054c4deb05f09d2f39da6ceb4ac838873Mark Andrews format. (Thanks to Bradley Forschinger.) [RT #24903]
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉3810. [bug] Work around broken nameservers that fail to ignore
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉 unknown EDNS options. [RT #35766]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3809. [doc] Fix SIT and NSID documentation.
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3808. [doc] Clean up "prefetch" documentation. [RT #35751]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3807. [bug] Fix sign extension bug in dns_name_fromtext when
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt lowercase is set. [RT #35743]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3806. [test] Improved system test portability. [RT #35625]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3805. [contrib] Added contrib/perftcpdns, a performance testing tool
f4ea363e3acc321b24ffe95a64a583e8041d6fd5Mark Andrews for DNS over TCP. [RT #35710]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt --- 9.10.0rc1 released ---
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3804. [bug] Corrected a race condition in dispatch.c in which
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt portentry could be reset leading to an assertion
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt failure in socket_search(). (Change #3708
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt addressed the same issue but was incomplete.)
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3803. [bug] "named-checkconf -z" incorrectly rejected zones
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt using alternate data sources for not having a "file"
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt option. [RT #35685]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3802. [bug] Various header files were not being installed.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3800. [bug] A pending event on the route socket could cause an
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews assertion failure when shutting down named. [RT #35674]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3799. [bug] Improve named's command line error reporting.
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews time. [RT #35659]
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews3797. [port] netbsd: geoip support probing was broken. [RT #35642]
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews3795. [bug] Make named-checkconf detect raw masterfiles for
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews hint zones and reject them. [RT #35268]
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉3793. [bug] zone.c:save_nsec3param() could assert when out of
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 memory. [RT #35621]
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews3792. [func] Provide links to the alternate statistics views when
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews displaying in a browser. [RT #35605]
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews3791. [placeholder]
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews3790. [bug] Handle broken nameservers that send BADVERS in
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed response to unknown EDNS options. Maintain
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed statistics on BADVERS responses.
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed3789. [bug] Null pointer dereference on rbt creation failure.
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed3788. [bug] dns_peer_getrequestsit was returning request_nsid by
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews --- 9.10.0b2 released ---
ddac1a2b9822b00aa936ef24c6d971f4a1407532Francis Dupont3787. [bug] The code that checks whether "auto-dnssec" is
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews allowed was ignoring "allow-update" ACLs set at
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews the options or view level. [RT #29536]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉3786. [func] Provide more detailed error codes when using
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 native PKCS#11. "pkcs11-tokens" now fails robustly
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 rather than asserting when run against an HSM with
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 an incomplete PKCS#11 API implementation. [RT #35479]
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont3785. [bug] Debugging code dumphex didn't accept arbitrarily long
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed input (only compiled with -DDEBUG). [RT #35544]
4144efb39046963989ad002cf88a0c195401100aJeremy Reed3784. [bug] Using "rrset-order fixed" when it had not been
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont enabled at compile time caused inconsistent
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont results. It now works as documented, defaulting
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews to cyclic mode. [RT #28104]
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews3783. [func] "tsig-keygen" is now available as an alternate
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews command name for "ddns-confgen". It generates
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews a TSIG key in named.conf format without comments.
d2c115f9134acfefaaeb6b84036672bef93e7df8Mark Andrews3782. [func] Specifying "auto" as the salt when using
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews "rndc signing -nsec3param" causes named to
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews generate a 64-bit salt at random. [RT #35322]
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉3781. [tuning] Use adaptive mutex locks when available; this
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 has been found to improve performance under load
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 on many systems. "configure --with-locktype=standard"
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 restores conventional mutex locks. [RT #32576]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed3780. [bug] $GENERATE handled negative numbers incorrectly.
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed3779. [cleanup] Clarify the error message when using an option
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉 that was not enabled at compile time. [RT #35504]
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉3778. [bug] Log a warning when the wrong address family is
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 used in "listen-on" or "listen-on-v6". [RT #17848]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉3777. [bug] EDNS EXPIRE code could dump core when processing
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 DLZ queries. [RT #35493]
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉3776. [func] "rndc -q" suppresses output from successful
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 rndc commands. Errors are printed on stderr.
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews code on API version mismatch, leading to a segfault.
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews3774. [func] When using "request-nsid", log the NSID value in
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews printable form as well as hex. [RT #20864]
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉3773. [func] "host", "nslookup" and "nsupdate" now have
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 options to print the version number and exit.
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews (Based in part on a contribution from Tim Tessier.)
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt3771. [cleanup] Adjusted log level for "using built-in key"
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉 messages. [RT #24383]
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews needed to fall back to TCP due to a truncated
d0e7c8712f25fff65f10d70dba519e9cacc4cc8fMark Andrews response. [RT #24660]
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt3769. [doc] Improved documentation of "rndc signing -list".
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt algorithm. [RT #34000]
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews3767. [func] Log explicitly when using rndc.key to configure
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews command channel. [RT #35316]
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews3766. [cleanup] Fixed problems with building outside the source
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt tree when using native PKCS#11. [RT #35459]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3765. [bug] Fixed a bug in "rndc secroots" that could crash
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt named when dumping an empty keynode. [RT #35469]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3764. [bug] The dnssec-keygen/settime -S and -i options
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt (to set up a successor key and set the prepublication
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt interval) were missing from dnssec-keyfromlabel.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3763. [bug] delve: Cache DNSSEC records to avoid the need to
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt re-fetch them when restarting validation. [RT #35476]
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews3762. [bug] Address build problems with --pkcs11-native +
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews --with-openssl with ECDSA support. [RT #35467]
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt3760. [bug] Improve SIT with native PKCS#11 and on Windows.
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt3759. [port] Enable delve on Windows. [RT #35441]
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews3757. [port] Enable Python tools (dnssec-coverage,
98b2be76fc57a337534cda07a5ce20a41b8793adMark Andrews dnssec-checkds) to run on Windows. [RT #34355]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews3756. [bug] GSSAPI Kerberos realm checking was broken in
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews check_config leading to spurious messages being
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt logged. [RT #35443]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt --- 9.10.0b1 released ---
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt3755. [func] Add stats counters for known EDNS options + others.
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews3754. [cleanup] win32: Installer now places files in the
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews Program Files area rather than system services.
499fa72075c050391b4d051f593d295670d27983Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews3752. [bug] Address potential REQUIRE failure if
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
3464fafb9ff13e3212c568b645194bf138504fe6Jeremy Reed3751. [tuning] The default setting for the -U option (setting
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews the number of UDP listeners per interface) has
6db1357c34f26079dc2516b02d712df228e3db99Jeremy Reed been adjusted to improve performance. [RT #35417]
0f39e477c54929f3da65b083b4e3c8500ac8152eMark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews the remaining time until expiry for slave zones
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews is supported.
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews EXPIRE uses an experimental option code (65002),
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews which is subject to change. [RT #35416]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews containing the specified address/prefix when
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews querying. (Thanks to Wilmer van der Gaast.)
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews3747. [bug] A race condition could lead to a core dump when
598da901aba066208ab57ef5a44661f00f6c7dc6Mark Andrews destroying a resolver fetch object. [RT #35385]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3746. [func] New "max-zone-ttl" option enforces maximum
56907aff69cabc391e672d360c88cb1856a839efMark Andrews TTLs for zones. If loading a zone containing a
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews higher TTL, the load fails. DDNS updates with
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews higher TTLs are accepted but the TTL is truncated.
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews (Note: Currently supported for master zones only;
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews inline-signing slaves will be added.) [RT #38405]
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews3745. [func] "configure --with-tuning=large" adjusts various
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews compiled-in constants and default settings to
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews values suited to large servers with abundant
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews memory. [RT #29538]
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews (similar to DNS Cookies by Donald Eastlake 3rd),
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews which are designed to help clients detect off-path
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews spoofed responses and for servers to identify
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews legitimate clients.
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews SIT uses an experimental EDNS option code (65001),
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews which will be changed to an IANA-assigned value
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews if the experiment is deemed a success.
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 SIT can be enabled via "configure --enable-sit" (or
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 --enable-developer). It is enabled by default in
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 Servers can be configured to send smaller responses
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont to clients that have not identified themselves via
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont SIT. RRL processing has also been updated;
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont legitimate clients are not subject to rate
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont limiting. [RT #35389]
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed3743. [bug] delegation-only flag wasn't working in forward zone
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed declarations despite being documented. This is
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉 needed to support turning off forwarding and turning
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉 on delegation only at the same name. [RT #35392]
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews3742. [port] linux: libcap support: declare curval at start of
46af69f1239553d4a1c315f6eee51379828942f9Mark Andrews block. [RT #35387]
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews3741. [func] "delve" (domain entity lookup and validation engine):
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews A new tool with dig-like semantics for performing DNS
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews lookups, with internal DNSSEC validation, using the
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews same resolver and validator logic as named. This
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews allows easy validation of DNSSEC data in environments
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews with untrustworthy resolvers, and assists with
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews troubleshooting of DNSSEC problems. [RT #32406]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉3740. [contrib] Minor fixes to configure --with-dlz-bdb,
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉3739. [func] Added per-zone stats counters to track TCP and
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 UDP queries. [RT #35375]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews with inline zones. [RT #35353]
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews3736. [bug] nsupdate: When specifying a server by name,
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews fall back to alternate addresses if the first
10e8f96abe072fcf4e0c938548f0970cd26f624cMark Andrews address for that name is not reachable. [RT #25784]
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews3735. [cleanup] Merged the libiscpk11 library into libisc
5567f54834089be35d0df6afe2ccfaa039ab2233Jeremy Reed to simplify dependencies. [RT #35205]
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews3734. [bug] Improve building with libtool. [RT #35314]
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews3733. [func] Improve interface scanning support. Interface
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews information will be automatically updated if the
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews Use "automatic-interface-scan no;" to disable.
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews driver to dump core on 64-bit systems. [RT #35324]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3731. [func] Added a "no-case-compress" ACL, which causes
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt named to use case-insensitive compression
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉 (disabling change #3645) for specified
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉 clients. (This is useful when dealing
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 with broken client implementations that
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 use case-sensitive name comparisons,
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉 rejecting responses that fail to match the
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉 capitalization of the query that was sent.)
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉3730. [cleanup] Added "never" as a synonym for "none" when
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 configuring key event dates in the dnssec tools.
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont3729. [bug] dnssec-keygen could set the publication date
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont incorrectly when only the activation date was
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont specified on the command line. [RT #35278]
fa7ef31685393f7c7ba1cec485d8e395bfa28867Francis Dupont3728. [doc] Expanded native-PKCS#11 documentation,
52cee51063613b9be335d3078f13863fd0cad2cfMark Andrews specifically pkcs11: URI labels. [RT #35287]
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews3727. [func] The isc_bitstring API is no longer used and
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 has been removed from libisc. [RT #35284]
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉3726. [cleanup] Clarified the error message when attempting
09d7358c48bb032566e5bb70703c2c3ea35a0cb2Mark Andrews to configure more than 32 response-policy zones.
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉3725. [contrib] Updated zkt and nslint to newest versions,
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 cleaned up and rearranged the contrib
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews directory, and added a README.
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews --- 9.10.0a2 released ---
858cc1200ebeee2d759e8be2c6b715676f992bb2Mark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 host from exiting properly after completing
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 a UDP query. [RT #35288]
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉3723. [cleanup] Imported keys are now handled the same way
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉 regardless of DNSSEC algorithm. [RT #35215]
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews3722. [bug] Using geoip ACLs in a blackhole statement
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews could cause a segfault. [RT #35272]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉3721. [doc] Improved documentation of the EDNS processing
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 enhancements introduced in change #3593. [RT #35275]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉3720. [bug] Address compiler warnings. [RT #35261]
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews probing to see if it is possible to set dscp values
b06e03490604f5d9b590dad143e65d533918481bMark Andrews on a per packet basis. [RT #35252]
8684cd3a6f1437a3c1ff6ca852e1db6d40ce6303Mark Andrews3716. [bug] The dns_request code was setting dcsp values when not
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews requested. [RT #35252]
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews3715. [bug] The region and city databases could fail to
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 initialize when using some versions of libGeoIP,
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 causing assertion failures when named was
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews configured to use them. [RT #35427]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews3714. [test] System tests that need to test for cryptography
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews support before running can now use a common
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews "testcrypto.sh" script to do so. [RT #35213]
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews in zone objects that are configured not to send
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews notify requests. [RT #35195]
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews3712. [placeholder]
9935447b51456f598b45246d0114b8006049244dMark Andrews3711. [placeholder]
9935447b51456f598b45246d0114b8006049244dMark Andrews3710. [bug] Address double dns_zone_detach when switching to
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews using automatic empty zones from regular zones.
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews on all platforms to avoid portability issues.
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont3708. [bug] Address a portentry locking issue in dispatch.c.
9019569316e39087410336bb76c02bf185974fe3Mark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
9019569316e39087410336bb76c02bf185974fe3Mark Andrews on a missing resolv.conf file and initializes the
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews structure as if it had been configured with:
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews nameserver ::1
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 nameserver 127.0.0.1
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 Note: Callers will need to be updated to treat
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 ISC_R_FILENOTFOUND as a qualified success or else
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 they will leak memory. The following code fragment
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews will work with both old and new versions without
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews changing the behaviour of the existing code.
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews resconf = NULL;
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews if (result != ISC_SUCCESS) {
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews if (resconf != NULL)
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews irs_resconf_destroy(&resconf);
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews3706. [contrib] queryperf: Fixed a possible integer overflow when
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews printing results. [RT #35182]
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews3705. [func] "configure --enable-native-pkcs11" enables BIND
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews to use the PKCS#11 API for all cryptographic
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews functions, so that it can drive a hardware service
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews module directly without the need to use a modified
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews OpenSSL as intermediary (so long as the HSM's vendor
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews provides a complete-enough implementation of the
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 PKCS#11 interface). This has been tested successfully
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 with the Thales nShield HSM and with SoftHSMv2 from
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 the OpenDNSSEC project. [RT #29031]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews3703. [func] To improve recursive resolver performance, cache
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews records which are still being requested by clients
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews can now be automatically refreshed from the
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews authoritative server before they expire, reducing
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews or eliminating the time window in which no answer
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews is available in the cache. See the "prefetch" option
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews for more details. [RT #35041]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews of time to check for coverage; events further into
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews the future are ignored. 'dnssec-coverage -z'
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews checks only ZSK events, and 'dnssec-coverage -k'
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3701. [func] named-checkconf can now obscure shared secrets
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews when printing by specifying '-x'. [RT #34465]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont3699. [bug] Improvements to statistics channel XSL stylesheet:
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont the stylesheet can now be cached by the browser;
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont section headers are omitted from the stats display
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont when there is no data in those sections to be
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews displayed; counters are now right-justified for
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews easier readability. [RT #35117]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews is enabled. [RT #35133]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3696. [bug] dig failed to handle AXFR style IXFR responses which
e597f9f376d79c8962f2373d4eb98a441e6c70caMark Andrews span multiple messages. [RT #35137]
d1ec77294eb543bbca128d8683bdf9680cbedb61Mark Andrews3695. [bug] Address a possible race in dispatch.c. [RT #35107]
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews3694. [bug] Warn when a key-directory is configured for a zone,
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews but does not exist or is not a directory. [RT #35108]
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews3693. [security] memcpy was incorrectly called with overlapping
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed ranges resulting in malformed names being generated
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed on some platforms. This could cause INSIST failures
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed when serving NSEC3 signed zones (CVE-2014-0591).
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt was no data at the node. [RT #35080]
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt3691. [contrib] Address null pointer dereference in LDAP and
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews MySQL DLZ modules.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3690. [bug] Iterative responses could be missed when the source
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews port for an upstream query was the same as the
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews listener port (53). [RT #34925]
ee02a035c9dc50cac31424512e110ee16a45a693Mark Andrews3689. [bug] Fixed a bug causing an insecure delegation from one
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews static-stub zone to another to fail with a broken
275b170cc47c897d25204fe23169dac810283f79Mark Andrews trust chain. [RT #35081]
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews3688. [bug] loadnode could return a freed node on out of memory.
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 that are still published but no longer active.
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉3685. [bug] "rndc refresh" didn't work correctly with slave
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉 zones using inline-signing. [RT #35105]
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed3684. [bug] The list of included files would grow on reload.
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews3683. [cleanup] Add a more detailed "not found" message to rndc
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews commands which specify a zone name. [RT #35059]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews3682. [bug] Correct the behavior of rndc retransfer to allow
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews inline-signing slave zones to retain NSEC3 parameters
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews instead of reverting to NSEC. [RT #34745]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews3681. [port] Update the Windows build system to support feature
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews selection and WIN64 builds. This is a work in
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews progress. [RT #34160]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed3679. [bug] dig could fail to clean up TCP sockets still
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed waiting on connect(). [RT #35074]
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews times. [RT #35073]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews hint and redirect as well as master. [RT #35046]
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉3675. [misc] Provide a place for third parties to add version
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉 information for their extensions in the version
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉 file by setting the EXTENSIONS variable.
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 --- 9.10.0a1 released ---
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt3673. [func] New "in-view" zone option allows direct sharing
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt of zones between views. [RT #32968]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews3672. [func] Local address can now be specified when using
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews dns_client API. [RT #34811]
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews non-imported private key.
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews3670. [bug] Address read after free in server side of
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews lwres_getrrsetbyname. [RT #29075]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed3667. [test] dig: add support to keep the TCP socket open between
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews successive queries (+[no]keepopen). [RT #34918]
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews of individual resource records. This tool is intended
275b170cc47c897d25204fe23169dac810283f79Mark Andrews to be called by provisioning systems so that the front
11dbf2fc38eea8c5d3fe7123718bf197a8bb2e6bMark Andrews end does not need to be upgraded to support new DNS
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 record types. [RT #34778]
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉3665. [bug] Failure to release lock on error in receive_secure_db.
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews locking and other bugs. [RT #34855]
ce688d65947a05561509aef48c8c240130d443eaMark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
c6c09f77f85860b6e084b0daad066ded08729b3eMark Andrews dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff3661. [bug] Address lock order reversal deadlock with inline zones.
896f88361ec8a15a20688eb533a65977ee698974Mark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt3659. [port] solaris: don't add explicit dependencies/rules for
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt python programs as make won't use the implicit rules.
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt3658. [port] linux: Address platform specific compilation issue
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews when libcap-devel is installed. [RT #34838]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt3657. [port] Some readline clones don't accept NULL pointers when
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews calling add_history. [RT #34842]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt3656. [security] Treat an all zero netmask as invalid when generating
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt the localnets acl. (The prior behavior could
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt allow unexpected matches when using some versions
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt3655. [cleanup] Simplify TCP message processing when requesting a
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt zone transfer. [RT #34825]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3654. [bug] Address race condition with manual notify requests.
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews3653. [func] Create delegations for all "children" of empty zones
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews except "forward first". [RT #34826]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
36440d1ec6cf1ff0cbb0b5b2fb39423e4e0bd450Evan Hunt3650. [tuning] Use separate rate limiting queues for refresh and
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews notify requests. [RT #30589]
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews the associated view. [RT #34765]
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews3647. [bug] Address a race condition when shutting down a zone.
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews causing garbage in log messages. [RT #34738]
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews3645. [protocol] Use case sensitive compression when responding to
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews queries. [RT #34737]
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉3643. [doc] Clarify RRL "slip" documentation.
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews3642. [func] Allow externally generated DNSKEY to be imported
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews into the DNSKEY management framework. A new tool
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews dnssec-importkey is used to do this. [RT #34698]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3641. [bug] Handle changes to sig-validity-interval settings
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews better. [RT #34625]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt3640. [bug] ndots was not being checked when searching. Only
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt continue searching on NXDOMAIN responses. Add the
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt ability to specify ndots to nslookup. [RT #34711]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews in a key zone. [RT #34238]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 encountered. [RT #34668]
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉3637. [bug] 'allow-query-on' was checking the source address
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 rather than the destination address. [RT #34590]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3636. [bug] Automatic empty zones now behave better with
275b170cc47c897d25204fe23169dac810283f79Mark Andrews forward only "zones" beneath them. [RT #34583]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3635. [bug] Signatures were not being removed from a zone with
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews only KSK keys for a algorithm. [RT #34439]
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews3634. [func] Report build-id in rndc status. Report build-id
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews when building from a git repository. [RT #20422]
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 to support new EDNS options. [RT #34414]
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉3632. [bug] Signature from newly inactive keys were not being
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 removed. [RT #32178]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉3631. [bug] Remove spurious warning about missing signatures when
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 qtype is SIG. [RT #34600]
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉3629. [func] Allow the printing of cryptographic fields in DNSSEC
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 records by dig to be suppressed (dig +nocrypto).
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉3628. [func] Report DNSKEY key id's when dumping the cache.
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3626. [func] dig: NSID output now easier to read. [RT #21160]
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉3625. [bug] Don't send notify messages to machines outside of the
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉3624. [bug] Look for 'json_object_new_int64' when looking for a
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 the json library. [RT #34449]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉3623. [placeholder]
04115a59c176759177545c72376e844e10dc557cMark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
04115a59c176759177545c72376e844e10dc557cMark Andrews cache statistics. [RT #34339]
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews can lead to a remotely triggerable REQUIRE failure
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 (CVE-2013-4854). [RT #34238]
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉3620. [func] Added "rpz-client-ip" policy triggers, enabling
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 RPZ responses to be configured on the basis of
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews the client IP address; this can be used, for
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews example, to blacklist misbehaving recursive
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt or stub resolvers. [RT #33605]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt3618. [func] "rndc reload" now checks modification times of
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews include files as well as master files to determine
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews whether to skip reloading a zone. [RT #33936]
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews3617. [bug] Named was failing to answer queries during
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont "rndc reload" [RT #34098]
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont3616. [bug] Change #3613 was incomplete. [RT #34177]
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont3615. [cleanup] "configure" now finishes by printing a summary
09477e188f874c8c43a90f050733b114385992dcTatuya JINMEI 神明達哉 of optional BIND features and whether they are
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 active or inactive. ("configure --enable-full-report"
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 increases the verbosity of the summary.) [RT #31777]
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉3614. [port] Check for <linux/types.h>. [RT #34162]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews3613. [bug] named could crash when deleting inline-signing
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews zones with "rndc delzone". [RT #34066]
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews3611. [bug] Improved resistance to a theoretical authentication
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews attack based on differential timing. [RT #33939]
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews installer. [RT #34116]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont3609. [bug] Corrected a possible deadlock in applications using
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont the export version of the isc_app API. [RT #33967]
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt3608. [port] win32: added todos.pl script to ensure all text files
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont the win32 build depends on are converted to DOS
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont newline format. [RT #22067]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont message. [RT #34045]
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt3606. [func] "rndc flushtree" now flushes matching
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉 records in the address database and bad cache
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉 as well as the DNS cache. (Previously only the
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt DNS cache was flushed.) [RT #33970]
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉3605. [port] win32: Addressed several compatibility issues
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt with newer versions of Visual Studio. [RT #33916]
efe34b8ddbecf45d1671efbcba30bdb75410c98aMark Andrews3604. [bug] Fixed a compile-time error when building with
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 JSON but not XML. [RT #33959]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3603. [bug] Install <isc/stat.h>. [RT #33956]
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews integrate with named and serve DNS data.
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉 (Contributed by John Eaglesham of Yahoo.)
158f256a14b629c4157fe0da779a4ff0e3402e48Tatuya JINMEI 神明達哉3601. [bug] Added to PKCS#11 openssl patches a value len
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 attribute in DH derive key. [RT #33928]
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉3600. [cleanup] dig: Fixed a typo in the warning output when receiving
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 an oversized response. [RT #33910]
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉3599. [tuning] Check for pointer equivalence in name comparisons.
05e2cc844530031e4dd4e25b3826bece7a183ee1Tatuya JINMEI 神明達哉3598. [cleanup] Improved portability of map file code. [RT #33820]
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews when loading zones in map format. [RT #33381]
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews3596. [port] Updated win32 build documentation, added
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews dnssec-verify. [RT #22067]
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews3593. [func] Update EDNS processing to better track remote server
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉 capabilities. [RT #30655]
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉3592. [doc] Moved documentation of rndc command options to the
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 rndc man page. [RT #33506]
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉3591. [func] Use CRC-64 to detect map file corruption at load
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews time. [RT #33746]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3590. [bug] When using RRL on recursive servers, defer
58253bddc4c33507ba28654b9c4a36ca1053730cMark Andrews rate-limiting until after recursion is complete;
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 also, use correct rcode for slipped NXDOMAIN
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews responses. [RT #33604]
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt3589. [func] Report serial numbers in when starting zone transfers.
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt Report accepted NOTIFY requests including serial.
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt3588. [bug] dig: addressed a memory leak in the sigchase code
d230b29aba3ce1d0362194801c34321ed22f5aa5Evan Hunt that could cause a shutdown crash. [RT #33733]
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt3587. [func] 'named -g' now checks the logging configuration but
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews does not use it. [RT #33473]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
c72279e756e6578dc8f09ceac5158d80a8a61ce5Evan Hunt3585. [func] "rndc delzone -clean" option removes zone files
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews when deleting a zone. [RT #33570]
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews3584. [security] Caching data from an incompletely signed zone could
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews trigger an assertion failure in resolver.c
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews (CVE-2013-3919). [RT #33690]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
69ec1b7eb3be37f06b53f572f6c33622e95a7935Evan Hunt3582. [bug] Silence false positive warning regarding missing file
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews directive for inline slave zones. [RT #33662]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
28ad0be64ee756013c0f6a474fc447ee613ee0d1Evan Hunt3580. [bug] Addressed a possible race in acache.c [RT #33602]
229442301442890aee044a0df54d3787acd68e65Mark Andrews3579. [maint] Updates to PKCS#11 openssl patches, supporting
229442301442890aee044a0df54d3787acd68e65Mark Andrews versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
2284b84d74cdfd62ecb962feb850de981bbc2196Evan Hunt3576. [bug] Address a shutdown race when validating. [RT #33573]
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉3575. [func] Changed the logging category for RRL events from
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉 'queries' to 'query-errors'. [RT #33540]
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff3574. [doc] The 'hostname' keyword was missing from server-id
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff description in the named.conf man page. [RT #33476]
375e2c913a21cb852310418785f359a6b21b851dMark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews zone names containing punctuation marks and other
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews nonstandard characters. [RT #33419]
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews3572. [func] Threads are now enabled by default on most
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews operating systems. [RT #25483]
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉3571. [bug] Address race condition in dns_client_startresolve().
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3570. [bug] Check internal pointers are valid when loading map
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews files. [RT #33403]
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews module, and added multithread support. [RT #33394]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3568. [cleanup] Add a product description line to the version file,
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews to be reported by named -v/-V. [RT #33366]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews3565. [placeholder]
420ed91d3ed516bc9d5edf2e942ae792d17d11b4Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews3562. [func] Update map file header format to include a SHA-1 hash
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews of the database content, so that corrupted map files
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont can be rejected at load time. [RT #32459]
8d460bed78e2684fbb0cb150bbf800dcc4d29c54Mark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews or NOTIMP. Adjust usage message. [RT #33363]
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont when set via configure. [RT #33345]
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont3559. [func] Check that both forms of Sender Policy Framework
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont records exist or do not exist. [RT #33355]
cffe96e26744abcf33494837b234219046a631d8Mark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews3555. [bug] Address theoretical race conditions in acache.c
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews (change #3553 was incomplete). [RT #33252]
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉3554. [bug] RRL failed to correctly rate-limit upward
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 referrals and failed to count dropped error
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 responses in the statistics. [RT #33225]
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews3550. [func] Unified the internal and export versions of the
0283e511317cae3785a9d48e236289a234a25368Mark Andrews BIND libraries, allowing external clients to use
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews the same libraries as BIND. [RT #33131]
0283e511317cae3785a9d48e236289a234a25368Mark Andrews3549. [doc] Documentation for "request-nsid" was missing.
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews3548. [bug] The NSID request code in resolver.c was broken
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews resulting in invalid EDNS options being sent.
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews3547. [bug] Some malformed unknown rdata records were not properly
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews detected and rejected. [RT #33129]
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews3546. [func] Add EUI48 and EUI64 types. [RT #33082]
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews3544. [contrib] check5011.pl: Script to report the status of
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews managed keys as recorded in managed-keys.bind.
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews Contributed by Tony Finch <dot@dotat.at>
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews3543. [bug] Update socket structure before attaching to socket
c09c2bf800ba0f5e6efe6b47ba72f43e4a61ca7dMark Andrews manager after accept. [RT #33084]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews3542. [placeholder]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews3541. [bug] Parts of libdns were not properly initialized when
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews built in libexport mode. [RT #33028]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews3539. [port] win32: timestamp format didn't match other platforms.
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews3538. [test] Running "make test" now requires loopback interfaces
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews to be set up. [RT #32452]
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
7adca0ea2fcd44641861523b718d6980c0666103Mark Andrews to peers before being dumped to disk rather than
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews after. [RT #27242]
9dcc44d7b309b61e89083807d47af471ec6bae1fMark Andrews3536. [func] Add support for setting Differentiated Services Code
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews Point (DSCP) values in named. Most configuration
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews options which take a "port" option (e.g.,
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews listen-on, forwarders, also-notify, masters,
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews notify-source, etc) can now also take a "dscp"
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews option specifying a code point for use with
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews outgoing traffic, if supported by the underlying
1fa2ce7eaef0c17d554495220565b681639b2ce5Mark Andrews OS. [RT #27596]
7539c231d47677250008737b0691f9518111f3f5Mark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉3534. [bug] Extra text after an embedded NULL was ignored when
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 parsing zone files. [RT #32699]
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3531. [bug] win32: A uninitialized value could be returned on out
fc53f564caa9d40f4b73a2808260b1dc07e86fddEvan Hunt of memory. [RT #32960]
9a727082a0f4959d4ad5ee91c171c2fad92ac996Mark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews3529. [func] Named now listens on both IPv4 and IPv6 interfaces
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews by default. Named previously only listened on IPv4
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews interfaces by default unless named was running in
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews IPv6 only mode. [RT #32945]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3528. [func] New "dnssec-coverage" command scans the timing
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews metadata for a set of DNSSEC keys and reports if a
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt lapse in signing coverage has been scheduled
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews inadvertently. (Note: This tool depends on python;
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews it will not be built or installed on systems that
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews do not have a python interpreter.) [RT #28098]
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews3527. [compat] Add a URI to allow applications to explicitly
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews request a particular XML schema from the statistics
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews channel, returning 404 if not supported. [RT #32481]
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews build. [RT #32803]
262c39b2366bf79062f7f86b218947523dd1cbacEvan Hunt3525. [func] Support for additional signing algorithms in rndc:
1ff207c2fa4182156932f3f5c982170385a19225Mark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
b1e32169ac5cf21fca540fa122a546db71090491Mark Andrews The -A option to rndc-confgen can be used to
827572e191fad1326c624593bf35d8eb1928f607Mark Andrews select the algorithm for the generated key.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews (The default is still hmac-md5; this may
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews change in a future release.) [RT #20363]
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews3524. [func] Added an alternate statistics channel in JSON format,
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews when the server is built with the json-c library:
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews http://[address]:[port]/json. [RT #32630]
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews dynamically-loadable modules, and added the
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews "wildcard" module based on a contribution from
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews they ought to. [RT #32685]
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews where it should have been. [RT #32794]
efb3fa669f00ccfd9aada997b426616b6b0ce044Mark Andrews3519. [func] Full replay protection via four-way handshake is
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews now mandatory for rndc clients. Very old versions
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews of rndc will no longer work. [RT #32798]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews so that all dns_rrl_rtype_t enum values fit regardless
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews of whether it is teated as signed or unsigned by
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews the compiler. [RT #32792]
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews3516. [placeholder]
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews3515. [port] '%T' is not portable in strftime(). [RT #32763]
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews3514. [bug] The ranges for valid key sizes in ddns-confgen and
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews rndc-confgen were too constrained. Keys up to 512
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews bits are now allowed for most algorithms, and up
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews to 1024 bits for hmac-sha384 and hmac-sha512.
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews3513. [func] "dig -u" prints times in microseconds rather than
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 milliseconds. [RT #32704]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3512. [func] "rndc validation check" reports the current status
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 of DNSSEC validation. [RT #21397]
20837e74f5e68a8108c25bb341a3ef1c1ca22711Tatuya JINMEI 神明達哉3511. [doc] Improve documentation of redirect zones. [RT #32756]
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews3510. [func] "rndc status" and XML statistics channel now report
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews server start and reconfiguration times. [RT #21048]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews3509. [cleanup] Added a product line to version file to allow for
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews easy naming of different products (BIND
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews vs BIND ESV, for example). [RT #32755]
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews3508. [contrib] queryperf was incorrectly rejecting the -T option.
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews to chart query data before any queries had been
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews received. [RT #32620]
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews the keyword "unlimited" is no longer defined as equal
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews to 4 gigabytes (except on 32-bit platforms); it
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews means literally unlimited. [RT #32358]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
92f60809e854ccf5f115883c6347e370da048848Mark Andrews larger values than 4 gigabytes could not be set
92f60809e854ccf5f115883c6347e370da048848Mark Andrews explicitly, though larger sizes were available
92f60809e854ccf5f115883c6347e370da048848Mark Andrews when setting cache size to 0. This has been
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews corrected; the full range is now available.
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews3504. [func] Add support for ACLs based on geographic location,
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews using MaxMind GeoIP databases. Based on code
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews contributed by Ken Brownfield <kb@slide.com>.
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews3503. [doc] Clarify size_spec syntax. [RT #32449]
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
114c14f8adfc249cf2e5cdcb9007af46fed257e3Mark Andrews instead of "terse". [RT #29165]
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews3501. [func] zone-statistics now takes three options: full,
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews terse, and none. "yes" and "no" are retained as
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews synonyms for full and terse, respectively. [RT #29165]
8c850a29eda020642c84038e449d60f124c6123bMark Andrews3500. [security] Support NAPTR regular expression validation on
8c850a29eda020642c84038e449d60f124c6123bMark Andrews all platforms without using libregex, which
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews can be vulnerable to memory exhaustion attack
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews (CVE-2013-2266). [RT #32688]
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews3498. [bug] zone statistics for zones which matched a potential
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews empty zone could have their zone-statistics setting
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews3497. [func] When deleting a slave/stub zone using 'rndc delzone'
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews report the files that were being used so they can
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews be cleaned up if desired. [RT #27899]
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews3496. [placeholder]
7314547af7aa1dd25d690dd3f034d49e5cc8fa9dMark Andrews3495. [func] Support multiple response-policy zones (up to 32),
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews while improving RPZ performance. "response-policy"
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews syntax now includes a "min-ns-dots" clause, with
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews default 1, to exclude top-level domains from
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews --enable-rpz-nsdname are now the default. [RT #32251]
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff3494. [func] DNS RRL: Blunt the impact of DNS reflection and
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff amplification attacks by rate-limiting substantially-
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews identical responses. [RT #28130]
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews contributed by Mark Goldfinch. [RT #32549]
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews3492. [bug] Fixed a regression in zone loading performance
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews due to lock contention. [RT #30399]
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt3491. [bug] Slave zones using inline-signing must specify a
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt file name. [RT #31946]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3490. [bug] When logging RDATA during update, truncate if it's
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews too long. [RT #32365]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews dns_dlzcreate() failed to properly initialize
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews dlzdb.link. When cloning a rdataset do not copy
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews the link contents. [RT #32651]
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews3487. [bug] Change 3444 was not complete. There was a additional
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews place where the NOQNAME proof needed to be saved.
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews that had been deleted and then recreated. [RT #32506]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr3484. [bug] Some statistics were incorrectly rendered in XML.
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr3483. [placeholder]
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews3482. [func] dig +nssearch now prints name servers that don't
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews have address records (missing AAAA or A, or the name
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews doesn't exist). [RT #29348]
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews3481. [cleanup] Removed use of const const in atf.
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews3480. [bug] Silence logging noise when setting up zone
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews statistics. [RT #32525]
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews3479. [bug] Address potential memory leaks in gssapi support
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews code. [RT #32405]
03745451370778a867e46fdbe315eb958745a391Mark Andrews3478. [port] Fix a build failure in strict C99 environments
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews3477. [func] Expand logging when adding records via DDNS update
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews found" error on inline-signing zones. [RT #29226]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3475. [cleanup] Changed name of 'map' zone file format (previously
dabe7f50bb61d75841b535b91edb8f323f82f826Evan Hunt 'fast'). [RT #32458]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews3474. [bug] nsupdate could assert when the local and remote
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews address families didn't match. [RT #22897]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews3473. [bug] dnssec-signzone/verify could incorrectly report
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews an error condition due to an empty node above an
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt opt-out delegation lacking an NSEC3. [RT #32072]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3472. [bug] The active-connections counter in the socket
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews statistics could underflow. [RT #31747]
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt3471. [bug] The number of UDP dispatches now defaults to
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews the number of CPUs even if -n has been set to
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews a higher value. [RT #30964]
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews3470. [bug] Slave zones could fail to dump when successfully
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews refreshing after an initial failure. [RT #31276]
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews3469. [bug] Handle DLZ lookup failures more gracefully. Improve
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews backward compatibility between versions of DLZ dlopen
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews API. [RT #32275]
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews could trigger an assertion failure when used in
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr conjunction with DNS64 (CVE-2012-5689). [RT #32141]
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr3467. [bug] Added checks in dnssec-keygen and dnssec-settime
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews to check for delete date < inactive date. [RT #31719]
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews in DLZ example driver. [RT #32275]
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3462. [doc] Clarify server selection behavior of dig when using
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews -4 or -6 options. [RT #32181]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews set. [RT #32237]
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
6f1b09965f26ab0d6c38dec4a38f67bb34ebddceMark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews to specify the path to the journal file. [RT #30958]
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews domain named in a request. [RT #29682]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews failed. [RT #31960]
709220567fb820cf7e7625925449dadf86317629Mark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
fe6b6eebd74f7c5c20088f67081ae690228f9744Mark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
31a2f82193a91e24f31454ff18e0b7723c066a74Mark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews strings so that compiler can perform sanity checks;
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews check the snprintf results. [RT #17576]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3445. [bug] Warn about zone files with blank owner names
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews immediately after $ORIGIN directives. [RT #31848]
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews insecure responses. [RT #21409]
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews rejected when generating keys. [RT #31927]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews change. [RT #32216]
d91df50b670d92d0ab784b741e2ee9af7f2dc4a1Mark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews cleaning up due to out of memory error. [RT #32131]
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews3439. [placeholder]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews buffers with constant data. [RT #32064]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews3435. [bug] Cross compilation support in configure was broken.
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
576e48e28aae9f28b8e6daa2aabc839bb5c520e3Mark Andrews point in addition to lookup(). This makes it
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews possible for a database to answer differently
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews whether it's authoritative for a name depending
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews on the address of the client. [RT #31775]
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews ISC_R_NOMORE. [RT #31172]
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews DLZ databases are searched in the order configured,
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews unless set to "search no", in which case a
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews zone can be configured to be retrieved from a
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews particular DLZ database by using a "dlz <name>"
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews option in the zone statement. DLZ databases can
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews support type "master" and "redirect" zones.
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews not accepted. [RT #31927]
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews 'T' between the date and time. [RT #32044]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews returning a valid serial. [RT #32007]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews3427. [bug] dig +trace incorrectly displayed name server
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews addresses instead of names. [RT #31641]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews found. [RT #31968]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews in use after free. [RT #31908]
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
7c200913aa7e55bbe28de456bb593c1e05bf6f79Mark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews range of possible values. Address portability issues.
afd002e89aadf30181155566544480349e70339dMark Andrews3422. [bug] Added a clear error message for when the SOA does not
afd002e89aadf30181155566544480349e70339dMark Andrews match the referral. [RT #31281]
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews adds query type statistics at the zone level, and
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews flattens the XML tree and uses compressed format to
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews optimize parsing. Includes new XSL that permits
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews charting via the Google Charts API on browsers that
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews support javascript in XSL. The old XML schema has been
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews deprecated. [RT #30023]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews3417. [placeholder]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews dispatches per interface. [RT #31743]
bf45f72ed319628eebce60c368177320943d001fMark Andrews3415. [bug] named could die with a REQUIRE failure if a validation
bf45f72ed319628eebce60c368177320943d001fMark Andrews was canceled. [RT #31804]
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews synthesized. [RT #27636]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews3412. [bug] Copy timeval structure from control message data.
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews to UDP. [RT #31690]
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
fc8197c3ce31d81cd5e23703680572fac09a2e8aMark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews from X.509 certificates, for use with DANE
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews (DNS-based Authentication of Named Entities).
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews are now legal in slave zones as long as
4bb0f1046f3f3c26539ff91e28b3c8872519df17Mark Andrews inline-signing is in use. [RT #31078]
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews3407. [placeholder]
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews3406. [bug] mem.c: Fix compilation errors when building with
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews RRSIG and NSEC records from nodes that used to be
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews in-zone but are now below a zone cut. [RT #31556]
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews3402. [test] The IPv6 interface numbers used for system
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews tests were incorrect on some platforms. [RT #25085]
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews in the "srcid" file in the build tree and normally set
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews to the most recent git hash. [RT #31494]
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews clash. [RT #31515]
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews3398. [bug] SOA parameters were not being updated with inline
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews signed zones if the zone was modified while the
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews server was offline. [RT #29272]
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews3396. [bug] OPT records were incorrectly removed from signed,
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews truncated responses. [RT #31439]
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
77397daf05511dc737eeec159badc05f11bfadddMark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews3394. [bug] Adjust 'successfully validated after lower casing
f0a1b8c85792d4e04716f995a2b2a8ca73f8367dMark Andrews signer' log level and category. [RT #31414]
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews3388. [bug] Fixed several Coverity warnings.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews Note: This change includes a fix for a bug that
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews was subsequently determined to be an exploitable
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews security vulnerability, CVE-2012-5688: named could
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews die on specific queries with dns64 enabled.
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews3387. [func] DS digest can be disabled at runtime with
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews disable-ds-digests. [RT #21581]
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews3386. [bug] Address locking violation when generating new NSEC /
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews NSEC3 chains. [RT #31224]
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews3385. [bug] named-checkconf didn't detect missing master lists
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews in also-notify clauses. [RT #30810]
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt3384. [bug] Improved logging of crypto errors. [RT #30963]
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt3383. [security] A certain combination of records in the RBT could
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt cause named to hang while populating the additional
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt section of a response. [RT #31090]
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews if set, regardless of the address family in use.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews3381. [contrib] Update queryperf to support more RR types.
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews3380. [bug] named could die if a nonexistent master list was
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews referenced in a also-notify. [RT #31004]
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews "const (type)* const". [RT #31069]
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews output. [RT #31044]
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews3376. [bug] Lack of EDNS support was being recorded without a
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews successful response. [RT #30811]
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews systems with 64 bit longs. [RT #30232]
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews messages. [RT #30501]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews add NS RRsets to the additional section or not.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews if built with readline support. [RT #29550]
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews were not C++ safe.
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews atomic operations. [RT #25181]
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews3365. [bug] Removed spurious newlines from log messages in
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews3364. [security] Named could die on specially crafted record.
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews in static-stub zones; this had been overlooked.
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews3362. [bug] Setting some option values to 0 in named.conf
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews could trigger an assertion failure on startup.
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews when salt was set to '-' (no salt). [RT #30099]
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews3360. [bug] 'host -w' could die. [RT #18723]
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews3359. [bug] An improperly-formed TSIG secret could cause a
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews memory leak. [RT #30607]
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews3358. [placeholder]
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
57eb7efe13b67455e8c6a08cf080afb3de2ac622Mark Andrews approaching their expiry, so they don't remain
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews in caches after expiry. [RT #26429]
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews3355. [port] Use more portable awk in verify system test.
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews3353. [bug] Use a single task for task exclusive operations.
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews adb cache. [RT #29856]
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
4490e14feb50cd59a62ce9f348ff53b68a0594ebMark Andrews memory debugging flags are set. [RT #30243]
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews3350. [bug] Memory read overrun in isc___mem_reallocate if
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
9baec3ca233efe8ffca6fbafea5c75021adff03cMark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews record matching the covering type exists at a higher
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews trust level. Such data already can't be retrieved from
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews the cache since change 3218 -- this prevents it
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews being inserted into the cache as well. [RT #26809]
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews private key file would cause a change in the
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews permissions of the existing file. [RT #27724]
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews3346. [security] Bad-cache data could be used before it was
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews initialized, causing an assert. [RT #30025]
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews3345. [bug] Addressed race condition when removing the last item
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews or inserting the first item in an ISC_QUEUE.
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews determine which DS records should be published
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews in the parent zone, or which DLV records should be
305227476756aecb11cebbc811dba88a2d147b34Mark Andrews published in a DLV zone, and queries the DNS to
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews ensure that it exists. (Note: This tool depends
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews on python; it will not be built or installed on
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews systems that do not have a python interpreter.)
ed954ce73b1c712b24eab945190028871433f803Mark Andrews3343. [placeholder]
ed954ce73b1c712b24eab945190028871433f803Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews resulting in excessive cpu usage in some cases.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews chains. [RT #23673]
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews3340. [func] Added new 'map' zone file format, which is an image
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews of a zone database that can be loaded directly into
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein memory via mmap(), allowing much faster zone loading.
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein (Note: Because of pointer sizes and other
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews considerations, this file format is platform-dependent;
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews 'map' zone files cannot always be transferred from one
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews server to another.) [RT #25419]
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews and asyncload_zt. [RT #26100]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews in controls. [RT #29694]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews3336. [func] Maintain statistics for RRsets tagged as "stale".
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews3335. [func] nslookup: return a nonzero exit code when unable
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews to get an answer. [RT #29492]
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews3334. [bug] Hold a zone table reference while performing a
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews asynchronous load of a zone. [RT #28326]
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
824cb6567555af556d0963d961798483d252eb5fMark Andrews named to not recover if it loses connectivity.
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews rdataslabs. [RT #29644]
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews3330. [func] Fix missing signatures on NOERROR results despite
6769ce7c7b38ae31887203aa1770692b3be92705Tatuya JINMEI 神明達哉 RPZ rewriting. Also
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews - add optional "recursive-only yes|no" to the
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews response-policy statement
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews - add optional "max-policy-ttl" to the response-policy
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews statement to limit the false data that
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews "recursive-only no" can introduce into
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews resolvers' caches
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews - add a RPZ performance test to bin/tests/system/rpz
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews when queryperf is available.
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews (The old encoding is still accepted.)
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
4cf228853d658a742a826393f341e2486c629f7bMark Andrews generate RRSIG records with the signer-name in
4cf228853d658a742a826393f341e2486c629f7bMark Andrews lower case. We accept them with any case, but if
4cf228853d658a742a826393f341e2486c629f7bMark Andrews they fail to validate, we try again in lower case.
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews connections. (Use "configure --enable-filter-aaaa"
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews to enable this option.) [RT #27308]
92ff69c60001ed270248a6f38bafd2ae12d029beMark Andrews3326. [func] Added task list statistics: task model, worker
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews threads, quantum, tasks running, tasks ready.
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews3325. [func] Report cache statistics: memory use, number of
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews nodes, number of hash buckets, hit and miss counts.
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews3323. [func] Report the number of buckets the resolver is using.
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
9e2789fd70b954df426b80301b62388497692481Mark Andrews3321. [func] Monitor the number of recursive fetches and the
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews number of open sockets, and report these values in
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews the statistics channel. [RT #27054]
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews3320. [func] Added support for monitoring of recursing client
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews count. [RT #27009]
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews hash size. [RT #27057]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews bucket lock when finished with a fetch context.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews3316. [tuning] Improved locking performance when recursing.
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews queries; this can improve performance on busy
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews multiprocessor systems by reducing lock contention.
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews3314. [bug] The masters list could be updated while stub_callback
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews or refresh_callback were using it. [RT #26732]
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews3308. [placeholder]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews3303. [bug] named could die when reloading. [RT #28606]
240e57ab983296e6d52031a594d3345728191b48Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
240e57ab983296e6d52031a594d3345728191b48Mark Andrews keys if the zone name contained character that
240e57ab983296e6d52031a594d3345728191b48Mark Andrews required special mappings. [RT #28600]
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews for non-recursive queries. [RT #28565]
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews but was not compiled in. [RT #28338]
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews3298. [bug] Named could dereference a NULL pointer in
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews3296. [bug] Named could die with a INSIST failure in
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews client.c:exit_check. [RT #28346]
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
f34249bb28093d6589196cd00ca040f503a65e2bMark Andrews portable. [RT # 26542]
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews error. [RT #28265]
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
67b1eee9dfde5ad86b54b2b768ff4d6b1354b651Mark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews by the DLZ dlopen driver. [RT #28056]
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews3286. [bug] Managed key maintenance timer could fail to start
50d3f097d4c2779c8fb2397882d91e0cbca2c260Mark Andrews after 'rndc reconfig'. [RT #26786]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews proveunsecure after calling startfinddlvsep.
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews3284. [bug] Address race conditions with the handling of
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews failed to load. [RT #27863]
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews of the old NS RRset when replacing it.
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews [RT #27792] [RT #27884]
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews despite succeeding over the loopback interface.
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
a34d19803a206febe10866394393ec1c09b28984Mark Andrews with DNS64. [RT #27762]
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews3279. [bug] Hold a internal reference to the zone while performing
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews a asynchronous load. Address potential memory leak
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews if the asynchronous is cancelled. [RT #27750]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3278. [bug] Make sure automatic key maintenance is started
2db8db63992d081c75d664340866e2a21913705dMark Andrews when "auto-dnssec maintain" is turned on during
2db8db63992d081c75d664340866e2a21913705dMark Andrews "rndc reconfig". [RT #26805]
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews safe_open failure. [RT #27696]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
8626c376a038da969de1ee6c158957dfe638daacMark Andrews option had been misspelled as '-clear'. (To avoid
8626c376a038da969de1ee6c158957dfe638daacMark Andrews future confusion, both options now work.) [RT #27173]
222dcab0a6456c5395545e885f21b5542b7d841dTatuya JINMEI 神明達哉3274. [placeholder]
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews3273. [bug] AAAA responses could be returned in the additional
9a6522317c97e5487cea816173f63a0e5b4e428aTatuya JINMEI 神明達哉 section even when filter-aaaa-on-v4 was in use.
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews3272. [func] New "rndc zonestatus" command prints information
5a9efbf6bf951267e0844990f5b2cb69f5d5f01fTatuya JINMEI 神明達哉 about the specified zone. [RT #21671]
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews times before giving up. mksymtbl was using non
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews --- 9.9.0rc2 released ---
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews when inline-signing was in use. [RT #27650]
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews3269. [port] darwin 11 and later now built threaded by default.
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
46390a96dd5f15c9a0b3663bdb7791bdecec3052Mark Andrews out the earliest expiry time. [RT #23311]
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews unexpected error. New ISC_R_UNSET result code.
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews DNSKEY RRset was not being properly computed.
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews inline-signing code. [RT #27557]
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews3264. [bug] Automatic regeneration of signatures in an
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews inline-signing zone could stall when the server
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews was restarted. [RT #27344]
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews inline-signing zone. [RT #27337]
b5205d860b1672c405c57004e6823af873799b42Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews for some query patterns. [RT #27170/27185]
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews --- 9.9.0rc1 released ---
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews message when writing to stdout. [RT #27109]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
11e43ff752bab2983d9328b6624bbcef613a93e1Mark Andrews in a pipe or socket. [RT #27109]
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
cd6d8d61b076eea02826596334a105b918393627Mark Andrews3255. [func] No longer require that a empty zones be explicitly
cd6d8d61b076eea02826596334a105b918393627Mark Andrews enabled or that a empty zone is disabled for
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews too long. [RT #26956]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews3252. [bug] When master zones using inline-signing were
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews updated while the server was offline, the source
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews zone could fall out of sync with the signed
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews copy. They can now resynchronize. [RT #26676]
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews memory dns_sdlz_putrr() can allocate per record to
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews prevent run away memory consumption on ISC_R_NOSPACE.
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews3250. [func] 'configure --enable-developer'; turn on various
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews configure options, normally off by default, that
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews we want developers to build and test with. [RT #27103]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews3249. [bug] Update log message when saving slave zones files for
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews analysis after load failures. [RT #27087]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews3248. [bug] Configure options --enable-fixed-rrset and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews --enable-exportlib were incompatible with each
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews other. [RT #27087]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews3247. [bug] 'raw' format zones failed to preserve load order
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews breaking 'fixed' sort order. [RT #27087]
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr3246. [bug] Named failed to start with a empty also-notify list.
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews were other changes when thawing a zone with
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews ixfr-fromdifferences. [RT #26845]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews3244. [func] Added readline support to nslookup and nsupdate.
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins Also simplified nsupdate syntax to make "update"
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins and "prereq" optional. [RT #24659]
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉 being properly set.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3242. [func] Extended the header of raw-format master files to
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews include the serial number of the zone from which
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews they were generated, if different (as in the case
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews of inline-signing zones). This is to be used in
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews inline-signing zones, to track changes between the
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews unsigned and signed versions of the zone, which may
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews have different serial numbers.
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews (Note: raw zonefiles generated by this version of
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews BIND are no longer compatible with prior versions.
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews To generate a backward-compatible raw zonefile
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews using dnssec-signzone or named-compilezone, specify
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews output format "raw=0" instead of simply "raw".)
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews3241. [bug] Address race conditions in the resolver code.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews timestamp. [RT #26883]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews3238. [bug] keyrdata was not being reinitialized in
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT #26913]
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews EDNS(0) fallback behavior. [RT #26416]
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews the generated diff and optionally writes it to a
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews journal. [RT #26386]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews3232. [bug] Zero zone->curmaster before return in
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
ac124a78a097a0840992c5726cbbdaf1448b6ab3Mark Andrews3231. [bug] named could fail to send a incompressible zone.
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews axfr with a serial of 0. [RT #26796]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews3229. [bug] Fix local variable to struct var assignment
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews found by CLANG warning.
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews loading performance. [RT #26523]
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews and getservbyname() self thread safe. [RT #26232]
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews messages. [RT #26507]
7042126e8a10315255144989f7723f0510558928Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
7042126e8a10315255144989f7723f0510558928Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews3221. [bug] Fixed a potential core dump on shutdown due to
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews referencing fetch context after it's been freed.
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews --- 9.9.0b2 released ---
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews could fail to set the database version correctly,
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews causing an assertion failure. [RT #26180]
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews3218. [security] Cache lookup could return RRSIG data associated with
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews nonexistent records, leading to an assertion
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews failure. [RT #26590]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews listener threads per interface. [RT #26485]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews list prior to adding a reference to it leading a
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews possible assertion failure. [RT #23219]
6e373c502584f9292e964378411d296c8259026bMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
6e373c502584f9292e964378411d296c8259026bMark Andrews option prints in single-line-per-record format.
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews overload could trigger an assertion failure. [RT #26463]
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews nameserver behavior. Enable "dig +adflag" and
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews "dig +edns=0" by default. Enable "+dnssec" when
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews running "dig +trace". [RT #23497]
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews3204. [bug] When a master server that has been marked as
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews unreachable sends a NOTIFY, mark it reachable
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews again. [RT #25960]
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews3203. [bug] Increase log level to 'info' for validation failures
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews3202. [bug] NOEDNS caching on timeout was too aggressive.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews instead of only being used as a toggle. [RT #18351]
3fc7753efdc33559978ce61785961b1305944077Mark Andrews3200. [doc] Some rndc functions were undocumented or were
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews missing from 'rndc -h' output. [RT #25555]
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews3199. [func] When logging client information, include the name
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews being queried. [RT #25944]
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews permissions. [RT #24866]
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews3197. [bug] Don't try to log the filename and line number when
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews the config parser can't open a file. [RT #22263]
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
a957b9ccdccf519018e06213a27e1b70b8dc4640Mark Andrews doesn't exist. [RT #25783]
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews3195. [cleanup] Silence "file not found" warnings when loading
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed managed-keys zone. [RT #26340]
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews documentation. [RT #25203]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews3192. [bug] A query structure could be used after being freed.
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews references correctly when errors occurred, causing
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews a hang on shutdown. [RT #26372]
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews --- 9.9.0b1 released ---
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews - 'rndc signing -list' displays the current
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews state of signing operations
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews - 'rndc signing -clear' clears the signing state
6178552326050b16f5706ee63c931e9388d74318Mark Andrews records for keys that have fully signed the zone
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews - 'rndc signing -nsec3param' sets the NSEC3
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews parameters for the zone
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews3184. [bug] named had excessive cpu usage when a redirect zone was
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews configured. [RT #26013]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews greater than 512 bytes may cause other servers to
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews perform poorly. Now, adb retains edns information
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews and caches noedns servers. [RT #23392/24964]
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews3181. [func] Inline-signing is now supported for master zones.
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews3180. [func] Local copies of slave zones are now saved in raw
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews format by default, to improve startup performance.
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews 'masterfile-format text;' can be used to override
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews the default, if desired. [RT #25867]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews3178. [bug] A race condition introduced by change #3163 could
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews cause an assertion failure on shutdown. [RT #26271]
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews named has finished signing the zone with the
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews corresponding key. [RT #26206]
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews3176. [doc] Corrected example code and added a README to the
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews sample external DLZ module in contrib/dlz/example.
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews NSEC3 signed zone are validated. Stop sending a
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews unnecessary NSEC3 record when generating such
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews responses. [RT #26200]
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews 'rndc addzone'. [RT #25600]
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews --- 9.9.0a3 released ---
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews3170. [func] RPZ update:
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - fix precedence among competing rules
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - improve ARM text including documenting rule precedence
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - try to rewrite CNAME chains until first hit
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - new "rpz" logging channel
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - RDATA for CNAME rules can include wildcards
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews - replace "NO-OP" named.conf policy override with
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews is still recognized)
7d116211ec7b063891130f191e3ed437b45dba70Mark Andrews3169. [func] Catch db/version mis-matches when calling dns_db_*().
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews a ANY query. [RT #26017]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews3167. [bug] Negative answers from forwarders were not being
eba8a27e55258ee4470d7c3caa6bb3a335b9731eMark Andrews correctly tagged making them appear to not be cached.
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
982a2cfef37a39842ff53dc2e00b947c554fa78eTatuya JINMEI 神明達哉3165. [bug] dnssec-signzone could generate new signatures when
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews resigning, even when valid signatures were already
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews present. [RT #26025]
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews3164. [func] Enable DLZ modules to retrieve client information,
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews so that responses can be changed depending on the
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews source address of the query. [RT #25768]
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews concurrency problems with large numbers of threads.
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews3162. [test] start.pl: modified to allow for "named.args" in
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews ns*/ subdirectory to override stock arguments to
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews named. Largely from RT #26044, but no separate ticket.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews assertion failures. [RT #25880]
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews the newline was not being printed causing type codes
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews to be run together. [RT #25873]
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews3159. [bug] On some platforms, named could assert on startup
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews when running in a chrooted environment without
885e60828681cecd17bccbe5ceff8f4e75ef4c5cMark Andrews /proc. [RT #25863]
8ec056723666c71a499880ffa415661f37ffd08eMark Andrews3158. [bug] Recursive servers would prefer a particular UDP
037b732f88edc943f3141e0342dc993156e3abf3Mark Andrews socket instead of using all available sockets.
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the config file before pausing the server. [RT #21373]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3156. [placeholder]
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews --- 9.9.0a2 released ---
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews an assert. [RT #25452]
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews3153. [func] Extend request-ixfr to zone level and remove the
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews side effect of forcing an AXFR. [RT #25156]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews incorrect use of __builtin_expect. [RT #25183]
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews incorrectly. [RT #21050]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3150. [func] Improved startup and reconfiguration time by
74f261bd2b7846d8e730ca3a1b28d6503de5c74aMark Andrews enabling zones to load in multiple threads. [RT #25333]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews3149. [placeholder]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews3148. [bug] Processing of normal queries could be stalled when
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews forwarding a UPDATE message. [RT #24711]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews --- 9.9.0a1 released ---
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews there were any errors while running them. [RT #25527]
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews used with a nonexistent database node. [RT #25358]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews associated with empty zones. [RT #25079]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews3140. [func] New command "rndc flushtree <name>" clears the
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews specified name from the server cache along with
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews all names under it. [RT #19970]
74a14c4eb8518a9cc31cb5a918547a93d0c0e838Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews their hmac counterparts). [RT #25067]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews3138. [bug] Address memory leaks and out-of-order operations when
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews shutting named down. [RT #25210]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews3137. [func] Improve hardware scalability by allowing multiple
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews worker threads to process incoming UDP packets.
7c678cfe0bd477ded2995b9490d72edf7bc76a84Mark Andrews This can significantly increase query throughput
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews on some systems. [RT #22992]
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews empty zones switched on by the 'empty-zones-enable'
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews option. [RT #24990]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews statistics. [RT #16030]
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3132. [placeholder]
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews per 100 zones at startup time, rather than using a
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews fixed-size task table. [RT #24406]
6e9efadbea9febb0494e713e54dfea6f7ef70383Mark Andrews3130. [func] Support alternate methods for managing a dynamic
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews zone's serial number. Two methods are currently
aa0f0779d1ea7150991c3e6eec1cc532086c13fdMark Andrews defined using serial-update-method, "increment"
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews (default) and "unixtime". [RT #23849]
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews allow-new-zones was set to yes and named ACLs
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews were used. [RT #22739]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
b2f160f266005ceaed77a3f575109f74cd13d548Mark Andrews auto-dnssec zone that has not been signed yet
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews will cause it to be signed with the specified NSEC3
0bb7c66ef8e3e8740cbac4a4de607060dfc4d6c8Mark Andrews parameters when keys are activated. The
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews NSEC3PARAM record will not appear in the zone until
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews it is signed, but the parameters will be stored.
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews if the zone serial number has been changed and
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews ixfr-from-differences is not in use. [RT #24687]
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews3126. [security] Using DNAME record to generate replacements caused
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews RPZ caused named to exit with a assertion failure.
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews3124. [bug] Use an rdataset attribute flag to indicate
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews negative-cache records rather than using rrtype 0;
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews this will prevent problems when that rrtype is
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews used in actual DNS packets. [RT #24777]
2bef3713093349af52ba61eaab07adf3207da873Mark Andrews3123. [security] Change #2912 exposed a latent flaw in
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews dns_rdataset_totext() that could cause named to
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews crash with an assertion failure. [RT #24777]
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews3121. [security] An authoritative name server sending a negative
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews response containing a very large RRset could
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews trigger an off-by-one error in the ncache code
ad226e3da3207fcb1dbb1054dd339dbbd19f507aMark Andrews and crash named. [RT #24650]
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews that validated insecure without using DLV and had
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews DS records in the parent zone. [RT #24631]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews record could be created and never marked complete.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews SIG(0) keys. [RT #24604]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3117. [cleanup] Remove doc and parser references to the
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews never-implemented 'auto-dnssec create' option.
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews of DNSSEC records in signed dynamic zones. Set to
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews 'no-resign' to disable automatic RRSIG regeneration
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews while retaining the ability to sign new or changed
2c6f9101f99cc663074376a5cc1d954d33bdbe36Mark Andrews data. [RT #24533]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews3115. [bug] Named could fail to return requested data when
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews following a CNAME that points into the same zone.
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews inactive and there is no replacement key. [RT #23136]
81bdad57bd2c0c4b9a0684fe6e222ba95da625ecMark Andrews3113. [doc] Document the relationship between serial-query-rate
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews and NOTIFY messages.
a5768d889b4e139e78f2b1d9433f3e9f8d225ff4Mark Andrews3112. [doc] Add missing descriptions of the update policy name
3d247992c4a500caa7703edaee68612e545af602Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
3d247992c4a500caa7703edaee68612e545af602Mark Andrews "krb5-subdomain", which allow machines to update
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews their own records, to the BIND 9 ARM.
3d247992c4a500caa7703edaee68612e545af602Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews dnssec-validation, added test cases to the
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews checkconf system test. [RT #24398]
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews when attempting to sign with no KSK. [RT #24369]
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews3109. [func] The also-notify option now uses the same syntax
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews as a zone's masters clause. This means it is
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews now possible to specify a TSIG key to use when
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews sending notifies to a given server, or to include
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews an explicit named masters list in an also-notify
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews statement. [RT #23508]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews code (use -P instead). [RT #20852]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews when using -x. [RT #20852]
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews3106. [func] When logging client requests, include the name of
841fc0fd70881499b62f15e35980dd14b905ba45Mark Andrews the TSIG key if any. [RT #23619]
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews3105. [bug] GOST support can be suppressed by "configure
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews --without-gost" [RT #24367]
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3103. [bug] Configuring 'dnssec-validation auto' in a view
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein instead of in the options statement could trigger
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an assertion failure in named-checkconf. [RT #24382]
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews how often, in minutes, to check the key repository
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews for updates when using automatic key maintenance.
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews Default is every 60 minutes (formerly hard-coded
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews to 12 hours). [RT #23744]
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews3101. [bug] Zones using automatic key maintenance could fail
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews to check the key repository for updates. [RT #23744]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein3100. [security] Certain response policy zone configurations could
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein trigger an INSIST when receiving a query of type
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein RRSIG. [RT #24280]
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein3099. [test] "dlz" system test now runs but gives R:SKIPPED if
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews3097. [test] Add a tool to test handling of malformed packets.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews dst_gssapi_acceptctx(). [RT #24004]
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3094. [doc] Expand dns64 documentation.
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews3092. [bug] Signatures for records at the zone apex could go
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews stale due to an incorrect timer setting. [RT #23769]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews3091. [bug] Fixed a bug in which zone keys that were published
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews and then subsequently activated could fail to trigger
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews automatic signing. [RT #22911]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews3090. [func] Make --with-gssapi default [RT #23738]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews standard input "dnssec-dsfromkey -f -". [RT #20662]
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews and add setup.sh in order to resolve changing
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews named.conf issue. [RT #23687]
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews type "external" could cause a crash. [RT #23735]
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews now force an update to the new key format even if no
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews other change has been specified, using "-P now -A now"
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews as default values. [RT #22474]
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews of signatures which have not yet expired but
2ab6dfca4b7432de4fb7da4cd21ee0e02a695c01Mark Andrews were generated by a key that no longer exists.
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews a dynamic zone to disk; "rndc sync -clean" also
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews removes the journal file after syncing. Also,
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews "rndc freeze" no longer removes journal files.
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews3083. [bug] NOTIFY messages were not being sent when generating
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews a NSEC3 chain incrementally. [RT #23702]
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews3082. [port] strtok_r is threads only. [RT #23747]
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews3081. [bug] Failure of DNAME substitution did not return
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews YXDOMAIN. [RT #23591]
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews3078. [func] Added a new include file with function typedefs
52188225731669cd571984c45a1407a55c74ee78Mark Andrews for the DLZ "dlopen" driver. [RT #23629]
52188225731669cd571984c45a1407a55c74ee78Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
52188225731669cd571984c45a1407a55c74ee78Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews dnssec-keyfromlabel sets the default TTL of the
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews key. When possible, automatic signing will use that
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews TTL when the key is published. [RT #23304]
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews timestamp when determining which keys are active.
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews3074. [bug] Make the adb cache read through for zone data and
d5af5bb38b9b2626b97626569adde258c8f6b808Mark Andrews glue learn for zone named is authoritative for.
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews3071. [bug] has_nsec could be used uninitialized in
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews update.c:next_active. [RT #20256]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews support. [RT #23473]
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews select the master/slave zones. [RT #23580]
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews no longer requiring a configure option. To
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 disable it, use "configure --without-dlopen".
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 Driver also supported on win32. [RT #23467]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉3065. [bug] RRSIG could have time stamps too far in the future.
5cf023372424c1a59fda4a994e3c85c08c26e2f1Tatuya JINMEI 神明達哉3064. [bug] powerpc: add sync instructions to the end of atomic
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews operations. [RT #23469]
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews3062. [func] Made several changes to enhance human readability
073dfc245fd921958b1ccd869ed3471f828cf283Mark Andrews of DNSSEC data in dig output and in generated
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews - DNSKEY record comments are more verbose, no
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews longer used in multiline mode only
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews - multiline RRSIG records reformatted
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews - multiline output mode for NSEC3PARAM records
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews - "dig +norrcomments" suppresses DNSKEY comments
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews - "dig +split=X" breaks hex/base64 records into
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews fields of width X; "dig +nosplit" disables this.
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews3061. [func] New option "dnssec-signzone -D", only write out
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews generated DNSSEC records. [RT #22896]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews specification of a separate expiration date
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews3059. [test] Added a regression test for change #3023.
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews reload to fail, if a log file specified in the conf
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews file isn't a plain file. [RT #22771]
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews and so could miss some views. [RT #23488]
28b65e6d0a03704f4faee88ebf5105addfa57968Mark Andrews3056. [func] Added support for URI resource record. [RT #23386]
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews3055. [placeholder]
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews3054. [bug] Added elliptic curve support check in
14a97c343bc3adb840b13d515a8298c18f15be52Mark Andrews GOST OpenSSL engine detection. [RT #23485]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews3053. [bug] Under a sustained high query load with a finite
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews max-cache-size, it was possible for cache memory
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews to be exhausted and not recovered. [RT #23371]
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews3052. [test] Fixed last autosign test report. [RT #23256]
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
db2649bad98fc08054feb1a1ed234d8b9b011ea8Mark Andrews zone if both are present. [RT #23035]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews3050. [bug] The autosign system test was timing dependent.
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews Wait for the initial autosigning to complete
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews before running the rest of the test. [RT #23035]
cdb15282589682b664dfb70428a3c1750fe05250Mark Andrews3049. [bug] Save and restore the gid when creating creating
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews named.pid at startup. [RT #23290]
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews3048. [bug] Fully separate view key management. [RT #23419]
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews validator.c. Tests added to dnssec system test.
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews and RRSIG TTL. [RT #23332]
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews3045. [removed] Replaced by change #3050.
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews version 0.12) for development of future unit tests.
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews Use configure --with-atf to build ATF internally
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews or configure --with-atf=prefix to use an external
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews copy. [RT #23209]
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews addresses on systems with only IPv4 connectivity.
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews ttl changes. [RT #23330]
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews with a CNAME existed between the trust anchor and the
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews top of the zone. [RT #23338]
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews copyright notices that cover various parts.
b68fe6c0fbfee1dc0659661993de5c6727b66c76Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
70e854766f5304f43e94212dc38ebaefe214148cMark Andrews is re-usable or not. [RT #21914]
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
c202b9f4dd7438252d77a4dd8936b7a051431a0bMark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews catch NULL pointer dereferences before they happen.
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews after calling grow_headerspace() and if not
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews3024. [func] RTT Banding removed due to minor security increase
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews but major impact on resolver latency. [RT #23310]
e9a0e12b2b732285e00e0d9436961d0fe3655aa6Mark Andrews3023. [bug] Named could be left in an inconsistent state when
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews receiving multiple AXFR response messages that were
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews not all TSIG-signed. [RT #23254]
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
4c8df3b2e8858e97debfe3fb771fe03f22b04d1eMark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews changing the DNSKEY RRset. [RT #23232]
72379d863a3bb135e7da36e344b731a59b8c3e33Mark Andrews3019. [test] Test: check apex NSEC3 records after adding DNSKEY
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews record via UPDATE. [RT #23229]
e021f388dfc2ac024a103def34818af73e7e869fMark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews if a zone may need to be re-signed. [RT #23120]
c5eebaf6f1311662f8120a8b560e2dbbfd5c92e8Mark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
1e6d80a391137b26e7250e72f6b28eb92c2b9952Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
af4b677e0de9c4ce67a5187039681a58f73b86eaMark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
f34970d390482ceea61bd4d5bcd6ead7828157daMark Andrews3014. [placeholder]
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
e9e869569a92c4b1d5339d3bfb22232e5b401db1Mark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews signing records for any remaining DNSKEY changes.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3011. [func] Change the default query timeout from 30 seconds
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews to 10. Allow setting this in named.conf using the new
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews 'resolver-query-timeout' option, which specifies a max
783707ee556191b974e951f04accf09f443f5fdfMark Andrews time in seconds. 0 means 'default' and anything longer
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews than 30 will be silently set to 30. [RT #22852]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews for refreshing managed-keys. [RT #22296]
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews3009. [bug] clients-per-query code didn't work as expected with
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews particular query patterns. [RT #22972]
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews --- 9.8.0b1 released ---
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews3007. [bug] Named failed to preserve the case of domain names in
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews rdata which is not compressible when writing master
b03a31d98f1cf42414d321c742c9fc04be75b32bMark Andrews files. [RT #22863]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews across restarts of named. Initially this is for
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
cd0a7c71c0edd9540a7e917a2389a3ad0accc835Mark Andrews3005. [port] Solaris: Work around the lack of
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews gsskrb5_register_acceptor_identity() by setting
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews the KRB5_KTNAME environment variable to the
c1807114ce574896694e3f449c73b098fe91730fMark Andrews contents of tkey-gssapi-keytab. Also fixed
c1807114ce574896694e3f449c73b098fe91730fMark Andrews test errors on MacOSX. [RT #22853]
0066165079c7d85033f4b623153e404df31b9c75Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews3003. [experimental] Added update-policy match type "external",
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews enabling named to defer the decision of whether to
055597532db52233e80f617b8b015e8caadcb577Mark Andrews allow a dynamic update to an external daemon.
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
055597532db52233e80f617b8b015e8caadcb577Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
055597532db52233e80f617b8b015e8caadcb577Mark Andrews can be switched on by setting "dnssec-validation auto;"
055597532db52233e80f617b8b015e8caadcb577Mark Andrews in the named.conf options. [RT #21727]
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews3000. [bug] More TKEY/GSS fixes:
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews - nsupdate can now get the default realm from
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews the user's Kerberos principal
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews - corrected gsstest compilation flags
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews - improved documentation
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews - fixed some NULL dereferences
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews to the task api. [RT #22776]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews it was compiled against. [RT #22687]
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews from the signer's identity. [RT #22770]
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews do not use threads on earlier versions. Also kill
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews2993. [func] Dynamically grow adb hash tables. [RT #21186]
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
5ec95dc3cbba160d03be874941930bdf3e515bbdMark Andrews for looking at a secure delegation. [RT #22059]
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
aeb33b58e1979b716d1eb0521df8bc3a0aa41a52Mark Andrews dynamic zones. [RT #22365]
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews interval validity when the interval is set to 0.
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews2989. [func] Added support for writable DLZ zones. (Contributed
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews of external DLZ drivers that can be loaded as
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews shared objects at runtime rather than linked with
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews named. Currently this is switched on via a
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews compile-time option, "configure --with-dlz-dlopen".
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews Note: the syntax for configuring DLZ zones
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews is likely to be refined in future releases.
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews (Contributed by Andrew Tridgell of the Samba
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews project.) [RT #22629]
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews adding a "tkey-gssapi-keytab" option. If set,
561863ed947f18c8bfcaa631ad83a6bee3b7200bMark Andrews updates will be allowed with any key matching
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews a principal in the specified keytab file.
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews "tkey-gssapi-credential" is no longer required
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews and is expected to be deprecated. (Contributed
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews by Andrew Tridgell of the Samba project.)
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
bce2d35b4879d7878e339a9c60db9364508e38fdMark Andrews zone, but the nameserver names and/or their IP
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews addresses are statically configured. [RT #21474]
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews2984. [bug] Don't run MX checks when the target of the MX record
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews is ".". [RT #22645]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews --- 9.8.0a1 released ---
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews increment the reference count.
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews Note: dns_tsigkey_createfromkey() callers should now
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews always call dst_key_free() rather than setting it
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews to NULL on success. [RT #22672]
41be71bae48846d9525be6f71e19944e34748e26Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews2979. [bug] named could deadlock during shutdown if two
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews "rndc stop" commands were issued at the same
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews time. [RT #22108]
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews key. [RT #22573]
a90cf89180ae8d9dfd281288cdc75940e46bfdd0Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews wrong lock which could lead to server deadlock.
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
fa901545edc8bb62969121e14199d533a40d0b61Tatuya JINMEI 神明達哉 consistency check examining the existing version
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews of the zone rather than the new version resulting
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews from the UPDATE. [RT #22413]
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
326449ec24b069f5ef59c8e282ae22a50aa27049Mark Andrews at the end of configure resulting in build failures
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews where there is very old version of perl installed.
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews Move it to "make maintainer-clean". [RT #22230]
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
a1ed9109a60911df561628e49c5c29e3b0506801Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews compacted on Windows systems as a result of
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews any matching RRSIG records. A subsequent lookup of
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews of NO DATA cache entry could trigger a INSIST when the
689023771c563d8660e45d439a207e06e96de28fMark Andrews unexpected RRSIG was also returned with the NO DATA
689023771c563d8660e45d439a207e06e96de28fMark Andrews cache entry.
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews CVE-2010-3613, VU#706148. [RT #22288]
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews2969. [security] Fix acl type processing so that allow-query works
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews in options and view statements. Also add a new
3a1d86e8f51c953c2407e112e15b47328b6ee4feMark Andrews set of tests to verify proper functioning.
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews CVE-2010-3615, VU#510208. [RT #22418]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉2968. [security] Named could fail to prove a data set was insecure
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 before marking it as insecure. One set of conditions
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 that can trigger this occurs naturally when rolling
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews DNSKEY algorithms.
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews CVE-2010-3614, VU#837744. [RT #22309]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews space available in the buffer when adding a left
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews justified character with a non zero width,
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews (e.g. "%-1c"). [RT #22270]
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
9baab4b1a8a5a54c04e47742c7b48311d5575a87Mark Andrews RFC 4634. [RT #21702]
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews2964. [placeholder]
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews2963. [security] The allow-query acl was being applied instead of the
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
cb75f7ce19e11e3dfedee5a50a331bf53cd2c36bMark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews2961. [bug] Be still more selective about the non-authoritative
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews answers we apply change 2748 to. [RT #22074]
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews2960. [func] Check that named accepts non-authoritative answers.
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews2959. [func] Check that named starts with a missing masterfile.
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein2958. [bug] named failed to start with a missing master file.
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews respectively. [RT #21962]
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
7b78f6665635ed85118352c97ff5a25f5bb242f7Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews build_sqldbinstance failure. [RT #21623]
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews exact match" message when returning a wildcard
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews no data response. [RT #21744]
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews to initialize winsock. [RT #21932]
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews2951. [bug] named failed to generate a correct signed response
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews in a optout, delegation only zone with no secure
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews delegations. [RT #22007]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews falling back to TCP on UDP timeouts when
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews ixfr-from-differences was set. [RT #21595]
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews it was called multiple times. [RT #21942]
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews2948. [port] MacOS: provide a mechanism to configure the test
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews interfaces at reboot. See bin/tests/system/README
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews for details.
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews2947. [placeholder]
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews2946. [doc] Document the default values for the minimum and maximum
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews2943. [func] Add support to load new keys into managed zones
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews without signing immediately with "rndc loadkeys".
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews Add support to link keys with "dnssec-keygen -S"
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein and "dnssec-settime -S". [RT #21351]
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews DNAME at the zone apex. [RT #21610]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews2940. [port] Remove connection aborted error message on
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews Windows. [RT #21549]
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein2939. [func] Check that named successfully skips NSEC3 records
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews that fail to match the NSEC3PARAM record currently
a46445468bb39318ad2a4291ace371a8c4ff9ac6Mark Andrews in use. [RT #21868]
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews2938. [bug] When generating signed responses, from a signed zone
5f059eef4360bc6c35a38241deb2561884dd9001Mark Andrews that uses NSEC3, named would use a uninitialized
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews pointer if it needed to skip a NSEC3 record because
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews it didn't match the selected NSEC3PARAM record for
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews zone. [RT #21868]
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews2937. [bug] Worked around an apparent race condition in over
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews memory conditions. Without this fix a DNS cache DB or
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews ADB could incorrectly stay in an over memory state,
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews effectively refusing further caching, which
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews subsequently made a BIND 9 caching server unworkable.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews This fix prevents this problem from happening by
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews polling the state of the memory context, rather than
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews making a copy of the state, which appeared to cause
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews a race. This is a "workaround" in that it doesn't
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews solve the possible race per se, but several experiments
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews proved this change solves the symptom. Also, the
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews polling overhead hasn't been reported to be an issue.
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews This bug should only affect a caching server that
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews specifies a finite max-cache-size. It's also quite
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews likely that the bug happens only when enabling threads,
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews but it's not confirmed yet. [RT #21818]
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews2936. [func] Improved configuration syntax and multiple-view
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews support for addzone/delzone feature (see change
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews #2930). Removed "new-zone-file" option, replaced
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews for each view is now created automatically, with
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews a filename generated from a hash of the view name.
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews It is no longer necessary to "include" the
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews new-zone-file in named.conf; this happens
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews automatically. Zones that were not added via
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews "rndc addzone" can no longer be removed with
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews "rndc delzone". [RT #19447]
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
c956fbfbbd536407a2f0ef8f138c27729d31744dMark Andrews scope. This could potentially result in a unknown,
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews potentially malformed, EDNS option being sent instead
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews of the desired NSID option. [RT #21781]
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews2931. [bug] Temporarily and partially disable change 2864
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews because it would cause infinite attempts of RRSIG
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews queries. This is an urgent care fix; we'll
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews revisit the issue and complete the fix later.
738bffe2ee7dd6f3efeae8e2cca9017acc9c5f94Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews allow dynamic addition and deletion of zones.
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews To enable this feature, specify a "new-zone-file"
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews option at the view or options level in named.conf.
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews Zone configuration information for the new zones
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews will be written into that file. To make the new
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews zones persist after a restart, "include" the file
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews into named.conf in the appropriate view. (Note:
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews This feature is not yet documented, and its syntax
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews is expected to change.) [RT #19447]
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews2929. [bug] Improved handling of GSS security contexts:
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews - added LRU expiration for generated TSIGs
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews - added the ability to use a non-default realm
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews - added new "realm" keyword in nsupdate
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews - limited lifetime of generated keys to 1 hour
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews or the lifetime of the context (whichever is
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2928. [bug] Be more selective about the non-authoritative
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews answer we apply change 2748 to. [RT #21594]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews2927. [placeholder]
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews2926. [placeholder]
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews2925. [bug] Named failed to accept uncachable negative responses
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews from insecure zones. [RT #21555]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews current managed keys combined with trusted keys.
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews2923. [bug] 'dig +trace' could drop core after "connection
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews timeout". [RT #21514]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews2922. [contrib] Update zkt to version 1.0.
d9147148dde80db2ce3390ded26333d106d3c10bTatuya JINMEI 神明達哉2921. [bug] The resolver could attempt to destroy a fetch context
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉 too soon. [RT #19878]
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
71839e2a424a904a60429a380ee7685464022e4bMark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews2917. [func] Virtual time test framework. [RT #20801]
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews2916. [func] Add framework to use IPv6 in tests.
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews based on configure options. [RT #21444]
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews2914. [bug] Make the "autosign" system test more portable.
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉2913. [func] Add pkcs#11 system tests. [RT #20784]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 the zone section. [RT #20986]
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews was specified in named.conf. [RT #21416]
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews a DNSKEY. [RT #21384]
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews2907. [bug] The export version of libdns had undefined references.
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
ed6e3610e3e56aac554dc93cad461a0016e961f9Mark Andrews could be incorrectly marked as insecure instead of
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews secure leading to negative proofs failing. This was
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews a unintended outcome from change 2890. [RT #21392]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews2902. [func] Add regression test for change 2897. [RT #21040]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews2900. [bug] The placeholder negative caching element was not
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews properly constructed triggering a INSIST in
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews dns_ncache_towire(). [RT #21346]
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews2898. [bug] nslookup leaked memory when -domain=value was
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews specified. [RT #21301]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews to insecure. [RT #21040]
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews2896. [bug] "rndc sign" failed to properly update the zone
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews when adding a DNSKEY for publication only. [RT #21045]
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews2895. [func] genrandom: add support for the generation of multiple
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews files. [RT #20917]
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2893. [bug] Improve managed keys support. New named.conf option
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews managed-keys-directory. [RT #20924]
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews2891. [maint] Update empty-zones list to match
6ec0f98cf6e88aeba1615763fdec253bf391f22eMark Andrews draft-ietf-dnsop-default-local-zones-13. [RT #21099]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews2890. [bug] Handle the introduction of new trusted-keys and
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews DS, DLV RRsets better. [RT #21097]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2888. [bug] Only the first EDNS option was displayed. [RT #21273]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews local time is presented as a comment within the
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews comment. [RT #21223]
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews configure. [RT #21080]
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews2882. [bug] Remove memory context from list of active contexts
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews before clearing 'magic'. [RT #21274]
321df4df1972da49223fc8ee1180f94b88295568Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews is held when closing a version. [RT #21198]
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews consistent. [RT #21078]
50105afc551903541608b11851d73278b23579a3Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews2878. [func] Incrementally write the master file after performing
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews a AXFR. [RT #21010]
ad35e0aec9dae18ee31e760beab1602f7eb4ef05Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews RRSIGs. [RT #21138]
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews from unsigned zones. [RT #21131]
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews2874. [bug] Cache lack of EDNS support only after the server
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews successfully responds to the query using plain DNS.
e9964e7db4467722300c0d7d52ec1d7a51a784c1Mark Andrews2873. [bug] Canceling a dynamic update via the dns/client module
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews could trigger an assertion failure. [RT #21133]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews require one of IPv4 or IPv6 rather than both.
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews the header file, causing build failure with
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews --enable-exportlib. [RT #21138]
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
91c79af4755df2d892511512e0fc886639518a92Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
bf74532c942054bccc3df5227009ce52063a9dafMark Andrews any changes made by configure are integrated.
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews Use --with-make-clean=no to disable. [RT #20994]
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews don't like it. [RT #20986]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews2862. [bug] nsupdate didn't default to the parent zone when
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews updating DS records. [RT #20896]
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews inactivation time. [RT #21039]
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews2859. [bug] When canceling validation it was possible to leak
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews memory. [RT #20800]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews2856. [bug] The size of a memory allocation was not always properly
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews recorded. [RT #20927]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2855. [func] nsupdate will now preserve the entered case of domain
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews names in update requests it sends. [RT #20928]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews be suppressed, dig +onesoa. [RT #20929]
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews2851. [doc] nslookup.1, removed <informalexample> from the docbook
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews source as it produced bad nroff. [RT #21007]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews the heap would have corrupted entries. [RT #20951]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews README.rfc5011 into the ARM. [RT #20899]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews correctly. [RT #20731]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews been five (5) seconds.
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews creating key files if there is a chance that the new
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews key ID will collide with an existing one after
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews either of the keys has been revoked. (To override
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews option. dnssec-keygen will simply create a
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews different, non-colliding key, so an override is
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews not necessary.) [RT #20838]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews "dnssec" regression tests. [RT #20865]
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews2839. [bug] A KSK revoked by named could not be deleted.
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews2838. [placeholder]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews2836. [bug] Keys that were scheduled to become active could
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews be delayed. [RT #20874]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews the private key file with the outdated tag
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews "Unpublish" rather than "Inactive". This has been
7052e191ce63fdf063a977695718ff426a27628eMark Andrews fixed; however, any existing keys that had Inactive
7052e191ce63fdf063a977695718ff426a27628eMark Andrews dates set will now need to have them reset, using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dnssec-settime -I'. [RT #20868]
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews digest length were used incorrectly, leading to
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews interoperability problems with other DNS
185fd227381269568e193147a98f292210a16f2cMark Andrews implementations. This has been corrected.
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews (Note: If an oversize key is in use, and
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews compatibility is needed with an older release of
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews the key secret to a form that will work with all
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews versions.) [RT #20751]
f853c77478af94109291ea93f800444b949be558Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to avoid redefinition in some OSs [RT 20831]
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews2831. [security] Do not attempt to validate or cache
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews out-of-bailiwick data returned with a secure
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews answer; it must be re-fetched from its original
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews source and validated in that context. [RT #20819]
37225662b64e44a3c59f92dd6156db37b52ca7a3Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
eabf7ff29a88c578619fdc0d307f9e0bad0d6ce8Mark Andrews passes. [RT #20813]
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews without DNSSEC validation. [RT #20737]
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews being released. [RT #20740]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
1576cde466a8de10e84f9887ec073ebaf5973aefMark Andrews was in the process of being created was not properly
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews recorded in the zone. [RT #20786]
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉2824. [bug] "rndc sign" was not being run by the correct task.
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2822. [bug] rbtdb.c:loadnode() could return the wrong result.
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2821. [doc] Add note that named-checkconf doesn't automatically
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews2820. [func] Handle read access failure of OpenSSL configuration
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews file more user friendly (PKCS#11 engine patch).
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews2818. [cleanup] rndc could return an incorrect error code
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews when a zone was not found. [RT #20767]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews2816. [bug] previous_closest_nsec() could fail to return
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews data for NSEC3 nodes [RT #29730]
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews2814. [func] Provide a definitive error message when a master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone is not loaded. [RT #20757]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2812. [bug] Make sure updates can't result in a zone with
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #20733]
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to insecure. [RT #20746]
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic.h is correctly installed by the architecture
baee883e378402698eeb7326538a7d432c8350d1Mark Andrews specific subdirectories. [RT #20722]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews keys. [RT #20720]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when it had changed. [RT #20703]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2805. [bug] Fixed namespace problems encountered when building
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews external programs using non-exported BIND9 libraries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or as a result of a scheduled key change. [RT #20700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and genrandom under windows. [RT #20670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews2801. [func] Detect and report records that are different according
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to DNSSEC but are semantically equal according to plain
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews comparisons when processing UPDATE requests.
4607e7a9b8dfb1b41c70e51c2b603daaf22cf302Mark Andrews dnssec-signzone now removes such semantically duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records prior to signing the RRset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews named.conf: check-dup-records {ignore|warn|fail};
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2800. [func] Reject zones which have NS records which refer to
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only). Reject UPDATEs which would cause the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail the above checks if committed. [RT #20678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
0451757ad8f7c49a0d3dcdf7fbdd4ea64fcec298Mark Andrews2798. [bug] Addressed bugs in managed-keys initialization
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and rollover. [RT #20683]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews log messages. [RT #18889]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2793. [func] Add "autosign" and "metadata" tests to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic tests. [RT #19946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options (if compiled in). [RT #20635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2791. [bug] The installation of isc-config.sh was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not requested [RT #20625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2787. [bug] Spurious log message when zone keys were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamically reconfigured. [RT #20659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b3 released ---
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2784. [bug] TC was not always being set when required glue was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dropped. [RT #20655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews buffer size of 512 or less. [RT #20654]
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews activation date in all cases. [RT #20648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without deleting the unrevoked version. [RT #20638]
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
9c1eb2279d715188bf631d98d103f6f81a3c76fbMark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dnssec-keyfromlabel. [RT #20643]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2774. [bug] Existing cache DB wasn't being reused after
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews reconfiguration. [RT #20629]
21f1794606dce19928cf455029e173321f166380Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with the KSK. [RT #20628]
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews2772. [security] When validating, track whether pending data was from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the additional section or not and only return it if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validates as secure. [RT #20438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews corrupted when importing from key files [RT #20624]
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing FORMERR responses. [RT #20526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
1a4d687359d89ff3b3e4e3f7acc4b6b8d8c982e9Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2767. [bug] named could crash on startup if a zone was
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews configured with auto-dnssec and there was no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory. [RT #20615]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socketmgr state if the socket is not pending on a
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews read or write. [RT #20603]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews systems that are known to work. Currently, BSD
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews variants, Linux and Solaris are supported. [RT #20202]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews2759. [doc] Add information about .jbk/.jnw files to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the ARM. [RT #20303]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews that could cause the UDP client handler to shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down. [RT #19176]
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews2757. [bug] dig: assertion failure could occur in connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeout. [RT #20599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews2755. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was signed with NSEC3. [RT #20587]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews building an NSEC chain. [RT #20589]
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews2752. [bug] Locking violation. [RT #20587]
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2750. [bug] dig: assertion failure could occur when a server
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews didn't have an address. [RT #20579]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews for NSEC3 signed zones. [RT #20452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews as referrals. [RT #18884]
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time of RRSIGs correctly. [RT #20541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2745. [bug] configure script didn't probe the return type of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(3) correctly. [RT #20573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for a insecure delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppressed (dnssec-keygen -q). Automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppress the progress messages when stdin is not
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews a tty. [RT #20474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2740. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews anchors for a view. [RT #20211]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews test. [RT #20453]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2737. [func] UPDATE requests can leak existence information.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than a normal amount of glue below a delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2735. [bug] dnssec-signzone could fail to read keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that were specified on the command line with
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews full paths, but weren't in the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory. [RT #20421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if built with './configure --enable-filter-aaaa'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Filters out AAAA answers to clients connecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via IPv4. (This is NOT recommended for general
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use.) [RT #20339]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2731. [func] Additional work on change 2709. The key parser
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will now ignore unrecognized fields when the
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews minor version number of the private key format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been increased. It will reject any key with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the major version number increased. [RT #20310]
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a la 'openssl genrsa' on standard error. Note
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the first '.' is followed by a long stop
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews one has the choice between slow generation vs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews TTL. [RT #20451]
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone now warn immediately if asked to
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews write into a nonexistent directory. [RT #20278]
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews path. [RT #20154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews to the ARM. [RT #20235]
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were failing. [RT #20448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_base64_totext(), didn't always mark regions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory as fully consumed after conversion. [RT #20445]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2722. [bug] Ensure that the memory associated with the name of
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews a node in a rbt tree is not altered during the life
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the node. [RT #20431]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews generator. [RT #20369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews incorrect. [RT #20394]
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews the last private type record was removed as a result
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews of completing the signing the zone with a key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews --- 9.7.0b1 released ---
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __isync() calls.
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews to be fully automated in zones configured for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews to be signed by creating keys for it in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory and using 'rndc sign <zone>'.
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also keeps the zone's DNSSEC keys up to date
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews according to their timing metadata. [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #20372]
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone option cause a zone to be signed with only KSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews the size of a DNSKEY answer. [RT #20340]
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews2709. [func] Added some data fields, currently unused, to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file format, to allow implementation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of explicit key rollover in a future release
90295f915c883d1aeeda856f518584d4219a704aMark Andrews without impairing backward or forward compatibility.
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update are now fully supported and no longer require
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defines to enable. We now no longer overload the
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews apex. Secure to insecure changes are controlled by
99776003811a413457a2c35a808ad860df877d24Mark Andrews by the named.conf option 'secure-to-insecure'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Warning: If you had previously enabled support by
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews adding defines at compile time to BIND 9.6 you should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that all changes that are in progress have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews is not backwards compatible.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be specified in the label if there is a default
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews engine or the -E option has been used. Also, it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now uses default algorithms as dnssec-keygen does
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews trigger an assert. [RT #20368]
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews2705. [placeholder]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉2704. [bug] Serial of dynamic and stub zones could be inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with their SOA serial. [RT #19387]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for all binaries which can take benefit of
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉 crypto hardware. [RT #20230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉2701. [doc] Correction to ARM: hmac-md5 is no longer the only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported TSIG key algorithm. [RT #18046]
2945ac15af547df0268e449252902ead599e2451Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉2699. [bug] Missing lock in rbtdb.c. [RT #20037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2698. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews S_IFREG are defined after including <isc/stat.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2696. [bug] named failed to successfully process some valid
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews acl constructs. [RT #20308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews callback function for isc_socket_fdwatchcreate)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to include information about the direction (read
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or write) and add isc_socket_fdwatchpoke.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chain when re-signing a previously-signed zone.
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews Use -u to modify NSEC3 parameters or switch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews between NSEC and NSEC3. [RT #20304]
550085fed1d0af54ba5b2f588898afec158195deMark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 to decide to fetch the destination address. [RT #20305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, added warnings when revoking a ZSK, as this is
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews not defined by protocol (but is legal). [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews +adflag and +cdflag. [RT #19305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews the NSEC3 parameters used to sign the zone change.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2682. [bug] "configure --enable-symtable=all" failed to
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews build. [RT #20282]
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decoded. [RT #20269]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews format. [RT #20031]
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was set. [RT #20258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2677. [func] Changes to key metadata behavior:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - Keys without "publish" or "active" dates set will
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews no longer be used for smart signing. However,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews those dates will be set to "now" by default when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a key is created; to generate a key but not use
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews it yet, use dnssec-keygen -G.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sets the time when a key is no longer used for
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews signing but is still published.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - The "unpublished" date (-U) is deprecated in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews favor of "deleted" (-D).
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews2676. [bug] --with-export-installdir should have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-export-includedir. [RT #20252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews did not exist. [RT #20232]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews --- 9.7.0a3 released ---
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without openssl. [RT #20231]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews2673. [bug] The managed-keys.bind zone file could fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews load due to a spurious result from sync_keyzone()
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. [RT #20218]
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews2671. [bug] Add support for PKCS#11 providers not returning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the public exponent in RSA private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (OpenCryptoki for instance) in
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer dnssec-keyfromlabel. [RT #19294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information to be useful. [RT #20205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer Update PKCS#11 patch to be against openssl-0.9.8i.
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-keygen and dnssec-settime can now set key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata fields 0 (to unset a value, use "none")
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews - dnssec-revoke sets the revocation date in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to the revoke bit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-settime can now print individual metadata
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fields instead of always printing all of them,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and can print them in unix epoch time format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use by scripts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2667. [func] Add support for logging stack backtrace on assertion
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews failure (not available for all platforms). [RT #19780]
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (API change from 9.7.0a2). [RT #20196]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews didn't properly check return values for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions. [RT #19956]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2663. [func] win32: allow named to run as a service using
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returned a misleading error code when lwresd was
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews down. [RT #20028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews creating lwres context. [RT #20029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews applications. See README.libdns. [RT #19369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews name for DNSSEC keys. [RT #19938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
c54c1eaf26d5a7fc123c4af3712353156a766df1Mark Andrews key file paths correctly. [RT #20078]
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews log level to debug 1. [RT #20058]
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which causes it to only install dig, host, nslookup,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nsupdate and relevant DLLs. [RT #19998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2655. [doc] Document that key-directory does not affect
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews bind.keys, rndc.key or session.key. [RT #20155]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2654. [bug] Improve error reporting on duplicated names for
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews deny-answer-xxx. [RT #20164]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not found rather than out of memory. [RT #18033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2652. [func] Provide more detail about what record is being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deleted. [RT #20061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 64-bit systems. [RT #20076]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews to read keyset-* files. [RT #20075]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews added. [RT #19913]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews which default to 64 bits. [RT #19927]
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews --- 9.7.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews named was unable to write the PID file and would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail on startup. [RT #20001]
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews improperly formatted key files. [RT #20015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews added a regression test to check it. [RT #20007]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews2640. [security] A specially crafted update packet will cause named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #20000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2638. [bug] Install arpaname. [RT #19957]
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews dnssec-* tools. Major changes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - all dnssec-* tools now take a -K option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a directory in which key files will be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - DNSSEC can now store metadata indicating when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they are scheduled to be published, activated,
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews revoked or removed; these values can be set by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keygen or overwritten by the new
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews dnssec-settime command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-signzone -S (for "smart") option reads key
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews metadata and uses it to determine automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which keys to publish to the zone, use for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing, revoke, or remove from the zone
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2634. [port] win32: Add support for libxml2, enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statschannel. [RT #19773]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews date. [RT #19922]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #19926 ]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "update-policy local;" to switch on local DDNS in a
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews setresgid() if not present. [RT #19932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews at startup with reduced capabilities in operation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2627. [bug] Named aborted if the same key was included in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trusted-keys more than once. [RT #19918]
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #19914]
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews configuration. [RT #18871]
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews completed successfully. [RT #19750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews maintenance. The new "managed-keys" statement can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be used in place of "trusted-keys" for zones which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support this protocol. (Note: this syntax is
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews loop infinitely. [RT #19847]
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews run from the wrong location. [RT #19375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a explicit nameserver was specified. [RT #19852]
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for ia64 gcc builds. [RT #19854]
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews2614. [port] win32: 'named -v' should automatically be executed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the foreground. [RT #19844]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2613. [placeholder]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews --- 9.7.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2612. [func] Add default values for the arguments to
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews dnssec-keygen. Without arguments, it will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews or with the -f KSK option, a 2048-bit RSASHA1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-signing key. [RT #19300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews DLV records instead of DS records. [RT #19300]
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews - add ddns-confgen command to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration text for named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add zone option "ddns-autoconf yes;", which
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews causes named to generate a TSIG session key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow updates to the zone using that key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add '-l' (localhost) option to nsupdate, which
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews causes nsupdate to connect to a locally-running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named process using the session key generated
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews2608. [func] Perform post signing verification checks in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone. These can be disabled with -P.
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews The post sign verification test ensures that for each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm in use there is at least one non revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed KSK key. That all revoked KSK keys are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed. That all records in the zone are signed
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews by the algorithm. [RT #19653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews empty nodes when processing a update request.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2606. [bug] "delegation-only" was not being accepted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only type zones. [RT #19717]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews [RT # 19296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews new options, deny-answer-addresses and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-aliases. Based on contributed code from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews JD Nurmi, Google. [RT #18192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-comilezone argv[0] names under windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2601. [doc] Mention file creation mode mask in the
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews named manual page.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews2600. [doc] ARM: miscellaneous reformatting for different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews page widths. [RT #19574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2597. [bug] Handle a validation failure with a insecure delegation
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews long, leading to inefficient memory usage or rejecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newer cache entries in the worst case. [RT #19563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2594. [func] Have rndc warn if using its default configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file when the key file also exists. [RT #19424]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2591. [bug] named could die when processing a update in
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews removed_orphaned_ds(). [RT #19507]
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews2590. [func] Report zone/class of "update with no effect".
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews of bind(2) call. This should be rare and mostly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews harmless, but may cause interference with other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processes that happen to use the same port. [RT #19642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2587. [func] Improve logging by reporting serial numbers for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when zone serial has gone backwards or unchanged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or SDB. [RT #19577]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2585. [bug] Uninitialized socket name could be referenced via a
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews statistics channel, triggering an assertion failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews XML rendering. [RT #19427]
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews2583. [port] netbsd: provide a control to not add the compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews date to the version string, -DNO_VERSION_DATE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews remove non-existent journal. [RT #19516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews2580. [bug] UpdateRej statistics counter could be incremented twice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for one rejection. [RT #19476]
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithms. [RT #19479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 65535 turns out to be reserved. [RT #19477]
81e302788a444b81231a7cda721548a020ae5660Brian Wellington2577. [doc] Clarified some statistics counters. [RT #19454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2576. [bug] NSEC record were not being correctly signed when
c00a1eb423623442aff428336bb55590f79013bbMark Andrews a zone transitions from insecure to secure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Handle such incorrectly signed zones. [RT #19114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2575. [func] New functions dns_name_fromstring() and
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews dns_name_tostring(), to simplify conversion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a string to a dns_name structure and vice
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington versa. [RT #19451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews single transaction in a signed zone failed. [RT #19397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2572. [func] Simplify DLV configuration, with a new option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-lookaside auto;" This is the equivalent
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews plus setting a trusted-key for dlv.isc.org.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: The trusted key is hard-coded into named,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but is also stored in (and can be overridden
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolls over it can be kept up to date by replacing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the bind.keys file with a key downloaded from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews2570. [func] Log the destination address the query was sent to.
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews "make install" will put them in $sbindir. [RT #19301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2568. [bug] Report when the write to indicate a otherwise
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews successful start fails. [RT #19360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews write_public_key() could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-dsfromkey could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response arrives from a zone thought to be secure:
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews "insecurity proof failed" instead of "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insecure". [RT #19400]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2565. [func] Add support for HIP record. Includes new functions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews and dns_rdata_hip_current(). [RT #19384]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews to exit. [RT #19359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews and some new content.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reading from a K* files. [RT #19357]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2558. [func] Set the ownership of missing directories created
986be654feec852eb9da0d15599f18d0035e569bMark Andrews for pid-file if -u has been specified on the command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews line. [RT #19328]
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews2557. [cleanup] PCI compliance:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * new libisc log module file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * isc_dir_chroot() now also changes the working
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews directory to "/".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional INSISTs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional logging when files can't be removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error checks in the correct order resulting in the
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews wrong error code sometimes being returned. [RT #19249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2555. [func] dig: when emitting a hex dump also display the
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews corresponding characters. [RT #19258]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #19297]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honored.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews out-of-range area of the source buffer. New public
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function isc_mem_reallocate() was introduced to address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this bug. [RT #19313]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL (in place of internal routine) for hash
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for SRV RDATA too. [RT #19304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington2541. [bug] Conditionally update dispatch manager statistics.
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache and allow-recursion. [RT #19198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews especially with threads and smaller max-cache-size
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington values. [RT #19240]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2537. [func] Added more statistics counters including those on socket
683f10428e292811317df38fa324f242abbf7384Mark Andrews I/O events and query RTT histograms. [RT #18802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews specified. [RT #19083]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2534. [func] Check NAPTR records regular expressions and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replacement strings to ensure they are syntactically
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews valid and consistent. [RT #18168]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2532. [bug] dig: check the question section of the response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews see if it matches the asked question. [RT #18495]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington via UPDATE. [RT #19101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version of autoconf. [RT #18657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2528. [cleanup] Silence spurious configure warning about
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews --datarootdir [RT #19096]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2527. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views to share a single cache to save memory and
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews improve lookup efficiency. Based on contributed code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from Barclay Osborn, Google. [RT #18905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews internal information about query failures, especially
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews about server failures. [RT #19027]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews #2388 made the schema incompatible to the previous
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson version. [RT #19080]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews nameserver addresses of the excluded address family
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews preceded in resolv.conf. [RT #19081]
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews nameserver address of the excluded address type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2516. [bug] glue sort for responses was performed even when not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews needed. [RT #19039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews a nameserver of the excluded address family.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2513. [bug] Fix windows cli build. [RT #19062]
23fb770906bf1fd98210f16ad660078274242963Mark Andrews2512. [func] Print a summary of the cached records which make up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the negative response. [RT #18885]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2509. [bug] Specifying a fixed query source port was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2508. [placeholder]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson2507. [func] Log the recursion quota values when killing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews oldest query or refusing to recurse due to quota.
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews2506. [port] solaris: Check at configure time if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic operation support. [RT #19031]
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews Base. [RT #18793]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson2502. [cleanup] isc_radix: Improve compliance with coding style,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews document function in <isc/radix.h>. [RT #18534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson rdata types need to be quoted. See the ARM for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews details. [RT #18368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson function. [RT #18582]
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2498. [bug] Removed a bogus function argument used with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning or crash named with the debug 1 level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of logging. [RT #18917]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews installed. [RT #18826]
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington2493. [bug] The linux capabilities code was not correctly cleaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up after itself. [RT #18767]
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington2492. [func] Rndc status now reports the number of cpus discovered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the number of worker threads when running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-threaded. [RT #18273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2491. [func] Attempt to re-use a local port if we are already using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the port. [RT #18548]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson is cleared when IPV6_V6ONLY is set. [RT #18785]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews this workaround. [RT #18870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from keyset and .key files. [RT #18694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson2486. [func] The default locations for named.pid and lwresd.pid
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews This allows the owner of the containing directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set, for "named -u" support, and allows there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be a permanent symbolic link in the path, for
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson "named -t" support. [RT #18306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews records. Not all orphaned DS records were being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed. [RT #18828]
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews adding NSEC3 proofs to the response in
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson query_addwildcardproof(). [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 2.6.*. [RT #18806]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson --- 9.6.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson collisions. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson2478. [bug] 'addresses' could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure_forward(). [RT #18800]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2477. [bug] dig: the global option to print the command line is
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews +cmd not print_cmd. Update the output to reflect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this. [RT #17008]
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular entries more aggressively. [RT #17628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2474. [bug] ACL structures could be allocated with insufficient
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space, causing an array overrun. [RT #18765]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2473. [port] linux: raise the limit on open files to the possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maximum value before spawning threads; 'files'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified in named.conf doesn't seem to work with
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews threads as expected. [RT #18784]
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer2472. [port] linux: check the number of available cpu's before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson2471. [bug] named-checkzone was not reporting missing mandatory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue when sibling checks were disabled. [RT #18768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson overwritten. [RT #18719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2465. [bug] Adb's handling of lame addresses was different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv4 and IPv6. [RT #18738]
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson2464. [port] linux: check that a capability is present before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying to set it. [RT #18135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API and glibc hides parts of the IPv6 Advanced Socket
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer API as a result. This is stupid as it breaks how the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson were designed to be used but we have to live with it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #18388]
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option for dig. [RT #18757]
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews2461. [port] sunos: Change #2363 was not complete. [RT #17513]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer --- 9.6.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews default. It should be safe because expired cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries are also purged. [RT #18684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address, regardless of family. They now correctly
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews distinguish IPv4 from IPv6. [RT #18559]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews2451. [port] solaris: handle runtime linking better. [RT #18356]
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2449. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2446. [func] Add a new log message about build options on startup.
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews A new command-line option '-V' for named is also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews provided to show this information. [RT #18645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC1918 address, but these are not yet compiled in).
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (clear DF) for UDP responses and requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and so connected UDP sockets would never clean up.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix this by doing an immediate WSAConnect() rather
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews than an io completion port type for UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2442. [bug] A lock could be destroyed twice. [RT #18626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews incompletely. [RT #18573]
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews2440. [bug] named-checkconf used an incorrect test to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if an ACL was set to none.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2437. [bug] Sockets could be closed too early, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inconsistent states in the socket module. [RT #18298]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson2434. [bug] Fixed a minor error-reporting bug in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2433. [tuning] Set initial timeout to 800ms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using I/O events and use IO Completion Ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews throughout. Rewrite the receive path logic to make
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews it easier to support multiple simultaneous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requesters in the future. Add stricter consistency
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checking as a compile-time option (define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson2430. [bug] win32: isc_interval_set() could round down to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zero if the input was less than NS_INTERVAL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nanoseconds. Round up instead. [RT #18549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tables. [RT #18409]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was set. [RT #18528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong value if excessively large net masks are
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews supplied. [RT #18512]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2425. [bug] named didn't detect unavailable query source addresses
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson at load time. [RT #18536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2424. [port] configure now probes for a working epoll
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson implementation. Allow the use of kqueue,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews epoll and /dev/poll to be selected at compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #18277]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2423. [security] Randomize server selection on queries, so as to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews make forgery a little more difficult. Instead of
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews always preferring the server with the lowest RTT,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pick a server with RTT within the same 128
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson millisecond band. [RT #18441]
1255d388f034dc556d235a002527101781dbeb29Mark Andrews2422. [bug] Handle the special return value of a empty node as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2421. [func] Add new command line option '-S' for named to specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the max number of sockets. [RT #18493]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews Use caution: this option may not work for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operating systems without rebuilding named.
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completion event send out canceled read/write
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews done events, which keeps us from writing to memory
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews we no longer have ownership of. Add debugging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket_log() function. Rework TCP socket handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to not leak sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews unexpectedly fail with an 'address already in use'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #18411]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews2416. [func] Log file descriptors that cause exceeding the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal maximum. [RT #18460]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in rbtdb.c. [RT #18455]
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson2414. [bug] A masterdump context held the database lock too long,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing various troubles such as dead lock and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursive lock acquisition. [RT #18311, #18456]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compilation time. [RT #18433]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: with changes #2469 and #2421 above, there is no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2409. [bug] Only log that we disabled EDNS processing if we were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subsequently successful. [RT #18029]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson2408. [bug] A duplicate TCP dispatch event could be sent, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could then trigger an assertion failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resquery_response(). [RT #18275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2406. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
9bdb01e6c382e897572791b12190472955994d87Mark Andrews was inadvertently omitted from CHANGES at the time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2404. [port] hpux: files unlimited support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2403. [bug] TSIG context leak. [RT #18341]
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson2402. [port] Support Solaris 2.11 and over. [RT #18362]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2399. [placeholder]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson2398. [bug] Improve file descriptor management. New,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews temporary, named.conf option reserved-sockets,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default 512. [RT #18344]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson2397. [bug] gssapi_functions had too many elements. [RT #18355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on Linux when running as root. [RT #18335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2394. [bug] Default configuration options set the limit for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews open files to 'unlimited' as described in the
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson documentation. [RT #18331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2393. [bug] nested acls containing keys could trigger an
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson assertion in acl.c. [RT #18166]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson don't support it. [RT #18253]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18301].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2389. [bug] Move the "working directory writable" check to after
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews the ns_os_changeuser() call. [RT #18326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2388. [bug] Avoid using tables for layout purposes in
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews statistics XSL [RT #18159].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18147] [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2386. [func] Add warning about too small 'open files' limit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2385. [bug] A condition variable in socket.c could leak in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare error handling [RT #17968].
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews2384. [security] Fully randomize UDP query ports to improve
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forgery resilience. [RT #17949, #18098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2383. [bug] named could double queries when they resulted in
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson SERVFAIL due to overkilling EDNS0 failure detection.
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson mysql. <prefix>/include/{,mysql/}mysql.h and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson proofs which, in turn, caused validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for insecure zones immediately below a secure zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server was authoritative for. [RT #18112]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2376. [bug] Change #2144 was not complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2375. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews to some uninitialized memory. [RT #18095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson new zone was configured, causing an overconsumption
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #18092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson when called on a nonexistent zone. [RT #18050]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2368. [port] Linux: use libcap for capability management if
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington possible. [RT #18026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2367. [bug] Improve counting of dns_resstatscounter_retry
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2366. [bug] Adb shutdown race. [RT #18021]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spurious results. [RT #18000]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson2364. [bug] named could trigger a assertion when serving a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malformed signed zone. [RT #17828]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson settable by "./configure --enable-fixed-rrset".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Disabled by default. [RT #17977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2361. [bug] "recursion" statistics counter could be counted
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson multiple times for a single query. [RT #17990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2360. [bug] Fix a condition where we release a database version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (which may acquire a lock) while holding the lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson OpenSSL 0.9.7f. [RT #17922]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2355. [func] Extend the number statistics counters available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dig +nsid' requests NSID from server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'request-nsid yes;' causes recursive server to send
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer NSID requests to upstream servers. Server responds
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to NSID requests with the string configured by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'server-id' option. [RT #17091]
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews2349. [func] Provide incremental re-signing support for secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamic zones. [RT #1091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington Documentation is in the new README.pkcs11 file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New tool, dnssec-keyfromlabel, which takes the
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews label of a key pair in a HSM and constructs a DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key pair for use by named and dnssec-signzone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews order. [RT #17451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in increased detail. [RT #17580]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2345. [bug] named-checkconf failed to detect when forwarders
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were set at both the options/view level and in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a root zone. [RT #17671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson2343. [bug] (Seemingly) duplicate IPv6 entries could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews created in ADB. [RT #17837]
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tree builds. [RT #17606]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2340. [port] openbsd: interface configuration. [RT #17700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson2336. [func] If "named -6" is specified then listen on all IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces if there are not listen-on-v6 clauses in
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson2335. [port] sunos: libbind and *printf() support for long long.
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bug in fromstruct_txt(). [RT #17609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington2331. [bug] Failure to regenerate any signatures was not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported nor being past back to the UPDATE client.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2330. [bug] Remove potential race condition when handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over memory events. [RT #17572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews WARNING: API CHANGE: over memory callback
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function now needs to call isc_mem_waterack().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See <isc/mem.h> for details.
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2327. [bug] It was possible to dereference a NULL pointer in
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson rbtdb.c. Implement dead node processing in zones as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews we do for caches. [RT #17312]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson2326. [bug] It was possible to trigger a INSIST in the acache
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews for RLIMIT_NOFILE. [RT #17526]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2321. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2320. [func] Make statistics counters thread-safe for platforms
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson that support certain atomic operations. [RT #17466]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2319. [bug] Silence Coverity warnings in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses in acl.c. [RT #17519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2314. [bug] Uninitialized memory use on error path in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #17447] [RT #17478]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews vice versa. [RT #17462]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed2310. [bug] dig, host, nslookup: flush stdout before emitting
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews debug/fatal messages. [RT #17501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2301. [bug] Remove resource leak and fix error messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2300. [bug] Fixed failure to close open file in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2299. [bug] Remove unnecessary NULL check in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2298. [bug] isc_mutex_lock() failure not caught in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2297. [bug] isc_entropy_createfilesource() failure not caught in
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson2296. [port] Allow docbook stylesheet location to be specified to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #17457]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2294. [func] Allow the experimental statistics channels to have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiple connections and ACL.
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson Note: the stats-server and stats-server-v6 options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available in the previous beta releases are replaced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with the generic statistics-channels statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2293. [func] Add ACL regression test. [RT #17375]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson2292. [bug] Log if the working directory is not writable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set in the response. [RT #17301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #17309]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson2288. [port] win32: mark service as running when we have finished
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loading. [RT #17441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2286. [func] Allow a TCP connection to be used as a weak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authentication method for reverse zones.
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington New update-policy methods tcp-self and 6to4-self.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2285. [func] Test framework for client memory context management.
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington2283. [bug] TSIG keys were not attaching to the memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. TSIG keys should use the rings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory context rather than the clients memory
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson context. [RT #17377]
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington2281. [bug] Attempts to use undefined acls were not being logged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2280. [func] Allow the experimental http server to be reached
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews over IPv6 as well as IPv4. [RT #17332]
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to protect applications from receiving spurious
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIGPIPE signals when using the resolver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2278. [bug] win32: handle the case where Windows returns no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews search list or DNS suffix. [RT #17354]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2277. [bug] Empty zone names were not correctly being caught at
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson in the post parse checks. [RT #17357]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT #17359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stub/slave master and journal files. [RT #17279]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before it is tested. [RT #17290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0b1 released ---
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson2267. [bug] Radix tree node_num value could be set incorrectly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing positive ACL matches to look like negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ones. [RT #17311]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2266. [bug] client.c:get_clientmctx() returned the same mctx
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews once the pool of mctx's was filled. [RT #17218]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington2265. [bug] Test that the memory context's basic_table is non NULL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before freeing. [RT #17265]
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington2264. [bug] Server prefix length was being ignored. [RT #17308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2263. [bug] "named-checkconf -z" failed to set default value
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson for "check-integrity". [RT #17306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2262. [bug] Error status from all but the last view could be
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson lost. [RT #17292]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews value. [RT #17236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2259. [placeholder]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington --- 9.5.0a7 released ---
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson2257. [bug] win32: Use the full path to vcredist_x86.exe when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling it. [RT #17222]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2256. [bug] win32: Correctly register the installation location of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading timer->idle allowing it to see
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews intermediate values as timer->idle was reset by
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson isc_timer_touch(). [RT #17243]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2253. [func] "max-cache-size" defaults to 32M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "max-acache-size" defaults to 16M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2251. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory statistics file should be written or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Additionally named's -m option will cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics file to be written. [RT #17113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence DNSSEC, per RFC 3655 [RT #17175]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence robust. [RT #17147]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2245. [bug] Validating lack of DS records at trust anchors wasn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews working. [RT #17151]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence2244. [func] Allow the check of nameserver names against the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA MNAME field to be disabled by specifying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'notify-to-soa yes;'. [RT #17073]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson2243. [func] Configuration files without a newline at the end now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parse without error. [RT #17120]
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews library could require a source of random data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a number of INSIST()s into plain fatal() errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which report the triggering result code.
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews The 'key' command wasn't disabling GSS-TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was canceled. [RT #17106]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of wildcard owner names. [RT #17085]
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2233. [func] Add support for O(1) ACL processing, based on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews radix tree code originally written by Kevin
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Brintnall. [RT #16288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_SUCCESS. [RT #17137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2230. [bug] We could INSIST reading a corrupted journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2229. [bug] Null pointer dereference on query pool creation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #17133]
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence2228. [contrib] contrib: Change 2188 was incomplete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson2226. [placeholder]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson2225. [bug] More support for systems with no IPv4 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2222. [func] named-checkconf now checks server key references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2221. [bug] Set the event result code to reflect the actual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record turned to caller when a cache update is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejected due to a more credible answer existing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2220. [bug] win32: Address a race condition in final shutdown of
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews the Windows socket code. [RT #17028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2219. [bug] Apply zone consistency checks to additions, not
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews removals, when updating. [RT #17049]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2217. [func] Adjust update log levels. [RT #17092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2214. [bug] Deregister OpenSSL lock callback when cleaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews is called before the locks are destroyed. [RT #17098]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong status code. [RT #17101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2212. [func] 'host -m' now causes memory statistics and active
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews memory to be printed at exit. [RT 17028]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2211. [func] Update "dynamic update temporarily disabled" message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2210. [bug] Deleting class specific records via UPDATE could
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews fail. [RT #17074]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2209. [port] osx: linking against user supplied static OpenSSL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libraries failed as the system ones were still being
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews found. [RT #17078]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2208. [port] win32: make sure both build methods produce the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same output. [RT #17058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews ai_canonname correctly. [RT #17061]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews --- 9.5.0a6 released ---
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson2206. [security] "allow-query-cache" and "allow-recursion" now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross inherit from each other.
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson If allow-query-cache is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-recursion is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2204. [bug] "rndc flushname name unknown-view" caused named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to crash. [RT #16984]
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews2203. [security] Query id generation was cryptographically weak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT # 16915]
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington2202. [security] The default acls for allow-query-cache and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion were not being applied. [RT #16960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2201. [bug] The build failed in a separate object directory.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2200. [bug] The search for cached NSEC records was stopping to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews early leading to excessive DLV queries. [RT #16930]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2199. [bug] win32: don't call WSAStartup() while loading dlls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2198. [bug] win32: RegCloseKey() could be called when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RegOpenKeyEx() failed. [RT #16911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not setting the event result code appropriately.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2196. [port] win32: yield processor while waiting for once to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to complete. [RT #16958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington when generating DNSKEYs. [RT #16954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews --- 9.5.0a5 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Studio's redistributable dlls if building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Visual Stdio 2005 or later.
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson2191. [func] named-checkzone now allows dumping to stdout (-).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkconf now has -h for help.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence named-checkzone now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Better handling of '-?' for usage summaries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence more visible. New logging category "edns-disabled".
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2189. [bug] Handle socket() returning EINTR. [RT #15949]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libresolv or libbind more robust. [RT #16299]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2187. [bug] query_addds(), query_addwildcardproof() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addnxrrsetnsec() should take a version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews argument. [RT #16368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews independently of IPv6. [RT #16482]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memchr(). [RT #16463]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2184. [bug] bind9.xsl.h didn't build out of the source tree.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2183. [bug] dnssec-signzone didn't handle offline private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well. [RT #16832]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could return ISC_R_SUCCESS when they ran out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #16365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
5455f30a7532738d750252c00e649890c694ee30Brian Wellington2180. [cleanup] Remove bit test from 'compress_test' as they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are no longer needed. [RT #16497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unique to all the views. [RT #16821]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a reference leak. [RT #16867]
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews2177. [bug] Array bounds overrun on read (rcodetext) at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug level 10+. [RT #16798]
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson2176. [contrib] dbus update to handle race condition during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialization (Bugzilla 235809). [RT #16842]
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson2175. [bug] win32: windows broadcast condition variable support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was broken. [RT #16592]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2174. [bug] I/O errors should always be fatal when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master files. [RT #16825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson --- 9.5.0a4 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers are not DS aware (DS queries to the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews return a referral to the child).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson given name and not the last name searched for.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2168. [bug] nsupdate: in non-interactive mode treat syntax errors
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson as fatal errors. [RT #16785]
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington2167. [bug] When re-using a automatic zone named failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attach it to the new view. [RT #16786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2166. [bug] When running in batch mode, dig could misinterpret
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a server address as a name to be looked up, causing
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson unexpected output. [RT #16743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2165. [func] Allow the destination address of a query to determine
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson if we will answer the query or recurse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-on, allow-recursion-on and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache-on. [RT #16291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2164. [bug] The code to determine how named-checkzone /
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews named-compilezone was called failed under windows.
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2163. [bug] If only one of query-source and query-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified a port the query pools code broke (change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2129). [RT #16768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #16665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from getifaddrs(). [RT #16708]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson --- 9.5.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2159. [bug] Array bounds overrun in acache processing. [RT #16710]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2158. [bug] ns_client_isself() failed to initialize key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leading to a REQUIRE failure. [RT #16688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2157. [func] dns_db_transfernode() created. [RT #16685]
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolver.c:validated() and resolver.c:cache_name().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix a memory leak in rbtdb.c:free_noqname().
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson Make lookup.c:lookup_find() robust against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews event leaks. [RT #16685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched in acls by omitting the scope. [RT #16599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson2152. [cleanup] Use sizeof(buf) instead of fixed number in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2151. [bug] Missing newline in usage message for journalprint.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson starting point for the first response for a given
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRset. [RT #16655]
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson2149. [bug] isc_mem_checkdestroyed() failed to abort on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there were still active memory contexts.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2148. [func] Add positive logging for rndc commands. [RT #14623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2147. [bug] libbind: remove potential buffer overflow from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews SO_BSDCOMPAT" message. [RT #16641]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2145. [bug] Check DS/DLV digest lengths for known digests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2143. [bug] We failed to restart the IPv6 client when the
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson kernel failed to return the destination the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews packet was sent to. [RT #16613]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington2142. [bug] Handle master files with a modification time that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matches the epoch. [RT #16612]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
55ddb88e53838693370c213930beda1652b8a583Brian Wellington equivalent of LDH checks). [RT #16609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2140. [bug] libbind: missing unlock on pthread_key_create()
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington failures. [RT #16654]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2139. [bug] dns_view_find() was being called with wrong type
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington in adb.c. [RT #16670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2137. [port] Mips little endian and/or mips 64 bit are now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported for atomic operations. [RT #16648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2136. [bug] nslookup/host looped if there was no search list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the host didn't exist. [RT #16657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2134. [func] Additional statistics support. [RT #16666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2133. [port] powerpc: Support both IBM and MacOS Power PC
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence assembler syntaxes. [RT #16647]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2132. [bug] Missing unlock on out of memory in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dispatchmgr_setudp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2130. [func] Log if CD or DO were set. [RT #16640]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington2129. [func] Provide a pool of UDP sockets for queries to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews and queryport-pool-updateinterval. [RT #16415]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2126. [security] Serialize validation of type ANY responses. [RT #16555]
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was defined. [RT #16574]
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson2124. [security] It was possible to dereference a freed fetch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. [RT #16584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2123. [func] Use Doxygen to generate internal documentation.
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington2122. [func] Experimental http server and statistics support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for named via xml.
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews second timeout. [RT #16553]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2120. [doc] Fix markup on nsupdate man page. [RT #16556]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson return the default domain even if it was unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to allocate memory.
b0390aab30438a13f533cccae9389945214b1421Brian Wellington2118. [bug] Handle response with long chains of domain name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compression pointers which point to other compression
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pointers. [RT #16427]
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which could lead to validation failures. named didn't
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson handle negative DS responses that were in the process
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of being validated. Check CNAME bit before accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NODATA proof. To be able to ignore a child NSEC there
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington must be SOA (and NS) set in the bitmap. [RT #16399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2116. [bug] 'rndc reload' could cause the cache to continually
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews be cleaned. [RT #16401]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2115. [bug] 'rndc reconfig' could trigger a INSIST if the
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson number of masters for a zone was reduced. [RT #16444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2114. [bug] dig/host/nslookup: searches for names with multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews labels were failing. [RT #16447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2113. [bug] nsupdate: if a zone is specified it should be used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for server discover. [RT #16455]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2112. [security] Warn if weak RSA exponent is used. [RT #16460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2111. [bug] Fix a number of errors reported by Coverity.
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews priming queries. [RT #16491]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2108. [func] DHCID support. [RT #16456]
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2106. [func] 'rndc status' now reports named's version. [RT #16426]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2105. [func] GSS-TSIG support (RFC 3645).
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews2104. [port] Fix Solaris SMF error message.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2103. [port] Add /usr/sfw to list of locations for OpenSSL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews under Solaris.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2102. [port] Silence Solaris 10 warnings.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2101. [bug] OpenSSL version checks were not quite right.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2100. [port] win32: copy libeay32.dll to Build\Debug.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Copy Debug\named-checkzone to Debug\named-compilezone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2099. [port] win32: more manifest issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2098. [bug] Race in rbtdb.c:no_references(), which occasionally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews triggered an INSIST failure about the node lock
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson reference. [RT #16411]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2097. [bug] named could reference a destroyed memory context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after being reloaded / reconfigured. [RT #16428]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2096. [bug] libbind: handle applications that fail to detect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews res_init() failures better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews net_cidr_ntop_ipv6(). [RT #16388]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2094. [contrib] Update named-bootconf. [RT #16404]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington2093. [bug] named-checkzone -s was broken.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2092. [bug] win32: dig, host, nslookup. Use registry config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if resolv.conf does not exist or no nameservers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listed. [RT #15877]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2091. [port] dighost.c: race condition on cleanup. [RT #16417]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2090. [port] win32: Visual C++ 2005 command line manifest support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2089. [security] Raise the minimum safe OpenSSL versions to
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prior to these have known security flaws which
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews are (potentially) exploitable in named. [RT #16391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2086. [port] libbind: FreeBSD now has get*by*_r() functions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2085. [doc] win32: added index.html and README to zip. [RT #16201]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2084. [contrib] dbus update for 9.3.3rc2.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2083. [port] win32: Visual C++ 2005 support.
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews2082. [doc] Document 'cache-file' as a test only option.
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2080. [port] libbind: res_init.c did not compile on older versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of Solaris. [RT #16363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2079. [bug] The lame cache was not handling multiple types
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson correctly. [RT #16361]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2078. [bug] dnssec-checkzone output style "default" was badly
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington named. It is now called "relative". [RT #16326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete signed zone. [RT #16326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2076. [bug] Several files were missing #include <config.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing build failures on OSF. [RT #16341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2075. [bug] The spillat timer event hander could leak memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_createraw2() and dns_request_createraw3()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to send multiple UDP requests. [RT #16349]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson2073. [bug] Incorrect semantics check for update policy "wildcard".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2072. [bug] We were not generating valid HMAC SHA digests.
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington2071. [port] Test whether gcc accepts -fno-strict-aliasing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2070. [bug] The remote address was not always displayed when
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington reporting dispatch failures. [RT #16315]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2068. [cleanup] Lower incremental tuning message to debug 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2067. [bug] 'rndc' could close the socket too early triggering
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson a INSIST under Windows. [RT #16317]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2066. [security] Handle SIG queries gracefully. [RT #16300]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews2065. [bug] libbind: probe for HPUX prototypes for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews endprotoent_r() and endservent_r(). [RT 16313]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2063. [bug] Change #1955 introduced a bug which caused the first
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson 'rndc flush' call to not free memory. [RT #16244]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley been returned by the socket code. [RT #16307]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2061. [bug] Accept expired wildcard message reversed. [RT #16296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2060. [bug] Enabling DLZ support could leave views partially
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington configured. [RT #16295]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2059. [bug] Search into cache rbtdb could trigger an INSIST
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington failure while cleaning up a stale rdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2058. [bug] Adjust how we calculate rtt estimates in the presence
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of authoritative servers that drop EDNS and/or CD
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson requests. Also fallback to EDNS/512 and plain DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews faster for zones with less than 3 servers. [RT #16187]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2057. [bug] Make setting "ra" dependent on both allow-query-cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow-recursion. [RT #16290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington at all times. [RT #15955]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2055. [bug] Missing goto after dropping multicast query.
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2054. [port] freebsd: do not explicitly link against -lpthread.
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2052. [bug] 'rndc' improve connect failed message to report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the failing address. [RT #15978]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2051. [port] More strtol() fixes. [RT #16249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2050. [bug] Parsing of NSAP records was not case insensitive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2049. [bug] Restore SOA before AXFR when falling back from
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson a attempted IXFR when transferring in a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Allow a initial SOA query before attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a AXFR to be requested. [RT #16156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2048. [bug] It was possible to loop forever when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoid-v4-udp-ports / avoid-v6-udp-ports when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the OS always returned the same local port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2047. [bug] Failed to initialize the interface flags to zero.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews cleanup [RT #16247].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2045. [func] Use lock buckets for acache entries to limit memory
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson consumption. [RT #16183]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2044. [port] Add support for atomic operations for Itanium.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2043. [port] nsupdate/nslookup: Force the flushing of the prompt
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington for interactive sessions. [RT #16148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington logging category "config". [RT #16117]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington set of libraries to be linked. [RT #16129]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2040. [bug] rbtdb no_references() could trigger an INSIST
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington failure with --enable-atomic. [RT #16022]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2039. [func] Check that all buffers passed to the socket code
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson have been retrieved when the socket event is freed.
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2038. [bug] dig/nslookup/host was unlinking from wrong list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when handling errors. [RT #16122]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2037. [func] When unlinking the first or last element in a list
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews check that the list head points to the element to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be unlinked. [RT #15959]
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson2035. [func] Make falling back to TCP on UDP refresh failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews optional. Default "try-tcp-refresh yes;" for BIND 8
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington compatibility. [RT #16123]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2033. [bug] We weren't creating multiple client memory contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on demand as expected. [RT #16095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2031. [bug] Emit a error message when "rndc refresh" is called on
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson a non slave/stub zone. [RT # 16073]
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson2030. [bug] We were being overly conservative when disabling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews openssl engine support. [RT #16030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2029. [bug] host printed out the server multiple times when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified on the command line. [RT #15992]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2028. [port] linux: socket.c compatibility for old systems.
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2027. [port] libbind: Solaris x86 support. [RT #16020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2026. [bug] Rate limit the two recursive client exceeded messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2025. [func] Update "zone serial unchanged" message. [RT #16026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2024. [bug] named emitted spurious "zone serial unchanged"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages on reload. [RT #16027]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2023. [bug] "make install" should create ${localstatedir}/run and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD was requested. [RT #16037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington2019. [tuning] Reduce the amount of work performed per quantum
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when cleaning the cache. [RT #15986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2018. [bug] Checking if the HMAC MD5 private file was broken.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2017. [bug] allow-query default was not correct. [RT #15946]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2016. [bug] Return a partial answer if recursion is not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allowed but requested and we had the answer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the original qname. [RT #15945]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2015. [cleanup] use-additional-cache is now acache-enable for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency. Default acache-enable off in BIND 9.4
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews as it requires memory usage to be configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It may be enabled by default in BIND 9.5 once we
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews have more experience with it.
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews2014. [func] Statistics about acache now recorded and sent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to log. [RT #15976]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews responses more gracefully. [RT #15941]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson the signed zone, either as an increment or as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews system time(). [RT #15633]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2010. [placeholder] rt15958
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2009. [bug] libbind: Coverity fixes. [RT #15808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2008. [func] It is now possible to enable/disable DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation from rndc. This is useful for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews mobile hosts where the current connection point
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington breaks DNSSEC (firewall/proxy). [RT #15592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc validation newstate [view]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2007. [func] It is now possible to explicitly enable DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation. default dnssec-validation no; to
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson be changed to yes in 9.5.0. [RT #15674]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2006. [security] Allow-query-cache and allow-recursion now default
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the built in acls "localnets" and "localhost".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is being done to make caching servers less
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attractive as reflective amplifying targets for
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington spoofed traffic. This still leave authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers exposed.
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington The best fix is for full BCP 38 deployment to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remove spoofed traffic.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2005. [bug] libbind: Retransmission timeouts should be
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington based on which attempt it is to the nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and not the nameserver itself. [RT #13548]
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2004. [bug] dns_tsig_sign() could pass a NULL pointer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_context_destroy() when cleaning up after a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #15835]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2003. [bug] libbind: The DNS name/address lookup functions could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews occasionally follow a random pointer due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structures not being completely zeroed. [RT #15806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2002. [bug] libbind: tighten the constraints on when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews struct addrinfo._ai_pad exists. [RT #15783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New zone option "update-check-ksk yes;". [RT #15817]
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson1998. [bug] Restrict handling of fifos as sockets to just SunOS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows named to connect to entropy gathering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews daemons that use fifos instead of sockets. [RT #15840]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1997. [bug] Named was failing to replace negative cache entries
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington when a positive one for the type was learnt.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1996. [bug] nsupdate: if a zone has been specified it should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear in the output of 'show'. [RT #15797]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1995. [bug] 'host' was reporting multiple "is an alias" messages.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington1994. [port] OpenSSL 0.9.8 support. [RT #15694]
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington1993. [bug] Log messages, via syslog, were missing the space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after the timestamp if "print-time yes" was specified.
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington1992. [bug] Not all incoming zone transfer messages included the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews view. [RT #15825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1991. [cleanup] The configuration data, once read, should be treated
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews as read only. Expand the use of const to enforce this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compile time. [RT #15813]
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer1990. [bug] libbind: isc's override of broken gettimeofday()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations was not always effective.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1989. [bug] win32: don't check the service password when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews re-installing. [RT #15882]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1986. [func] Report when a zone is removed. [RT #15849]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley1985. [protocol] DLV has now been assigned a official type code of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 32769. [RT #15807]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: care should be taken to ensure you upgrade
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews both named and dnssec-signzone at the same time for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones with DLV records where named is the master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the zone. Also any zones that contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records should be removed when upgrading a slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. You do not however have to upgrade all
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence servers for a zone with DLV records simultaneously.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson1984. [func] dig, nslookup and host now advertise a 4096 byte
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS UDP buffer size by default. [RT #15855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1983. [func] Two new update policies. "selfsub" and "selfwild".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1982. [bug] DNSKEY was being accepted on the parent side of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a delegation. KEY is still accepted there for
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence RFC 3007 validated updates. [RT #15620]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews1981. [bug] win32: condition.c:wait() could fail to reattain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the mutex lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1980. [func] dnssec-signzone: output the SOA record as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews first record in the signed zone. [RT #15758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1979. [port] linux: allow named to drop core after changing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews user ids. [RT #15753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1978. [port] Handle systems which have a broken recvmsg().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1977. [bug] Silence noisy log message. [RT #15704]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington1975. [bug] libbind: isc_gethexstring() could misparse multi-line
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hex strings with comments. [RT #15814]
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence1974. [doc] List each of the zone types and associated zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options separately in the ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence HMACSHA512 support. [RT #13606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1972. [contrib] DBUS dynamic forwarders integration from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Jason Vas Dias <jvdias@redhat.com>.
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence1971. [port] linux: make detection of missing IF_NAMESIZE more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews robust. [RT #15443]
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington1970. [bug] nsupdate: adjust UDP timeout when falling back to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned SOA query. [RT #15775]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence1969. [bug] win32: the socket code was freeing the socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structure too early. [RT #15776]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1966. [bug] Don't set CD when we have fallen back to plain DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1965. [func] Suppress spurious "recursion requested but not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available" warning with 'dig +qr'. [RT #15780].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1963. [port] Tru64 4.0E doesn't support send() and recv().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1962. [bug] Named failed to clear old update-policy when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was removed. [RT #15491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1961. [bug] Check the port and address of responses forwarded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to dispatch. [RT #15474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1959. [func] Control the zeroing of the negative response TTL to
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington a soa query. Defaults "zero-no-soa-ttl yes;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "zero-no-soa-ttl-cache no;". [RT #15460]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson1958. [bug] Named failed to update the zone's secure state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews until the zone was reloaded. [RT #15412]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by native compiler. See README for additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross compile support information. [RT #15148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington1954. [func] Named now falls back to advertising EDNS with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 512 byte receive buffer if the initial EDNS queries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #14852]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson1953. [func] The maximum EDNS UDP response named will send can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now be set in named.conf (max-udp-size). This is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews independent of the advertised receive buffer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (edns-udp-size). [RT #14852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington path "-Wl,+b:". [RT #14816].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1951. [security] Drop queries from particular well known ports.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson Don't return FORMERR to queries from particular
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well known ports. [RT #15636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a TCP socket. This prevents the source address being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set for TCP connections. [RT #15628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson1948. [bug] If was possible to trigger a REQUIRE failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews xfrin.c:maybe_free() if named ran out of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1947. [func] It is now possible to configure named to accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Setting "dnssec-accept-expired yes;" leaves named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews vulnerable to replay attacks. [RT #14685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when using forwarders. [RT #15549]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To generate a RSAMD5 key you must explicitly request
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSAMD5. [RT #13780]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1942. [bug] If the name of a DNSKEY match that of one in
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington trusted-keys do not attempt to validate the DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using the parents DS RRset. [RT #15649]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington1941. [bug] ncache_adderesult() should set eresult even if no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset is passed to it. [RT #15642]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington1940. [bug] Fixed a number of error conditions reported by
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson1939. [bug] The resolver could dereference a null pointer after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation if all the queries have timed out.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson1938. [bug] The validator was not correctly handling unsecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative responses at or below a SEP. [RT #15528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer1936. [bug] The validator could leak memory. [RT #15544]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prior to returning them if it can be done without
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington requiring DNSKEYs to be fetched. [RT #15430]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particularly for a busy caching server. [RT #15519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington1927. [bug] Access to soanode or nsnode in rbtdb violated the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lock order rule and could cause a dead lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1926. [bug] The Windows installer did not check for empty
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews passwords. BINDinstall was being installed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the wrong place. [RT #15483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defaults. [RT #15469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1923. [bug] ns_client_detach() called too early. [RT #15499]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_log_setcontext().
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson1921. [bug] Client memory contexts were not using internal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malloc. [RT #15434]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1920. [bug] The cache rbtdb lock array was too small to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews have the desired performance characteristics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson response delays, printing intermediate results, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adjusting query rate for the "target" qps.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson1918. [bug] Memory leak when checking acls. [RT #15391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson when generating man pages. [RT #15385]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews (RFC 4034). Still emit numeric algorithms for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility with RFC 3658. [RT #15354]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1911. [bug] Update windows socket code. [RT #14965]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1910. [bug] dig's +sigchase code overhauled. [RT #14933]
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson1909. [bug] The DLV code has been re-worked to make no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query order sensitive. [RT #14933]
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews1908. [func] dig now warns if 'RA' is not set in the answer when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'RD' was set in the query. host/nslookup skip servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that fail to set 'RA' when 'RD' is set unless a server
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley is explicitly set. [RT #15005]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treated as read-only. The prototype for
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews cfg_obj_asstring() has been updated to reflect this.
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews friends. Note: RFC 1918 zones are not yet covered by
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews this but are likely to be in a future release.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New options: empty-server, empty-contact,
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson empty-zones-enable and disable-empty-zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1903. [func] ISC string copy API.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1902. [func] Attempt to make the amount of work performed in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews iteration self tuning. The covers nodes clean from
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson the cache per iteration, nodes written to disk when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rewriting a master file and nodes destroyed per
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews iteration when destroying a zone or a cache.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson1901. [cleanup] Don't add DNSKEY records to the additional section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1900. [bug] ixfr-from-differences failed to ensure that the
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley serial number increased. [RT #15036]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1899. [func] named-checkconf now validates update-policy entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson as expected. [RT #15103]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1895. [bug] A escaped character is, potentially, converted to
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson the output character set too early. [RT #14666]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson1894. [doc] Review ARM for BIND 9.4.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #14995]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson1890. [func] Raise the UDP receive buffer size to 32k if it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews less than 32k. [RT #14953]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1889. [port] sunos: non blocking i/o support. [RT #14951]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence1888. [func] Support for IPSECKEY rdata type. [RT #14967]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1887. [bug] The cache could delete expired records too fast for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clients with a virtual time in the past. [RT #14991]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1886. [bug] fctx_create() could return success even though it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed. [RT #14993]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1885. [func] dig: report the number of extra bytes still left in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the packet after processing all the records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews levels. [RT #14962]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson1882. [func] Limit the number of recursive clients that can be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews waiting for a single query (<qname,qtype,qclass>) to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolve. New options clients-per-query and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-clients-per-query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson1880. [func] The lame cache is now done on a <qname,qclass,qtype>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews basis as some servers only appear to be lame for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews certain query types. [RT #14916]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson1878. [func] Detect duplicates of UDP queries we are recursing on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and drop them. New stats category "duplicate".
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson1877. [bug] Fix unreasonably low quantum on call to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews call. [RT #14919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1876. [func] Additional memory debugging support to track size
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews and mctx arguments. [RT #14814]
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to free some memory. [RT #14890]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1874. [port] sunos: portability fixes. [RT #14814]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson1871. [placeholder]
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews1870. [func] Added framework for handling multiple EDNS versions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1869. [func] dig can now specify the EDNS version when making
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a query. [RT #14873]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1868. [func] edns-udp-size can now be overridden on a per
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews server basis. [RT #14851]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington1867. [bug] It was possible to trigger a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlv_validatezonekey(). [RT #14846]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1866. [bug] resolv.conf parse errors were being ignored by
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bad addresses. [RT #14841]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1864. [bug] Don't try the alternative transfer source if you
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews got a answer / transfer with the main source
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews address. [RT #14802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1862. [func] Add additional zone data constancy checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone has extended checking of NS, MX and
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence SRV record and the hosts they reference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named has extended post zone load checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New zone options: check-mx and integrity-check.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews responses. [RT #14801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly set. [RT #14775]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews1859. [func] Add support for CH A record. [RT #14695]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsed. [RT #14686]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reloaded too fast. [RT #14673]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington1855. [bug] ixfr-from-differences was failing to detect changes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of records. [RT #14616]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1854. [bug] lwres also needs to know the print format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (long long). [RT #13754]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1853. [bug] Rework how DLV interacts with proveunsecure().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson dnssec-makekeyset (removed from Makefile years ago).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington1849. [doc] All forms of the man pages (docbook, man, html) should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have consistent copyright dates.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1848. [bug] Improve SMF integration. [RT #13238]
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews1847. [bug] isc_ondestroy_init() is called too late in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <bortzmeyer@nic.fr>.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence1845. [bug] Improve error reporting to distinguish between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept()/fcntl() and socket()/fcntl() errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for each 16 bit piece of the IPv6 address. The text
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews representation of a IPv6 address has been tightened
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley when CFLAGS contains "-I /usr/local/include"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in old header files being used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1842. [port] cmsg_len() could produce incorrect results on
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley some platform. [RT #13744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews find the list of nameservers to query. [RT #13694]
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews1840. [func] dnssec-signzone can now randomize signature end times
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (dnssec-signzone -j jitter). [RT #13609]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews1839. [bug] <isc/hash.h> was not being installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
588b63e1a86fb707172830e14897da624ed380edMark Andrews for 'named -u <user>'. [RT #13714]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1836. [cleanup] Silence compiler warnings in hash_test.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews1834. [bug] Bad memset in rdata_test.c. [RT #13658]
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1831. [doc] Update named-checkzone documentation. [RT #13604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews1829. [bug] win32: "pid-file none;" broken. [RT #13563]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington1828. [bug] isc_rwlock_init() failed to properly cleanup if it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews encountered a error. [RT #13549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory error. [RT #13537]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1825. [bug] Missing UNLOCK() on out of memory error from in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rbtdb.c:subtractrdataset(). [RT #13519]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1824. [bug] Memory leak on dns_zone_setdbtype() failure.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1823. [bug] Wrong macro used to check for point to point interface.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1822. [bug] check-names test for RT was reversed. [RT #13382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1821. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1819. [bug] The validator needed to check both the algorithm and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews digest types of the DS to determine if it could be
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson used to introduce a secure zone. [RT #13593]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington1817. [func] Add support for additional zone file formats for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improving loading performance. The masterfile-format
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington option in named.conf can be used to specify a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-default format. A separate command
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews named-compilezone was provided to generate zone files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the new format. Additionally, the -I and -O options
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews for dnssec-signzone specify the input and output
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without also setting the zone and it encountered
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson a CNAME and was using TSIG. [RT #13086]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1814. [func] UNIX domain controls are now supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1813. [func] Restructured the data locking framework using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews architecture dependent atomic operations (when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available), improving response performance on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-processor machines significantly.
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews x86, x86_64, alpha, powerpc, and mips are currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer1811. [func] Preserve the case of domain names in rdata during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone transfers. [RT #13547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1810. [bug] configure, lib/bind/configure make different default
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer decisions about whether to do a threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1809. [bug] "make distclean" failed for libbind if the platform
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson is not supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1808. [bug] zone.c:notify_zone() contained a race condition,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone->db could change underneath it. [RT #13511]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews1807. [bug] When forwarding (forward only) set the active domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the forward zone name. [RT #13526]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews1806. [bug] The resolver returned the wrong result when a CNAME /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME was encountered when fetching glue from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews secure namespace. [RT #13501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1805. [bug] Pending status was not being cleared when DLV was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active. [RT #13501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1804. [bug] Ensure that if we are queried for glue that it fits
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson in the additional section or TC is set to tell the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews client to retry using TCP. [RT #10114]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson1803. [bug] dnssec-signzone sometimes failed to remove old
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRSIGs. [RT #13483]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson1802. [bug] Handle connection resets better. [RT #11280]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1801. [func] Report differences between hints and real NS rrset
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson and associated address records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1800. [bug] Changes #1719 allowed a INSIST to be triggered.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1799. [bug] 'rndc flushname' failed to flush negative cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #13438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1798. [func] The server syntax has been extended to support a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of servers. [RT #11132]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1797. [func] named-checkconf now check acls to verify that they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only refer to existing acls. [RT #13101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1795. [bug] "rndc dumpdb" was not fully documented. Minor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1794. [func] Named and named-checkzone can now both check for
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson non-terminal wildcard records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1793. [func] Extend adjusting TTL warning messages. [RT #13378]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1792. [func] New zone option "notify-delay". Specify a minimum
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews delay between sets of NOTIFY messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow parallel make to succeed.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews1789. [bug] Prerequisite test for tkey and dnssec could fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with "configure --with-libtool".
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews1788. [bug] libbind9.la/libbind9.so needs to link against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
051beeafa6547440da17985665b31952b85ede56Brian Wellington1786. [port] AIX: libt_api needs to be taught to look for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews T_testlist in the main executable (--with-libtool).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1785. [bug] libbind9.la/libbind9.so needs to link against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1784. [cleanup] "libtool -allow-undefined" is the default.
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence Leave hooks in configure to allow it to be set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if needed in the future.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer1782. [port] OSX: --with-libtool + --enable-libbind broke on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __evOptMonoTime. [RT #13219]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer1780. [bug] Update libtool to 1.5.10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1774. [port] Aix: Silence compiler warnings / build failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1773. [bug] Fast retry on host / net unreachable. [RT #13153]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1772. [placeholder]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews1771. [placeholder]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews1770. [bug] named-checkconf failed to report missing a missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file clause for rbt{64} master/hint zones. [RT #13009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1769. [port] win32: change compiler flags /MTd ==> /MDd,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /MT ==> /MD.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer rdataset. [RT #12907]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for (struct in6_pktinfo) failed. [RT #13077]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews1766. [bug] Update the master file timestamp on successful refresh
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the journal's timestamp. [RT #13062]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1765. [bug] configure --with-openssl=auto failed. [RT #12937]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1764. [bug] dns_zone_replacedb failed to emit a error message
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff if there was no SOA record in the replacement db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1763. [func] Perform sanity checks on NS records which refer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'in zone' names. [RT #13002]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews even when it failed. [RT #12995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
ba43c53451d5c38765f376eeede457178b36951aBob Halley estimates. [RT #12970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1759. [bug] Named failed to startup if the OS supported IPv6
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews but had no IPv6 interfaces configured. [RT #12942]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews1758. [func] Don't send notify messages to self. [RT #12933]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews1757. [func] host now can turn on memory debugging flags with '-m'.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff1756. [func] named-checkconf now checks the logging configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1755. [func] allow-update is now settable at the options / view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level. [RT #6636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1754. [bug] We weren't always attempting to query the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the DS records at the zone cut.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1753. [bug] Don't serve a slave zone which has no NS records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as some fork() implementations unblock the signals
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that are blocked by isc_app_start(). [RT #12810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1749. [bug] 'check-names response ignore;' failed to ignore.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1748. [func] dig now returns the byte count for axfr/ixfr.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff1747. [bug] BIND 8 compatibility: named/named-checkconf failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to parse "host-statistics-max" in named.conf.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff1746. [func] Make public the function to read a key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_key_read_public(). [RT #12450]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1745. [bug] Dig/host/nslookup accept replies from link locals
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington regardless of scope if no scope was specified when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query was sent. [RT #12745]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1744. [bug] If tuple2msgname() failed to convert a tuple to
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley a name a REQUIRE could be triggered. [RT #12796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1743. [bug] If isc_taskmgr_create() was not able to create the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requested number of worker threads then destruction
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the manager would trigger an INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1742. [bug] Deleting all records at a node then adding a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews previously existing record, in a single UPDATE
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson transaction, failed to leave / regenerate the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews associated RRSIG records. [RT #12788]
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson1741. [bug] Deleting all records at a node in a secure zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using a update-policy grant failed. [RT #12787]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1740. [bug] Replace rbt's hash algorithm as it performed badly
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington with certain zones. [RT #12729]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NOTE: a hash context now needs to be established
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via isc_hash_create() if the application was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews already doing this.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_QUOTA. [RT #12695]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff1738. [bug] Enable overrun checking by default. [RT #12695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1737. [bug] named failed if more than 16 masters were specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1736. [bug] dst_key_fromnamedfile() could fail to read a
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson public key. [RT #12687]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1733. [bug] Return non-zero exit status on initial load failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson1731. [port] darwin: relax version test in ifconfig.sh.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1730. [port] Determine the length type used by the socket API.
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson1729. [func] Improve check-names error messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1728. [doc] Update check-names documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1727. [bug] named-checkzone: check-names support didn't match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1726. [port] aix5: add support for aix5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1725. [port] linux: update error message on interaction of threads,
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson capabilities and setuid support (named -u). [RT #12541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1724. [bug] Look for DNSKEY records with "dig +sigtrace".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson1722. [bug] Don't commit the journal on malformed ixfr streams.
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson1721. [bug] Error message from the journal processing were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always identifying the relevant journal. [RT #12519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson negative response. [RT #12506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1719. [bug] named was not correctly caching a RFC 2308 Type 1
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington negative response. [RT #12506]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses when looking for the zone / master server.
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson1717. [port] solaris: ifconfig.sh did not support Solaris 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "ifconfig.sh down" didn't work for Solaris 9.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1716. [doc] named.conf(5) was being installed in the wrong
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington location. [RT #12441]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington1715. [func] 'dig +trace' now randomly selects the next servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to try. Report if there is a bad delegation.
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson1714. [bug] dig/host/nslookup were only trying the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address when a nameserver was specified by name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1713. [port] linux: extend capset failure message to say:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews please ensure that the capset kernel module is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded. see insmod(8)
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages for the specified zone. [RT #9479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1709. [port] solaris: add SMF support from Sun.
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for conformance to the name space convention. Binary
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews backward compatibility to the old function name is
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews provided. [RT #12376]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #12328]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews1704. [port] lwres needed a snprintf() implementation for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms without snprintf(). Add missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "#include <isc/print.h>". [RT #12321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson failed to receive a response. [RT #12322]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1702. [bug] also-notify should not be applied to built in zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1701. [doc] A minimal named.conf man page.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Remove "deprecated" warning message. Add man page.
6d3f954c572db02159deedd444373161fda47a88Brian Wellington1699. [bug] dnssec-signzone can generate "not exact" errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when resigning. [RT #12281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson1697. [bug] xxx-source{,-v6} was not effective when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified one of listening addresses and a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different port than the listening port. [RT #12257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consisted of only NSEC and RRSIG records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1695. [bug] DS records when forwarding require special handling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington are defined in named.conf. [RT #12023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1693. [bug] max-journal-size was not effective for master zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with ixfr-from-differences set. [RT #12024]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews processing completes when shutting down. [RT #11714]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson contained gratuitous semicolons. [RT #11707]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1688. [bug] LDFLAGS was not supported.
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington1687. [bug] Race condition in dispatch. [RT #10272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1686. [bug] Named sent a extraneous NOTIFY when it received a
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson redundant UPDATE request. [RT #11943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1685. [bug] Change #1679 loop tests weren't quite right.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson1684. [func] ixfr-from-differences now takes master and slave in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to yes and no at the options and view levels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1683. [bug] dig +sigchase could leak memory. [RT #11445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1682. [port] Update configure test for (long long) printf format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1681. [bug] Only set SO_REUSEADDR when a port is specified in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_socket_bind(). [RT #11742]
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews1680. [func] rndc: the source address can now be specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1679. [bug] When there was a single nameserver with multiple
385a9cb48a70b329e507c39d043fa9a44c659913James Brister addresses for a zone not all addresses were tried.
385a9cb48a70b329e507c39d043fa9a44c659913James Brister1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1676. [func] New option "allow-query-cache". This lets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query be used to specify the default zone
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer access level rather than having to have every
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone override the global value. allow-query-cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be set at both the options and view levels.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer If allow-query-cache is not set allow-query applies.
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington1675. [bug] named would sometimes add extra NSEC records to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the authority section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1674. [port] linux: increase buffer size used to scan
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence1673. [port] linux: issue a error messages if IPv6 interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scans fails.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence1672. [cleanup] Tests which only function in a threaded build
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now return R:THREADONLY (rather than R:UNTESTED)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a non-threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1670. [func] Log UPDATE requests to slave zones without an acl as
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence "disabled" at debug level 3. [RT #11657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1669. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1667. [port] linux: not all versions have IF_NAMESIZE.
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington1666. [bug] The optional port on hostnames in dual-stack-servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was being ignored.
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington1665. [func] rndc now allows addresses to be set in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server clauses.
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson1663. [func] Look for OpenSSL by default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1662. [bug] Change #1658 failed to change one use of 'type'
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington to 'keytype'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1661. [bug] Restore dns_name_concatenate() call in
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson adb.c:set_target(). [RT #11582]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1660. [bug] win32: connection_reset_fix() was being called
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington unconditionally. [RT #11595]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1659. [cleanup] Cleanup some messages that were referring to KEY vs
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson DNSKEY, NXT vs NSEC and SIG vs RRSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and DH. Tighten which options apply to KEY and
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington DNSKEY records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1657. [doc] ARM: document query log output.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY and RRSIG. [RT #11542]
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer1655. [bug] Logging multiple versions w/o a size was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1654. [bug] isc_result_totext() contained array bounds read
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DST_TYPE_KEY should be used to read TSIG, TKEY and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIG(0) keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1652. [bug] TKEY still uses KEY.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1651. [bug] dig: process multiple dash options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1650. [bug] dig, nslookup: flush standard out after each command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1649. [bug] Silence "unexpected non-minimal diff" message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1648. [func] Update dnssec-lookaside named.conf syntax to support
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson multiple dnssec-lookaside namespaces (not yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence record that required walking back over a empty node.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence1646. [bug] win32: logging file versions didn't work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-UNC filenames. [RT #11486]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1645. [bug] named could trigger a REQUIRE failure if multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews masters with keys are specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1644. [bug] Update the journal modification time after a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successful refresh query. [RT #11436]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references. [RT #11163]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington1642. [port] Support OpenSSL implementations which don't have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DSA support. [RT #11360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1641. [bug] Update the check-names description in ARM. [RT #11389]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly closing the socket. [RT #11291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1639. [func] Initial dlv system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1638. [bug] "ixfr-from-differences" could generate a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure if the journal open failed. [RT #11347]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1637. [bug] Node reference leak on error in addnoqname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a error had occurred. The database version no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched the version of the database that was dumped.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1635. [bug] Memory leak on error in query_addds().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1634. [bug] named didn't supply a useful error message when it
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson detected duplicate views. [RT #11208]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slaves without a allow-update-forwarding acl specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1632. [bug] nsupdate failed to send prerequisite only UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #11288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1631. [bug] dns_journal_compact() could sometimes corrupt the
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister journal. [RT #11124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1630. [contrib] queryperf: add support for IPv6 transport.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1629. [func] dig now supports IPv6 scoped addresses with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews extended format in the local-server part. [RT #8753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1628. [bug] Typo in Compaq Trucluster support. [RT #11264]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1627. [bug] win32: sockets were not being closed when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews last external reference was removed. [RT #11179]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1626. [bug] --enable-getifaddrs was broken. [RT #11259]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1625. [bug] named failed to load/transfer RFC2535 signed zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which contained CNAMES. [RT #11237]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1624. [bug] zonemgr_putio() call should be locked. [RT #11163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1623. [bug] A serial number of zero was being displayed in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "sending notifies" log message when also-notify was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used. [RT #11177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson available, and suppress wildcard binding if not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1621. [bug] match-destinations did not work for IPv6 TCP queries.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson1620. [func] When loading a zone report if it is signed. [RT #11149]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
5096958739769958dd7a6b69356bf41260033873David Lawrence1618. [bug] Fencepost errors in dns_name_ishostname() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_ismailbox() could trigger a INSIST().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1617. [port] win32: VC++ 6.0 support.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence1616. [compat] Ensure that named's version is visible in the core
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dump. [RT #11127]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is defined.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence1614. [port] win32: silence resource limit messages. [RT #11101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1612. [bug] check-names at the option/view level could trigger
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews an INSIST. [RT #11116]
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister1611. [bug] solaris: IPv6 interface scanning failed to cope with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no active IPv6 interfaces.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington1610. [bug] On dual stack machines "dig -b" failed to set the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address type to be looked up with "@server".
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington1609. [func] dig now has support to chase DNSSEC signature chains.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC validation code in dig coded by Olivier Courtay
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (olivier.courtay@irisa.fr) for the IDsA project
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1608. [func] dig and host now accept -4/-6 to select IP transport
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister to use when making queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1607. [bug] dig, host and nslookup were still using random()
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister to generate query ids. [RT #11013]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister1606. [bug] DLV insecurity proof was failing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1604. [bug] A xfrout_ctx_create() failure would result in
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence xfrout_ctx_destroy() being called with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews partially initialized structure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1603. [bug] nsupdate: set interactive based on isatty().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1602. [bug] Logging to a file failed unless a size was specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1601. [bug] Silence spurious warning 'both "recursion no;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "allow-recursion" active' warning from view "_bind".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1600. [bug] Duplicate zone pre-load checks were not case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insensitive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1598. [func] Specify that certain parts of the namespace must
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be secure (dnssec-must-be-secure).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1597. [func] Allow notify-source and query-source to be specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on a per server basis similar to transfer-source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1595. [func] New notify type 'master-only'. Enable notify for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master zones only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries while the dump was in progress. [RT #10565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1593. [bug] rndc should return "unknown command" to unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands. [RT #10642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1592. [bug] configure_view() could leak a dispatch. [RT #10675]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1591. [bug] libbind: updated to BIND 8.4.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1590. [port] netbsd: update thread support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1589. [func] DNSSEC lookaside validation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1587. [bug] dns_message_settsigkey() failed to clear existing key.
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence1586. [func] "check-names" is now implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1585. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1584. [bug] "make test" failed with a read only source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level. [RT #10452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1582. [bug] rrset-order failed to work on RRsets with more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 32 elements. [RT #10381]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson1581. [func] Disable DNSSEC support by default. To enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1580. [bug] Zone destruction on final detach takes a long time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1579. [bug] Multiple task managers could not be created.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews workaround code. [RT #10331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson1574. [bug] Don't attempt to open the controls socket(s) when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews running tests. [RT #9091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1573. [port] linux: update to libtool 1.5.2 so that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install DESTDIR=/xx" works with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "configure --with-libtool". [RT #9941]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson1572. [bug] nsupdate: sign the soa query to find the enclosing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone if the server is specified. [RT #10148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1571. [bug] rbt:hash_node() could fail leaving the hash table
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer in an inconsistent state. [RT #10208]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence1570. [bug] nsupdate failed to handle classes other than IN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New keyword 'class' which sets the default class.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence1569. [func] nsupdate new command 'answer' which displays the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete answer message to the last update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1568. [bug] nsupdate now reports that the update failed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interactive mode. [RT #10236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson1566. [port] Support for the cmsg framework on Solaris and HP/UX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This also solved the problem that match-destinations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv6 addresses did not work on these systems.
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence1565. [bug] CD flag should be copied to outgoing queries unless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the query is under a secure entry point in which case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD should be set.
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson1564. [func] Attempt to provide a fallback entropy source to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used if named is running chrooted and named is unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to open entropy source within the chroot area.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
8775909be9fc67180fc480115716f88174e74471James Brister nor an IPv6 dispatch. [RT #10230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1562. [bug] isc_socket_create() and isc_socket_accept() could
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister leak memory under error conditions. [RT #10230]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington1561. [bug] It was possible to release the same name twice if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named ran out of memory. [RT #10197]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence and EAI_NONAME to the same value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1559. [port] named should ignore SIGFSZ.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence child zones for which we don't have a supported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. Such child zones are treated as unsigned.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1557. [func] Implement missing DNSSEC tests for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOQNAME proof with wildcard answers.
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence * NOWILDARD proof with NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Cache and return NOQNAME with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews1555. [func] 'rrset-order cyclic' no longer has a random starting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point per query. [RT #7572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were specified in /etc/resolv.conf. [RT #8232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1553. [bug] The windows socket code could stop accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. [RT #10115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1552. [bug] Accept NOTIFY requests from mapped masters if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched-mapped is set. [RT #10049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1551. [port] Open "/dev/null" before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1550. [port] Call tzset(), if available, before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1549. [func] named-checkzone can now write out the zone contents
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a easily parsable format (-D and -o).
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington1548. [bug] When parsing APL records it was possible to silently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept out of range ADDRESSFAMILY values. [RT #9979]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #9341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson1545. [bug] It was possible to leak memory if named was unable to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bind to the specified transfer source and TSIG was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being used. [RT #10120]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer1544. [bug] Named would logged a single entry to a file despite it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being over the specified size limit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1543. [bug] Logging using "versions unlimited" did not work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1542. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1541. [func] NSEC now uses new bitmap format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister1539. [bug] Open UDP sockets for notify-source and transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that use reserved ports at startup. [RT #9475]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1538. [placeholder] rt9997
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1537. [func] New option "querylog". If set specify whether query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logging is to be enabled or disabled at startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1536. [bug] Windows socket code failed to log a error description
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews when returning ISC_R_UNEXPECTED. [RT #9998]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington1535. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1534. [bug] Race condition when priming cache. [RT #9940]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister1533. [func] Warn if both "recursion no;" and "allow-recursion"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are active. [RT #4389]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1532. [port] netbsd: the configure test for <sys/sysctl.h>
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson1531. [port] AIX more libtool fixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1530. [bug] It was possible to trigger a INSIST() failure if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slave master file was removed at just the correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews moment. [RT #9462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1529. [bug] "notify explicit;" failed to log that NOTIFY messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were being sent for the zone. [RT #9442]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson1528. [cleanup] Simplify some dns_name_ functions based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecation of bitstring labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1527. [cleanup] Reduce the number of gettimeofday() calls without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews losing necessary timer granularity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1526. [func] Implemented "additional section caching (or acache)",
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister an internal cache framework for additional section
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews content to improve response performance. Several
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration options were provided to control the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1525. [bug] dns_cache_create() could trigger a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in isc_mem_put() during error cleanup.
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister1524. [port] AIX needs to be able to resolve all symbols when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creating shared libraries (--with-libtool).
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister1523. [bug] Fix race condition in rbtdb. [RT #9189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1522. [bug] dns_db_findnode() relax the requirements on 'name'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1521. [bug] dns_view_createresolver() failed to check the
47c196192afa37b2dea728e52579779f190bf07fJames Brister result from isc_mem_create(). [RT #9294]
adf82221858138f295bce732e86dcac34645692eJames Brister1520. [protocol] Add SSHFP (SSH Finger Print) type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington length of the new bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained a off-by-one error when working out the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of octets in the bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TrueUNIX 5.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister1515. [func] Allow transfer source to be set in a server statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1513. [doc] Add "US" to root-delegation-only exclude list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1512. [bug] Extend the delegation-only logging to return query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type, class and responding nameserver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1511. [bug] delegation-only was generating false positives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on negative answers from sub-zones.
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence1510. [func] New view option "root-delegation-only". Apply
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only check to all TLDs and root.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note there are some TLDs that are NOT delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only (e.g. DE, LV, US and MUSEUM) these can be excluded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the checks by using exclude.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews root-delegation-only exclude {
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson "DE"; "LV"; "US"; "MUSEUM";
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1509. [bug] Hint zones should accept delegation-only. Forward
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister zone should not accept delegation-only.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1508. [bug] Don't apply delegation-only checks to answers from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1507. [bug] Handle BIND 8 style returns to NS queries to parents
d5399cc351a549db957185993b320a3bffa40e41James Brister when making delegation-only checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1506. [bug] Wrong return type for dns_view_isdelegationonly().
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1504. [func] New zone type "delegation-only".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1503. [port] win32: install libeay32.dll outside of system32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1501. [func] Allow TCP queue length to be specified via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.conf, tcp-listen-queue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1500. [bug] host failed to lookup MX records. Also look up
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister AAAA records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1499. [bug] isc_random need to be seeded better if arc4random()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1498. [port] bsdos: 5.x support.
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence1497. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1496. [port] test for pthread_attr_setstacksize().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1495. [cleanup] Replace hash functions with universal hash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1494. [security] Turn on RSA BLINDING as a precaution.
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence1493. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1492. [cleanup] Preserve rwlock quota context when upgrading /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews downgrading. [RT #5599]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lines. [RT #6206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1490. [bug] Accept reading state as well as working state in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ns_client_next(). [RT #6813]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence1489. [compat] Treat 'allow-update' on slave zones as a warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson queued for transfer and the zone was then removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff characters. [RT #8230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington1484. [bug] The number of records reported after a AXFR was wrong.
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington1483. [bug] dig axfr failed if the message id in the answer failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to match that in the request. Only the id in the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message is required to match. [RT #8138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1482. [bug] named could fail to start if the kernel supports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 but no interfaces are configured. Similarly
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson for IPv4. [RT #6229]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson if specified. [RT #7391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1480. [bug] Provide replay protection for rndc commands. Full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replay protection requires both rndc and named to
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson be updated. Partial replay protection (limited
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exposure after restart) is provided if just named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory cleanup. parse_list() would leak memory
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington on syntax errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1478. [port] ifconfig.sh didn't account for other virtual
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson interfaces. It now takes a optional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to specify the first interface number. [RT #3907]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson1477. [bug] memory leak using stub zones and TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1476. [placeholder]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson1475. [port] Probe for old sprintf().
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence1474. [port] Provide strtoul() and memmove() for platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without them.
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington1473. [bug] create_map() and create_string() failed to handle out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory cleanup. [RT #6813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence1471. [bug] libbind: updated to BIND 8.4.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1470. [bug] Incorrect length passed to snprintf. [RT #5966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1469. [func] Log end of outgoing zone transfer at same level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as the start of transfer is logged. [RT #4441]
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence1468. [func] Internal zones are no longer counted for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc status'. [RT #4706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1467. [func] $GENERATES now supports optional class and ttl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1466. [bug] lwresd configuration errors resulted in memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and lock leaks. [RT #5228]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to check that trailing bits were zero allowing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some invalid base64 strings to be accepted. [RT #5397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1464. [bug] Preserve "out of zone" data for outgoing zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers. [RT #5192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson NXT bit maps. [RT #5577]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1462. [bug] parse_sizeval() failed to check the token type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1460. [bug] inet_pton() failed to reject certain malformed
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff IPv6 literals.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1459. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1458. [cleanup] sprintf() -> snprintf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1455. [bug] <netaddr> missing from server grammar in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1454. [port] Use getifaddrs() if available for interface scanning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --disable-getifaddrs to override. Glibc currently
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson has a getifaddrs() that does not support IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --enable-getifaddrs=glibc to force the use of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this version under linux machines.
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister1452. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. [RT #5209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1450. [bug] Fetching expired glue failed under certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews circumstances. [RT #5124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1448. [bug] Handle empty wildcards labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1447. [bug] We were casting (unsigned int) to and from (void *).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset->private4 is now rdataset->privateuint4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to reflect a type change.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1446. [func] Implemented undocumented alternate transfer sources
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from BIND 8. See use-alt-transfer-source,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews alt-transfer-source and alt-transfer-source-v6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence you are using views. This may cause a security risk
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in accidental disclosure of wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content if the master supplying different source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content based on IP address. If you are not certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC recommends setting use-alt-transfer-source no;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been replaced with DNS_ADBFIND_STARTATZONE which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes the search to start using the closest zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1444. [func] dns_view_findzonecut2() allows you to specify if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache should be searched for zone cuts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1443. [func] Masters lists can now be specified and referenced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone masters clauses and other masters lists.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed1442. [func] New functions for manipulating port lists:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_create(), dns_portlist_add(),
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews dns_portlist_remove(), dns_portlist_match(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_attach() and dns_portlist_detach().
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence1441. [func] It is now possible to tell dig to bind to a specific
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1440. [func] It is now possible to tell named to avoid using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews certain source ports (avoid-v4-udp-ports,
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence avoid-v6-udp-ports).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1439. [bug] Named could return NOERROR with certain NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. Return NOTAUTH if the NOTIFY zone is
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence not being served.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1438. [func] Log TSIG (if any) when logging NOTIFY requests.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
34b394b43e2207e8f8f3703f0402422121455638David Lawrence stalled transfers.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1435. [bug] zmgr_resume_xfrs() was being called read locked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than write locked. zmgr_resume_xfrs()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not being called if the zone was being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1434. [bug] "rndc reconfig" failed to initiate the initial
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister zone transfer of new slave zones.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1433. [bug] named could trigger a REQUIRE failure if it could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not get a file descriptor when attempting to write
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister a master file. [RT #4347]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1432. [func] The advertised EDNS UDP buffer size can now be set
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence via named.conf (edns-udp-size).
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1431. [bug] isc_print_snprintf() "%s" with precision could walk off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end of argument. [RT #5191]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1430. [port] linux: IPv6 interface scanning support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1429. [bug] Prevent the cache getting locked to old servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1428. [placeholder]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson1427. [bug] Race condition in adb with threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1426. [placeholder]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson1425. [port] linux/libbind: define __USE_MISC when testing *_r()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function prototypes in netdb.h. [RT #4921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1424. [bug] EDNS version not being correctly printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1423. [contrib] queryperf: added A6 and SRV.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1422. [func] Log name/type/class when denying a query. [RT #4663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1421. [func] Differentiate updates that don't succeed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites (unsuccessful) vs other reasons
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews1420. [port] solaris: work around gcc optimizer bug.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1417. [func] ID.SERVER/CHAOS is now a built in zone.
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews See "server-id" for how to configure.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews from SOA MINIMUM.
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson1414. [func] Support for KSK flag.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1413. [func] Explicitly request the (re-)generation of DS records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from keysets (dnssec-signzone -g).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1412. [func] You can now specify servers to be tried if a nameserver
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson has IPv6 address and you only support IPv4 or the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reverse. See dual-stack-servers.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1410. [func] Handle records that live in the parent zone, e.g. DS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1408. [bug] "make distclean" was not complete. [RT #4700]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence1407. [bug] lfsr incorrectly implements the shift register.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1406. [bug] dispatch initializes one of the LFSR's with a incorrect
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews polynomial. [RT #4617]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1405. [func] Use arc4random() if available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signkey now report their version in the
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister usage message.
e411a986b94276c28e6a971f9c3b61d45c635456James Brister1402. [cleanup] A6 has been moved to experimental and is no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fully supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1400. [bug] Block the addition of wildcard NS records by IXFR
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson or UPDATE. [RT #3502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews timestamps. [RT #4268]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1398. [doc] ARM: notify-also should have been also-notify.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson1396. [func] dnssec-signzone: adjust the default signing time by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 1 hour to allow for clock skew.
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have a working implementation. [RT #4079]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1394. [func] It is now possible to check if a particular element is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a acl. Remove duplicate entries from the localnets
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not available in the kernel to prevent accidently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listening on IPv4 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1392. [bug] named-checkzone: update usage.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed1391. [func] Add support for IPv6 scoped addresses in named.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1390. [func] host now supports ixfr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1387. [bug] named could crash due to an access to invalid memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space (which caused an assertion failure) in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incremental cleaning. [RT #3588]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1386. [bug] named-checkzone -z stopped on errors in a zone.
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence1385. [bug] Setting serial-query-rate to 10 would trigger a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews REQUIRE failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1384. [bug] host was incompatible with BIND 8 in its exit code and
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence in the output with the -l option. [RT #3536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1383. [func] Track the serial number in a IXFR response and log if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a mismatch occurs. This is a more specific error than
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson "not exact". [RT #3445]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence1382. [bug] make install failed with --enable-libbind. [RT #3656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1381. [bug] named failed to correctly process answers that
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson contained DNAME records where the resulting CNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulted in a negative answer.
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence1380. [func] 'rndc recursing' dump recursing queries to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'recursing-file = "named.recursing";'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1379. [func] 'rndc status' now reports tcp and recursion quota
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1377. [func] dns_zone_load{new}() now reports if the zone was
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence loaded, queued for loading to up to date.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1376. [func] New function dns_zone_logc() to log to specified
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence with each server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1373. [bug] Recovery from expired glue failed under certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews circumstances.
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence1372. [bug] named crashes with an assertion failure on exit when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sharing the same port for listening and querying, and
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence changing listening addresses several times. [RT #3509]
eefea43215016bce437ab4a7441b2851fd182960David Lawrence1371. [bug] notify-source-v6, transfer-source-v6 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-source-v6 with explicit addresses and using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same ports as named was listening on could interfere
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence with named's ability to answer queries sent to those
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence1370. [bug] dig '+[no]recurse' was incorrectly documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1369. [bug] Adding an NS record as the lexicographically last
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record in a secure zone didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1368. [func] remove support for bitstring labels.
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence1367. [func] Use response times to select forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed1365. [func] "localhost" and "localnets" acls now include IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses / prefixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1364. [func] Log file name when unable to open memory statistics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dump database files. [RT #3437]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1363. [func] Listen-on-v6 now supports specific addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1361. [func] log the reason for rejecting a server when resolving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1360. [bug] --enable-libbind would fail when not built in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source tree for certain OS's.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1359. [security] Support patches OpenSSL libraries.
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence http://www.cert.org/advisories/CA-2002-23.html
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1358. [bug] It was possible to trigger a INSIST when debugging
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence large dynamic updates. [RT #3390]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1357. [bug] nsupdate was extremely wasteful of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1356. [tuning] Reduce the number of events / quantum for zone tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1354. [doc] lwres man pages had illegal nroff.
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews1353. [contrib] sdb/ldap to version 0.9.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff1352. [bug] dig, host, nslookup when falling back to TCP use the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews current search entry (if any). [RT #3374]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1351. [bug] lwres_getipnodebyname() returned the wrong name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1348. [port] win32: Rewrote code to use I/O Completion Ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in socket.c and eliminating a host of socket
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence errors. Performance is enhanced.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1347. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1346. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1345. [port] Use a explicit -Wformat with gcc. Not all versions
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence include it in -Wall.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1344. [func] Log if the serial number on the master has gone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If you have multiple machines specified in the masters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause you may want to set 'multi-master yes;' to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence suppress this warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1343. [func] Log successful notifies received (info). Adjust log
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence level for failed notifies to notice.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1342. [func] Log remote address with TCP dispatch failures.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1341. [func] Allow a rate limiter to be stalled.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1340. [bug] Delay and spread out the startup refresh load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence lookups. Bit string lookups are no longer attempted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1338. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1337. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1336. [func] Nibble lookups under IP6.ARPA are now supported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_byaddr_create(). dns_byaddr_createptrname() is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecated, use dns_byaddr_createptrname2() instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1335. [bug] When performing a nonexistence proof, the validator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should discard parent NXTs from higher in the DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1334. [bug] When signing/verifying rdatasets, duplicate rdatas
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to be suppressed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1333. [contrib] queryperf now reports a summary of returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rcodes (-c), rcodes are printed in mnemonic form (-v).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1332. [func] Report the current serial with periodic commits when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolling forward the journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1331. [func] Generate DNSSEC wildcard proofs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1330. [bug] When processing events (non-threaded) only allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the task one chance to use to use its quantum.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1329. [func] named-checkzone will now check if nameservers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear to be IP addresses. Available modes "fail",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "warn" (default) and "ignore" the results of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1328. [bug] The validator could incorrectly verify an invalid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative proof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when seeing a bogus signature before a correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was not being performed. [RT #3284]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1325. [bug] If the tcpquota was exhausted it was possible to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to trigger a INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1324. [port] darwin: ifconfig.sh now supports darwin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson1322. [bug] dnssec-signzone usage message was misleading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would incorrectly duplicate its output and sign it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1320. [doc] query-source-v6 was missing from options section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1319. [func] libbind: log attempts to exploit #1318.
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence1318. [bug] libbind: Remote buffer overrun.
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews element name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1316. [bug] libbind: gethostans() could get out of sync parsing
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence the response if there was a very long CNAME chain.
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence1315. [bug] Options should apply to the internal _bind view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1314. [port] Handle ECONNRESET from sendmsg() [unix].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1313. [func] Query log now says if the query was signed (S) or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if EDNS was used (E).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1312. [func] Log TSIG key used w/ outgoing zone transfers.
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence1310. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #3157]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1309. [func] Log that a zone transfer was covered by a TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1308. [func] DS (delegation signer) support.
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence1307. [bug] nsupdate: allow white space base64 key data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1306. [bug] Badly encoded LOC record when the size, horizontal
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley precision or vertical precision was 0.1m.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1305. [bug] Document that internal zones are included in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc status results.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1304. [func] New function: dns_zone_name().
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1302. [func] Extended rndc dumpdb to support dumping of zones and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews view selection: 'dumpdb [-all|-zones|-cache] [view]'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1301. [func] New category 'update-security'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1300. [port] Compaq Trucluster support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1299. [bug] Set AI_ADDRCONFIG when looking up addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via getaddrinfo() (affects dig, host, nslookup, rndc
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence and nsupdate).
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be left with a trailing "\" after configure
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence has been run.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1297. [port] linux: make handling EINVAL from socket() no longer
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence conditional on #ifdef LINUX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1296. [bug] isc_log_closefilelogs() needed to lock the log
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence1295. [bug] isc_log_setdebuglevel() needed to lock the log
77f372eed39827f5efef476602de7c0505f99b91David Lawrence1294. [func] libbind: no longer attempts bit string labels for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for nibble style resolution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1292. [func] Enable IPv6 support when using ioctl style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scanning and OS supports SIOCGLIFADDR using struct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if_laddrreq.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1291. [func] Enable IPv6 support when using sysctl style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1290. [func] "dig axfr" now reports the number of messages
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence as well as the number of records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reflect written requirements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a rdataset to a zone db in the rbtdb implementation of
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff1286. [bug] dns_name_downcase() enforce requirement that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews target != NULL or name->buffer != NULL.
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington1285. [func] lwres: probe the system to see what address families
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are currently in use.
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson1284. [bug] The RTT estimate on unused servers was not aged.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1283. [func] Use "dataready" accept filter if available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1282. [port] libbind: hpux 11.11 interface scanning.
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews1281. [func] Log zone when unable to get private keys to update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. Log zone when NXT records are missing from
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews secure zone.
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson1280. [bug] libbind: escape '(' and ')' when converting to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews presentation form.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1278. [func] dig: now supports +[no]cl +[no]ttlid.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1277. [func] You can now create your own customized printing
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley styles: dns_master_stylecreate() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_styledestroy().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1276. [bug] libbind: const pointer conflicts in res_debug.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1274. [bug] Memory leak in lwres_gnbarequest_parse().
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1273. [port] libbind: solaris: 64 bit binary compatibility.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1272. [contrib] Berkeley DB 4.0 sdb implementation from
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1271. [bug] "recursion available: {denied,approved}" was too
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews1270. [bug] Check that system inet_pton() and inet_ntop() support
4716e94840921878b26e493576f84afe4fe08752Mark Andrews1269. [port] Openserver: ifconfig.sh support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1268. [port] Openserver: the value FD_SETSIZE depends on whether
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence <sys/param.h> is included or not. Be consistent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1267. [func] isc_file_openunique() now creates file using mode
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley 0666 rather than 0600.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are not C++ compatible, use *_TYPE versions instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1264. [placeholder]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1263. [bug] Reference after free error if dns_dispatchmgr_create()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for compressed TSIG owner names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new function res_findzonecut2().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1257. [bug] Failure to write pid-file should not be fatal on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #2861]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1255. [bug] When verifying that an NXT proves nonexistence, check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the rcode of the message and only do the matching NXT
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson check. That is, for NXDOMAIN responses, check that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the name is in the range between the NXT owner and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews next name, and for NOERROR NODATA responses, check
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington that the type is not present in the NXT bitmap.
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson1254. [func] preferred-glue option from BIND 8.3.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1253. [bug] The dnssec system test failed to remove the correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1252. [bug] Dig, host and nslookup were not checking the address
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence the answer was coming from against the address it was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sent to. [RT #2692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1251. [port] win32: a make file contained absolute version specific
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence1250. [func] Nsupdate will report the address the update was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1249. [bug] Missing masters clause was not handled gracefully.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1248. [bug] DESTDIR was not being propagated between makes.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1247. [bug] Don't reset the interface index for link/site local
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses. [RT #2576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1246. [func] New functions isc_sockaddr_issitelocal(),
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and isc_netaddr_islinklocal().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1244. [bug] Receiving a TCP message from a blackhole address would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevent further messages being received over that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1243. [bug] It was possible to trigger a REQUIRE() in
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence dns_message_findtype(). [RT #2659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister1241. [bug] Drop received UDP messages with a zero source port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as these are invariably forged. [RT #2621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1240. [bug] It was possible to leak zone references by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specifying an incorrect zone to rndc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1239. [bug] Under certain circumstances named could continue to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use a name after it had been freed triggering
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson INSIST() failures. [RT #2614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1238. [bug] It is possible to lockup the server when shutting down
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington if notifies were being processed. [RT #2591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1237. [bug] nslookup: "set q=type" failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NULL terminated text regions. [RT #2588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1235. [func] Report 'out of memory' errors from openssl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1234. [bug] contrib/sdb: 'zonetodb' failed to call
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington dns_result_register(). DNS_R_SEENINCLUDE should not
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1233. [bug] The flags field of a KEY record can be expressed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hex as well as decimal.
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1229. [bug] named would crash if it received a TSIG signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query as part of an AXFR response. [RT #2570]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if a number was expected and some other token was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #2532]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1226. [func] Use EDNS for zone refresh queries. [RT #2551]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1225. [func] dns_message_setopt() no longer requires that
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dns_message_renderbegin() to have been called.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1224. [bug] 'rrset-order' and 'sortlist' should be additive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not exclusive.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister selected (non-reserved) port being used. [RT #2537]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson compared case insensitively. [RT #2542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1220. [func] Support for APL rdata type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1219. [func] Named now reports the TSIG extended error code when
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister signature verification fails. [RT #1651]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1218. [bug] Named incorrectly returned SERVFAIL rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1217. [func] Report locations of previous key definition when a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews duplicate is detected.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1216. [bug] Multiple server clauses for the same server were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported. [RT #2514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1214. [bug] Win32: isc_file_renameunique() could leave zero length
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington files behind.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1213. [func] Report view associated with client if it is not a
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington standard view (_default or _bind).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1212. [port] libbind: 64k answer buffers were causing stack space
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley to be exceeded for certain OS. Use heap space instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1211. [bug] dns_name_fromtext() incorrectly handled certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid octal bitlabels. [RT #2483]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatible addresses. [RT #2461]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1209. [bug] Dig, host, nslookup were not checking the message ids
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence on the responses. [RT #2454]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1208. [bug] dns_master_load*() failed to log a error message if
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which