CHANGES revision 53a70bef3508acb1517b8eb57f61a81280c11509
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.11.0a1 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4368. [bug] Fix a crash when calling "rndc stats" on some
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Windows builds because some Visual Studio compilers
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi generated crashing code for the "%z" printf()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi format specifier. [RT #42380]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4367. [bug] Remove unnecessary assignment of loadtime in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone_touched. [RT #42440]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4366. [bug] Address race condition when updating rbtnode bit
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi fields. [RT #42379]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4365. [bug] Address zone reference counting errors involving
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nxdomain-redirect. [RT #42258]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4363. [port] win32: Disable explict triggering UAC when running
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4362. [func] Changed rndc reconfig behaviour so that newly added
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones are loaded asynchronously and the loading does
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi not block the server. [RT #41934]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4361. [cleanup] Where supported, file modification times returned
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi by isc_file_getmodtime() are now accurate to the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nanosecond. [RT #41968]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4360. [bug] Silence spurious 'bad key type' message when there is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a existing TSIG key. [RT #42195]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4359. [bug] Inherited 'also-notify' lists were not being checked
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi by named-checkconf. [RT #42174]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4358. [test] Added American Fuzzy Lop harness that allows
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi feeding fuzzed packets into BIND.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4357. [func] Add the python RNDC module. [RT #42093]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4356. [func] Add the ability to specify whether to wait for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nameserver addresses to be looked up or not to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RPZ with a new modifying directive 'nsip-wait-recurse'.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4355. [func] "pkcs11-list" now displays the extractability
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi attribute of private or secret keys stored in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an HSM, as either "true", "false", or "never"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Thanks to Daniel Stirnimann. [RT #36557]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4354. [bug] Check that the received HMAC length matches the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi expected length prior to check the contents on the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi control channel. This prevents a OOB read error.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi This was reported by Lian Yihan, <lianyihan@360.cn>.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4353. [cleanup] Update PKCS#11 header files. [RT #42175]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi is scheduled to be disabled in 2017. A warning is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi now logged when named is configured to use it,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi either explicitly or via "dnssec-lookaside auto;"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4351. [bug] 'dig +noignore' didn't work. [RT #42273]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4349. [contrib] kasp2policy: A python script to create a DNSSEC
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi policy file from an OpenDNSSEC KASP XML file.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4348. [func] dnssec-keymgr: A new python-based DNSSEC key
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi management utility, which reads a policy definition
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi file and can create or update DNSSEC keys as needed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to ensure that a zone's keys match policy, roll over
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi correctly on schedule, etc. Thanks to Sebastian
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Castro for assistance in development. [RT #39211]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4346. [bug] Fixed a regression introduced in change #4337 which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi caused signed domains with revoked KSKs to fail
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi validation. [RT #42147]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4345. [contrib] perftcpdns mishandled the return values from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi clock_nanosleep. [RT #42131]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4344. [port] Address openssl version differences. [RT #42059]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4343. [bug] dns_dnssec_syncupdate misdeclared in <dns/dnssec.h>.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4342. [bug] 'rndc flushtree' could fail to clean the tree if there
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi wasn't a node at the specified name. [RT #41846]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.11.0a1 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4341. [bug] Correct the handling of ECS options with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi address family 0. [RT #41377]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4340. [performance] Implement adaptive read-write locks, reducing the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi overhead of locks that are only held briefly.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4338. [bug] Reimplement change 4324 as it wasn't properly doing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi all the required book keeping. [RT #41941]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4337. [bug] The previous change exposed a latent flaw in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi key refresh queries for managed-keys when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a cached DNSKEY had TTL 0. [RT #41986]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4336. [bug] Don't emit records with zero ttl unless the records
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi were learnt with a zero ttl. [RT #41687]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4335. [bug] zone->view could be detached too early. [RT #41942]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4334. [func] 'named -V' now reports zlib version. [RT #41913]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 2001:500:9f::42.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4332. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4331. [func] When loading managed signed zones detect if the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RRSIG's inception time is in the future and regenerate
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the RRSIG immediately. [RT #41808]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4330. [protocol] Identify the PAD option as "PAD" when printing out
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4329. [func] Warn about a common misconfiguration when forwarding
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RFC 1918 zones. [RT #41441]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4327. [func] Log query and depth counters during fetches when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi querytrace (./configure --enable-querytrace) is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi enabled (helps in diagnosing). [RT #41787]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4326. [protocol] Add support for AVC. [RT #41819]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4325. [func] Add a line to "rndc status" indicating the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hostname and operating system details. [RT #41610]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4324. [bug] When deleting records from a zone database, interior
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nodes could be left empty but not deleted, damaging
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi search performance afterward. [RT #40997]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4323. [bug] Improve HTTP header processing on statschannel.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4322. [security] Duplicate EDNS COOKIE options in a response could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi trigger an assertion failure. (CVE-2016-2088)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4321. [bug] Zones using mapped files containing out-of-zone data
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could return SERVFAIL instead of the expected NODATA
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or NXDOMAIN results. [RT #41596]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4320. [bug] Insufficient memory allocation when handling
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "none" ACL could cause an assertion failure in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named when parsing ACL configuration. [RT #41745]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4319. [security] Fix resolver assertion failure due to improper
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DNAME handling when parsing fetch reply messages.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2016-1286) [RT #41753]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4318. [security] Malformed control messages can trigger assertions
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in named and rndc. (CVE-2016-1285) [RT #41666]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4316. [func] Add option to tools to print RRs in unknown
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi presentation format [RT #41595].
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4315. [bug] Check that configured view class isn't a meta class.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi testing tools provided by Nominum, Inc.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4313. [bug] Handle ns_client_replace failures in test mode.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was not consistent. [RT #41600]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4311. [bug] Prevent "rndc delzone" from being used on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response-policy zones. [RT #41593]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4310. [performance] Use __builtin_expect() where available to annotate
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi conditions with known behavior. [RT #41411]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4309. [cleanup] Remove the spurious "none" filename from log messages
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when processing built-in configuration. [RT #41594]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4308. [func] Added operating system details to "named -V"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi output. [RT #41452]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4307. [bug] "dig +subnet" and "mdig +subnet" could send
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi incorrectly-formatted Client Subnet options
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if the prefix length was not divisible by 8.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Also fixed a memory leak in "mdig". [RT #45178]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4306. [maint] Added a PKCS#11 openssl patch supporting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi version 1.0.2f [RT #38312]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi from the zone's apex. [RT #41483]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4304. [port] xfer system test failed as 'tail -n +value' is not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi portable. [RT #41315]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4303. [bug] "dig +subnet" was unable to send a prefix length of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zero, as it was incorrectly changed to 32 for v4
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi prefixes or 128 for v6 prefixes. In addition to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi fixing this, "dig +subnet=0" has been added as a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi short form for 0.0.0.0/0. The same changes have
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi also been made in "mdig". [RT #41553]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4300. [bug] A flag could be set in the wrong field when setting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi up non-recursive queries; this could cause the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi SERVFAIL cache to cache responses it shouldn't.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi New querytrace logging has been added which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi identified this error. [RT #41155]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4299. [bug] Check that exactly totallen bytes are read when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi reading a RRset from raw files in both single read
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and incremental modes. [RT #41402]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4298. [bug] dns_rpz_add errors in loadzone were not being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi propagated up the call stack. [RT #41425]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4297. [test] Ensure delegations in RPZ zones fail robustly.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4296. [bug] TCP packet sizes were calculated incorrectly in the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi stats channel; they could be counted in the wrong
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi histogram bucket. [RT #40587]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could allow incorrect text formatting of EDNS EXPIRE
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi options. [RT #41437]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4294. [bug] Fixed a regression in which "rndc stop -p" failed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to print the PID. [RT #41513]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4293. [bug] Address memory leak on priming query creation failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4292. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4290. [func] The timers returned by the statistics channel
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (indicating current time, server boot time, and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi most recent reconfiguration time) are now reported
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with millisecond accuracy. [RT #40082]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4289. [bug] The server could crash due to memory being used
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi after it was freed if a zone transfer timed out.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4288. [bug] Fixed a regression in resolver.c:possibly_mark()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi which caused known-bogus servers to be queried
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi anyway. [RT #41321]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4287. [bug] Silence an overly noisy log message when message
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi parsing fails. [RT #41374]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4286. [security] render_ecs errors were mishandled when printing out
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a OPT record resulting in a assertion failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2015-8705) [RT #41397]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4285. [security] Specific APL data could trigger a INSIST.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2015-8704) [RT #41396]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4284. [bug] Some GeoIP options were incorrectly documented
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using abbreviated forms which were not accepted by
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named. The code has been updated to allow both
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi long and abbreviated forms. [RT #41381]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4282. [func] 'dig +[no]mapped' determine whether the use of mapped
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi IPv4 addresses over IPv6 is permitted or not. The
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi default is +mapped. [RT #41307]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4280. [performance] Use optimal message sizes to improve compression
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in AXFRs. This reduces network traffic. [RT #40996]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4279. [test] Don't use fixed ports when unit testing. [RT #41194]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4277. [performance] Improve performance of the RBT, the central zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi datastructure: The aux hashtable was improved,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hash function was updated to perform more
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi uniform mapping, uppernode was added to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rbtnode, and other cleanups and performance
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi improvements were made. [RT #41165]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4276. [protocol] Add support for SMIMEA. [RT #40513]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4275. [performance] Lazily initialize dns_compress->table only when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi compression is enabled. [RT #41189]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4274. [performance] Speed up typemap processing from text. [RT #41196]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4273. [bug] Only call dns_test_begin() and dns_test_end() once each
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in nsec3_test as it fails with GOST if called multiple
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4272. [bug] dig: the +norrcomments option didn't work with +multi.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4270. [security] Update allowed OpenSSL versions as named is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi potentially vulnerable to CVE-2015-3193.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4269. [bug] Zones using "map" format master files currently
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi don't work as policy zones. This limitation has
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi now been documented; attempting to use such zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in "response-policy" statements is now a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configuration error. [RT #38321]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4268. [func] "rndc status" now reports the path to the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configuration file. [RT #36470]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4267. [test] Check sdlz error handling. [RT #41142]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4266. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4264. [bug] Check const of strchr/strrchr assignments match
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi argument's const status. [RT #41150]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4263. [contrib] Address compiler warnings in mysqldyn module.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4262. [bug] Fixed a bug in epoll socket code that caused
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi sockets to not be registered for ready
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi notification in some cases, causing named to not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi read from or write to them, resulting in what
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi appear to the user as blocked connections.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4260. [security] Insufficient testing when parsing a message allowed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi records with an incorrect class to be be accepted,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi triggering a REQUIRE failure when those records
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi were subsequently cached. (CVE-2015-8000) [RT #40987]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4259. [func] Add an option for non-destructive control channel
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi access using a "read-only" clause. In such
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cases, a restricted set of rndc commands are
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi allowed for querying information from named.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4258. [bug] Limit rndc query message sizes to 32 KiB. This should
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi not break any legitimate rndc commands, but will
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi prevent a rogue rndc query from allocating too
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi much memory. [RT #41073]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4256. [bug] Allow rndc command arguments to be quoted so as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to allow spaces. [RT #36665]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4255. [performance] Add 'message-compression' option to disable DNS
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi compression in responses. [RT #40726]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4254. [bug] Address missing lock when getting zone's serial.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4253. [security] Address fetch context reference count handling error
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on socket error. (CVE-2015-8461) [RT#40945]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4252. [func] Add support for automating the generation CDS and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi CDNSKEY rrsets to named and dnssec-signzone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4251. [bug] NTAs were deleted when the server was reconfigured
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or reloaded. [RT #41058]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4250. [func] Log the TSIG key in use during inbound zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi transfers. [RT #41075]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4249. [func] Improve error reporting of TSIG / SIG(0) records in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the wrong location. [RT #41030]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4248. [performance] Add an isc_atomic_storeq() function, use it in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi stats counters to improve performance.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [RT #39972] [RT #39979]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi defined to report json library version. [RT #41045]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4246. [test] Ensure the statschannel system test runs when BIND
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi is not built with libjson. [RT #40944]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4245. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4244. [bug] The parser was not reporting that use-ixfr is obsolete.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4242. [bug] Replace the client if not already replaced when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi prefetching. [RT #41001]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the ARM. [RT #40955]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4240. [port] Fix LibreSSL compatibility. [RT #40977]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4239. [func] Changed default servfail-ttl value to 1 second from 10.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Also, the maximum value is now 30 instead of 300.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4237. [doc] Upgraded documentation toolchain to use DocBook 5
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and dblatex. [RT #40766]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4236. [performance] On machines with 2 or more processors (CPU), the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi default value for the number of UDP listeners
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi has been changed to the number of detected
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi processors minus one. [RT #40761]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4235. [func] Added support in named for "dnstap", a fast method of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi capturing and logging DNS traffic, and a new command
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "dnstap-read" to read a dnstap log file. Use
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "configure --enable-dnstap" to enable this
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi feature (note that this requires libprotobuf-c
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and libfstrm). See the ARM for configuration details.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Thanks to Robert Edmonds of Farsight Security.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4234. [func] Add deflate compression in statistics channel HTTP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server. [RT #40861]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4232. [contrib] Address unchecked memory allocation calls in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi query-loc and zone2ldap. [RT #40789]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi uninitialized result. [RT #40839]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4229. [bug] A variable could be used uninitialized in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_update_signaturesinc. [RT #40784]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4228. [bug] Address race condition in dns_client_destroyrestrans.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4227. [bug] Silence static analysis warnings. [RT #40828]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4226. [bug] Address a theoretical shutdown race in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone.c:notify_send_queue(). [RT #38958]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi shared libraries. [RT #39557]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4224. [func] Added support for "dyndb", a new interface for loading
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone data from an external database, developed by
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Red Hat for the FreeIPA project.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DynDB drivers fully implement the BIND database
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi API, and are capable of significantly better
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi performance and functionality than DLZ drivers,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi while taking advantage of advanced database
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi features not available in BIND such as multi-master
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Thanks to Adam Tkac and Petr Spacek of Red Hat.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4223. [func] Add support for setting max-cache-size to percentage
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of available physical memory, set default to 90%.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4222. [func] Bias IPv6 servers when selecting the next server to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi query. [RT #40836]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4220. [doc] Improve documentation for zone-statistics.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi EGAIN when these soft error are not retried for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi isc_socket_send*().
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4218. [bug] Potential null pointer dereference on out of memory
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if mmap is not supported. [RT #40777]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4217. [protocol] Add support for CSYNC. [RT #40532]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4216. [cleanup] Silence static analysis warnings. [RT #40649]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4215. [bug] nsupdate: skip to next request on GSSTKEY create
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failure. [RT #40685]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4214. [protocol] Add support for TALINK. [RT #40544]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4213. [bug] Don't reuse a cache across multiple classes.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4212. [func] Re-query if we get a bad client cookie returned over
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi UDP. [RT #40748]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4211. [bug] Ensure that lwresd gets at least one task to work
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with if enabled. [RT #40652]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4210. [cleanup] Silence use after free false positive. [RT #40743]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4209. [bug] Address resource leaks in dlz modules. [RT #40654]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4208. [bug] Address null pointer dereferences on out of memory.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4207. [bug] Handle class mismatches with raw zone files.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4206. [bug] contrib: fixed a possible NULL dereference in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DLZ wildcard module. [RT #40745]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4205. [bug] 'named-checkconf -p' could include unwanted spaces
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when printing tuples with unset optional fields.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4204. [bug] 'dig +trace' failed to lookup the correct type if
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the initial root NS query was retried. [RT #40296]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4203. [test] The rrchecker system test now tests conversion
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to and from unknown-type format. [RT #40584]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4202. [bug] isccc_cc_fromwire() could return an incorrect
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi result. [RT #40614]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4201. [func] The default preferred-glue is now the address record
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi type of the transport the query was received
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi over. [RT #40468]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4200. [cleanup] win32: update BINDinstall to be BIND release
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi independent. [RT #38915]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [RT #40545] [RT #40547] [RT #40561] [RT #40563]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4198. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4196. [doc] Improve how "enum + other" types are documented.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4194. [bug] named-checkconf -p failed to properly print a port
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi range. [RT #40634]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4193. [bug] Handle broken servers that return BADVERS incorrectly.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4192. [bug] The default rrset-order of random was not always being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi applied. [RT #40456]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi as per RFC 6763. [RT #37889]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi valid with check-names. <forest> still needs to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi LDH. [RT #40399]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4189. [cleanup] Don't exit on overly long tokens in named.conf.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4188. [bug] Support HTTP/1.0 client properly on the statistics
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi channel. [RT #40261]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4187. [func] When any RR type implementation doesn't
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi implement totext() for the RDATA's wire
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi representation and returns ISC_R_NOTIMPLEMENTED,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi such RDATA is now printed in unknown
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi presentation format (RFC 3597). RR types affected
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi include LOC(29) and APL(42). [RT #40317].
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4186. [bug] Fixed an RPZ bug where a QNAME would be matched
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi against a policy RR with wildcard owner name
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (trigger) where the QNAME was the wildcard owner
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi name's parent. For example, the bug caused a query
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with QNAME "example.com" to match a policy RR with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "*.example.com" as trigger. [RT #40357]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi owner name (trigger) would prevent another policy RR
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with its parent owner name from being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi loaded. For example, the bug caused a policy RR
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with trigger "example.com" to not have any
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi effect when a previous policy RR with trigger
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "*.example.com" existed in that RPZ zone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4184. [bug] Fixed a possible memory leak in name compression
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when rendering long messages. (Also, improved
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi wire_test for testing such messages.) [RT #40375]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4183. [cleanup] Use timing-safe memory comparisons in cryptographic
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi code. Also, the timing-safe comparison functions have
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi been renamed to avoid possible confusion with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memcmp(). Thanks to Loganaden Velvindron of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi AFRINIC. [RT #40148]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4182. [cleanup] Use mnemonics for RR class and type comparisons.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4181. [bug] Queued notify messages could be dequeued from the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi wrong rate limiter queue. [RT #40350]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4180. [bug] Error responses in pipelined queries could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cause a crash in client.c. [RT #40289]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4179. [bug] Fix double frees in getaddrinfo() in libirs.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi text. [RT #40274]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4177. [bug] Fix assertion failure in parsing NSAP records from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi text. [RT #40285]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4176. [bug] Address race issues with lwresd. [RT #40284]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4175. [bug] TKEY with GSS-API keys needed bigger buffers.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4174. [bug] "dnssec-coverage -r" didn't handle time unit
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi suffixes correctly. [RT #38444]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4173. [bug] dig +sigchase was not properly matching the trusted
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi key. [RT #40188]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4171. [bug] Fixed incorrect class checks in TSIG RR
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi implementation. [RT #40287]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4170. [security] An incorrect boundary check in the OPENPGPKEY
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rdatatype could trigger an assertion failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2015-5986) [RT #40286]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4169. [test] Added a 'wire_test -d' option to read input as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi raw binary data, for use as a fuzzing harness.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4168. [security] A buffer accounting error could trigger an
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi assertion failure when parsing certain malformed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DNSSEC keys. (CVE-2015-5722) [RT #40212]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4167. [func] Update rndc's usage output to include recently added
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi commands. Thanks to Tony Finch for submitting a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi patch. [RT #40010]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4166. [func] Print informative output from rndc showzone when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi allow-new-zones is not enabled for a view. Thanks to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Tony Finch for submitting a patch. [RT #40009]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4165. [security] A failure to reset a value to NULL in tkey.c could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi result in an assertion failure. (CVE-2015-5477)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4164. [bug] Don't rename slave files and journals on out of memory.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4163. [bug] Address compiler warnings. [RT #40024]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4161. [test] Add JSON test for traffic size stats; also test
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for consistency between "rndc stats" and the XML
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and JSON statistics channel contents. [RT #38700]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4160. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4159. [cleanup] Alphabetize dig's help output. [RT #39966]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4158. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4157. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4156. [func] Added statistics counters to track the sizes
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of incoming queries and outgoing responses in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi histogram buckets, as specified in RSSAC002.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4155. [func] Allow RPZ rewrite logging to be configured on a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi per-zone basis using a newly introduced log clause in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the response-policy option. [RT #39754]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4154. [bug] A OPT record should be included with the FORMERR
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response when there is a malformed EDNS option.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4153. [bug] Dig should zero non significant +subnet bits. Check
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that non significant ECS bits are zero on receipt.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4152. [func] Implement DNS COOKIE option. This replaces the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi experimental SIT option of BIND 9.10. The following
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named.conf directives are available: send-cookie,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cookie-secret, cookie-algorithm, nocookie-udp-size
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and require-server-cookie. The following dig options
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi are available: +[no]cookie[=value] and +[no]badcookie.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi minimal fix. [RT #39667]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4149. [bug] Fixed a race condition in the getaddrinfo()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi implementation in libirs, which caused the delv
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi utility to crash with an assertion failure when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the '@server' syntax with a hostname argument.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4148. [bug] Fix a bug when printing zone names with '/' character
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in XML and JSON statistics output. [RT #39873]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was returning referrals rather than nodata responses
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when the AAAA records were filtered. [RT #39843]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4146. [bug] Address reference leak that could prevent a clean
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi shutdown. [RT #37125]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4145. [bug] Not all unassociated adb entries where being printed.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4144. [func] Add statistics counters for nxdomain redirections.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4143. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4142. [bug] rndc addzone with view specified saved NZF config
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that could not be read back by named. This has now
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi been fixed. [RT #39845]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4141. [bug] A formatting bug caused rndc zonestatus to print
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi negative numbers for large serial values. This has
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi now been fixed. [RT #39854]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4140. [cleanup] Remove redundant nzf_remove() call during delzone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4138. [security] An uninitialized value in validator.c could result
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in an assertion failure. (CVE-2015-4620) [RT #39795]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4137. [bug] Make rndc reconfig report configuration errors the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi same way rndc reload does. [RT #39635]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4136. [bug] Stale statistics counters with the leading
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi '#' prefix (such as #NXDOMAIN) were not being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi updated correctly. This has been fixed. [RT #39141]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4135. [cleanup] Log expired NTA at startup. [RT #39680]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4134. [cleanup] Include client-ip rules when logging the number
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of RPZ rules of each type. [RT #39670]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4133. [port] Update how various json libraries are handled.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4132. [cleanup] dig: added +rd as a synonym for +recurse,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi added +class as an unabbreviated alternative
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to +cl. [RT #39686]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4131. [bug] Addressed further problems with reloading RPZ
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones. [RT #39649]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4130. [bug] The compatibility shim for *printf() misprinted some
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi large numbers. [RT #39586]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi key as per RFC 7344, Section 4.1. [RT #37215]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4126. [bug] Addressed a regression introduced in change #4121.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4125. [test] Added tests for dig, renamed delv test to digdelv.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4124. [func] Log errors or warnings encountered when parsing the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi internal default configuration. Clarify the logging
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of errors and warnings encountered in rndc
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi addzone or modzone parameters. [RT #39440]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4123. [port] Added %z (size_t) format options to the portable
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi internal printf/sprintf implementation. [RT #39586]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4122. [bug] The server could match a shorter prefix than what was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi available in CLIENT-IP policy triggers, and so, an
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi unexpected action could be taken. This has been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi corrected. [RT #39481]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4121. [bug] On servers with one or more policy zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configured as slaves, if a policy zone updated
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi during regular operation (rather than at
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi startup) using a full zone reload, such as via
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi AXFR, a bug could allow the RPZ summary data to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi fall out of sync, potentially leading to an
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi assertion failure in rpz.c when further
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi incremental updates were made to the zone, such
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi as via IXFR. [RT #39567]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4120. [bug] A bug in RPZ could cause the server to crash if
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi policy zones were updated while recursion was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi pending for RPZ processing of an active query.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4119. [test] Allow dig to set the message opcode. [RT #39550]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4118. [bug] Teach isc-config.sh about irs. [RT #39213]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4116. [bug] Fix a bug in RPZ that could cause some policy
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones that did not specifically require
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi recursion to be treated as if they did;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi consequently, setting qname-wait-recurse no; was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi sometimes ineffective. [RT #39229]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4115. [func] "rndc -r" now prints the result code (e.g.,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi running the requested command. [RT #38913]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4114. [bug] Fix a regression in radix tree implementation
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi introduced by ECS code. This bug was never
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi released, but it was reported by a user testing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi master. [RT #38983]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4113. [test] Check for Net::DNS is some system test
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi prerequisites. [RT #39369]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4112. [bug] Named failed to load when "root-delegation-only"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was used without a list of domains to exclude.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4111. [doc] Alphabetize rndc man page. [RT #39360]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4110. [bug] Address memory leaks / null pointer dereferences
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on out of memory. [RT #39310]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4109. [port] linux: support reading the local port range from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4108. [func] An additional NXDOMAIN redirect method (option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "nxdomain-redirect") has been added, allowing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi redirection to a specified DNS namespace instead
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of a single redirect zone. [RT #37989]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4107. [bug] Address potential deadlock when updating zone content.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4106. [port] Improve readline support. [RT #38938]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4105. [port] Misc fixes for Microsoft Visual Studio
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 2015 CTP6 in 64 bit mode. [RT #39308]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4104. [bug] Address uninitialized elements. [RT #39252]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4103. [port] Misc fixes for Microsoft Visual Studio
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 2015 CTP6. [RT #39267]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4102. [bug] Fix a use after free bug introduced in change
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi #4094. [RT #39281]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4101. [bug] dig: the +split and +rrcomments options didn't
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi work with +short. [RT #39291]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4100. [bug] Inherited owernames on the line immediately following
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a $INCLUDE were not working. [RT #39268]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4099. [port] clang: make unknown commandline options hard errors
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when determining what options are supported.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4098. [bug] Address use-after-free issue when using a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi predecessor key with dnssec-settime. [RT #39272]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4097. [func] Add additional logging about xfrin transfer status.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4096. [bug] Fix a use after free of query->sendevent.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4095. [bug] zone->options2 was not being properly initialized.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4094. [bug] A race during shutdown or reconfiguration could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cause an assertion in mem.c. [RT #38979]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4093. [func] Dig now learns the SIT value from truncated
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi responses when it retries over TCP. [RT #39047]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4090. [bug] Fix a crash while parsing malformed CAA RRs in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi presentation format, i.e., from text such as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi from master files. Thanks to John Van de
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Meulebrouck Brendgard for discovering and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi reporting this problem. [RT #39003]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4089. [bug] Send notifies immediately for slave zones during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi startup. [RT #38843]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4088. [port] Fixed errors when building with libressl. [RT #38899]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4087. [bug] Fix a crash due to use-after-free due to sequencing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of tasks actions. [RT #38495]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4084. [bug] Fix a possible race in updating stats counters.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4083. [cleanup] Print the number of CPUs and UDP listeners
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi consistently in the log and in "rndc status"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi output; indicate whether threads are supported
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in "named -V" output. [RT #38811]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4082. [bug] Incrementally sign large inline zone deltas.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4080. [func] Completed change #4022, adding a "lock-file" option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to named.conf to override the default lock file,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in addition to the "named -X <filename>" command
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi line option. Setting the lock file to "none"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using either method disables the check completely.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4079. [func] Preserve the case of the owner name of records to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the RRset level. [RT #37442]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi CMSG_SPACE(sizeof(char)). [RT #38621]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4077. [test] Add static-stub regression test for DS NXDOMAIN
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi return making the static stub disappear. [RT #38564]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4076. [bug] Named could crash on shutdown with outstanding
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi reload / reconfig events. [RT #38622]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4075. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4073. [cleanup] Add libjson-c version number reporting to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "named -V"; normalize version number formatting.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4072. [func] Add a --enable-querytrace configure switch for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi very verbose query trace logging. (This option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi has a negative performance impact and should be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi used only for debugging.) [RT #37520]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4071. [cleanup] Initialize pthread mutex attrs just once, instead of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi doing it per mutex creation. [RT #38547]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4070. [bug] Fix a segfault in nslookup in a query such as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "nslookup isc.org AMS.SNS-PB.ISC.ORG -all".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4069. [doc] Reorganize options in the nsupdate man page.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4068. [bug] Omit unknown serial number from JSON zone statistics.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4067. [cleanup] Reduce noise from RRL when query logging is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi disabled. [RT #38648]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4066. [doc] Reorganize options in the dig man page. [RT #38516]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4065. [test] Additional RFC 5011 tests. [RT #38569]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4064. [contrib] dnssec-keyset.sh: Generates a specified number
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of DNSSEC keys with timing set to implement a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi pre-publication key rollover strategy. Thanks
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to Jeffry A. Spain. [RT #38459]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4063. [bug] Asynchronous zone loads were not handled
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi correctly when the zone load was already in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi progress; this could trigger a crash in zt.c.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4062. [bug] Fix an out-of-bounds read in RPZ code. If the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi read succeeded, it doesn't result in a bug
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi during operation. If the read failed, named
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could segfault. [RT #38559]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4061. [bug] Handle timeout in legacy system test. [RT #38573]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4060. [bug] dns_rdata_freestruct could be called on a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi uninitialized structure when handling a error.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4059. [bug] Addressed valgrind warnings. [RT #38549]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4058. [bug] UDP dispatches could use the wrong pseudorandom
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi number generator context. [RT #38578]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4056. [bug] Expanded automatic testing of trust anchor
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi management and fixed several small bugs including
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a memory leak and a possible loss of key state
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi information. [RT #38458]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4055. [func] "rndc managed-keys" can be used to check status
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of trust anchors or to force keys to be refreshed,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Also, the managed keys data file has easier-to-read
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi comments. [RT #38458]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4054. [func] Added a new tool 'mdig', a lightweight clone of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dig able to send multiple pipelined queries.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4053. [security] Revoking a managed trust anchor and supplying
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an untrusted replacement could cause named
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to crash with an assertion failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2015-1349) [RT #38344]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4052. [bug] Fix a leak of query fetchlock. [RT #38454]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4050. [bug] RPZ could send spurious SERVFAILs in response
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to duplicate queries. [RT #38510]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4048. [bug] adb hash table was not being grown. [RT #38470]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4047. [cleanup] "named -V" now reports the current running versions
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of OpenSSL and the libxml2 libraries, in addition to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the versions that were in use at build time.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4046. [bug] Accounting of "total use" in memory context
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statistics was not correct. [RT #38370]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4045. [bug] Skip to next master on dns_request_createvia4 failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4044. [bug] Change 3955 was not complete, resulting in an assertion
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failure if the timing was just right. [RT #38352]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4043. [func] "rndc modzone" can be used to modify the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configuration of an existing zone, using similar
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi syntax to "rndc addzone". [RT #37895]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4042. [bug] zone.c:iszonesecure was being called too late.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4041. [func] TCP sockets can now be shared while connecting.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (This will be used to enable client-side support
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of pipelined queries.) [RT #38231]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4040. [func] Added server-side support for pipelined TCP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi queries. Clients may continue sending queries via
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi TCP while previous queries are being processed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in parallel. (The new "keep-response-order"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi option allows clients to be specified for which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the old behavior will still be used.) [RT #37821]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4038. [bug] Add 'rpz' flag to node and use it to determine whether
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to call dns_rpz_delete. This should prevent unbalanced
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi add / delete calls. [RT #36888]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4037. [bug] also-notify was ignoring the tsig key when checking
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for duplicates resulting in some expected notify
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi messages not being sent. [RT #38369]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4036. [bug] Make call to open a temporary file name safe during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi NZF creation. [RT #38331]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4035. [bug] Close temporary and NZF FILE pointers before moving
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the former into the latter's place, as required on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Windows. [RT #38332]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4034. [func] When added, negative trust anchors (NTA) are now
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi saved to files (viewname.nta), in order to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi persist across restarts of the named server.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4033. [bug] Missing out of memory check in request.c:req_send.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4032. [bug] Built-in "empty" zones did not correctly inherit the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "allow-transfer" ACL from the options or view.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4031. [bug] named-checkconf -z failed to report a missing file
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with a hint zone. [RT #38294]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4030. [func] "rndc delzone" is now applicable to zones that were
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configured in named.conf, as well as zones that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi were added via "rndc addzone". (Note, however, that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if named.conf is not also modified, the deleted zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi will return when named is reloaded.) [RT #37887]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4029. [func] "rndc showzone" displays the current configuration
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of a specified zone. [RT #37887]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4028. [bug] $GENERATE with a zero step was not being caught as a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi error. A $GENERATE with a / but no step was not being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi caught as a error. [RT #38262]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4025. [port] bsdi: failed to build. [RT #38047]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rdata_opt_current, dns_rdata_txt_first,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rdata_txt_next and dns_rdata_txt_current were
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi documented but not implemented. These have now been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rdata_spf_first, dns_rdata_spf_next and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rdata_spf_current were documented but not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi implemented. The prototypes for these
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi functions have been removed. [RT #38068]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4023. [bug] win32: socket handling with explicit ports and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi invoking named with -4 was broken for some
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configurations. [RT #38068]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4022. [func] Stop multiple spawns of named by limiting number of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi processes to 1. This is done by using a lockfile and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi checking whether we can listen on any configured
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi TCP interfaces. [RT #37908]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4021. [bug] Adjust max-recursion-queries to accommodate
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the need for more queries when the cache is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi empty. [RT #38104]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resulting in updates being sent to the wrong server.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4019. [func] If named is not configured to validate the answer
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi then allow fallback to plain DNS on timeout even
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when we know the server supports EDNS. [RT #37978]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4018. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4017. [test] Add system test to check lookups to legacy servers
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with broken DNS behavior. [RT #37965]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4016. [bug] Fix a dig segfault due to bad linked list usage.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4015. [bug] Nameservers that are skipped due to them being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi CNAMEs were not being logged. They are now logged
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to category 'cname' as per BIND 8. [RT #37935]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4014. [bug] When including a master file origin_changed was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi not being properly set leading to a potentially
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi spurious 'inherited owner' warning. [RT #37919]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4013. [func] Add a new tcp-only option to server (config) /
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi peer (struct) to use TCP transport to send
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi queries (in place of UDP transport with a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi TCP fallback on truncated (TC set) response).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4012. [cleanup] Check returned status of OpenSSL digest and HMAC
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi functions when they return one. Note this applies
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi only to FIPS capable OpenSSL libraries put in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi FIPS mode and MD5. [RT #37944]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4011. [bug] master's list port and dscp inheritance was not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi properly implemented. [RT #37792]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4010. [cleanup] Clear the prefetchable state when initiating a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi prefetch. [RT #37399]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4009. [func] delv: added a +tcp option. [RT #37855]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4007. [doc] Remove acl forward reference restriction. [RT #37772]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4006. [security] A flaw in delegation handling could be exploited
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to put named into an infinite loop. This has
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi been addressed by placing limits on the number
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of levels of recursion named will allow (default 7),
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and the number of iterative queries that it will
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi send (default 50) before terminating a recursive
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi query (CVE-2014-8500).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi The recursion depth limit is configured via the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "max-recursion-depth" option, and the query limit
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi via the "max-recursion-queries" option. [RT #37580]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4005. [func] The buffer used for returning text from rndc
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi commands is now dynamically resizable, allowing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi arbitrarily large amounts of text to be sent back
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to the client. (Prior to this change, it was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi possible for the output of "rndc tsig-list" to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi truncated.) [RT #37731]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4004. [bug] When delegations had AAAA glue but not A, a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi reference could be leaked causing an assertion
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failure on shutdown. [RT #37796]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4003. [security] When geoip-directory was reconfigured during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named run-time, the previously loaded GeoIP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi data could remain, potentially causing wrong
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ACLs to be used or wrong results to be served
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi based on geolocation (CVE-2014-8680). [RT #37720]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4002. [security] Lookups in GeoIP databases that were not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi loaded could cause an assertion failure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2014-8680). [RT #37679]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4001. [security] The caching of GeoIP lookups did not always
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi handle address families correctly, potentially
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resulting in an assertion failure (CVE-2014-8680).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi from the redirect zone. [RT #37722]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3999. [func] "mkeys" and "nzf" files are now named after
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi their corresponding views, unless the view name
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi contains characters that would be incompatible
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with use in a filename (i.e., slash, backslash,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or capital letters). If a view name does contain
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi these characters, the files will still be named
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using a cryptographic hash of the view name.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Regardless of this, if a file using the old name
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi format is found to exist, it will continue to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi used. [RT #37704]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3998. [bug] isc_radix_search was returning matches that were
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi too precise. [RT #37680]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3996. [bug] Address use after free on out of memory error in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi keyring_add. [RT #37639]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3995. [bug] receive_secure_serial holds the zone lock for too
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi long. [RT #37626]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3994. [func] Dig now supports setting the last unassigned DNS
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi header flag bit (dig +zflag). [RT #37421]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3993. [func] Dig now supports EDNS negotiation by default.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (dig +[no]ednsnegotiation).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Note: This is disabled by default in BIND 9.10
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and enabled by default in BIND 9.11. [RT #37604]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3992. [func] DiG can now send queries without questions
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (dig +header-only). [RT #37599]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3991. [func] Add the ability to buffer logging output by specifying
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "buffered yes;" when defining a channel. [RT #26561]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3990. [testing] Add tests for unknown DNSSEC algorithm handling.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3988. [func] Allow the zone serial of a dynamically updatable
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone to be updated via "rndc signing -serial".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3987. [port] Handle future Visual Studio 14 incompatible changes.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3986. [doc] Add the BIND version number to page footers
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in the ARM. [RT #37398]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3985. [doc] Describe how +ndots and +search interact in dig.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3984. [func] Accept 256 byte long PINs in native PKCS#11
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi crypto. [RT #37410]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3983. [bug] Change #3940 was incomplete: negative trust anchors
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could be set to last up to a week, but the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "nta-lifetime" and "nta-recheck" options were
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi still limited to one day. [RT #37522]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3982. [doc] Include release notes in product documentation.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3981. [bug] Cache DS/NXDOMAIN independently of other query types.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi size. [RT #37187]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3979. [bug] Negative trust anchor fetches were not properly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi managed. [RT #37488]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3978. [test] Added a unit test for Diffie-Hellman key
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi computation, completing change #3974. [RT #37477]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3977. [cleanup] "rndc secroots" reported a "not found" error when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi there were no negative trust anchors set. [RT #37506]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3976. [bug] When refreshing managed-key trust anchors, clear
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi any cached trust so that they will always be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi revalidated with the current set of secure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi roots. [RT #37506]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3975. [bug] Don't populate or use the bad cache for queries that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi don't request or use recursion. [RT #37466]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3974. [bug] Handle DH_compute_key() failure correctly in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3973. [test] Added hooks for Google Performance Tools CPU profiler,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi including real-time/wall-clock profiling. Use
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "configure --with-gperftools-profiler" to enable.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3972. [bug] Fix host's usage statement. [RT #37397]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3971. [bug] Reduce the cascading failures due to a bad $TTL line
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in named-checkconf / named-checkzone. [RT #37138]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3969. [test] Added 'delv' system test. [RT #36901]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3968. [bug] Silence spurious log messages when using 'named -[46]'.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3967. [test] Add test for inlined signed zone in multiple views
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with different DNSKEY sets. [RT #35759]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3965. [func] Log outgoing packets and improve packet logging to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi support logging the remote address. [RT #36624]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3964. [func] nsupdate now performs check-names processing.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3963. [test] Added NXRRSET test cases to the "dlzexternal"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi system test. [RT #37344]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi conditions. [RT #34663]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi BADSIG. [RT #37216]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3959. [bug] Updates could be lost if they arrived immediately
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi after a rndc thaw. [RT #37233]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3958. [bug] Detect when writeable files have multiple references
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and ECDSAP384SHA384. [RT #37183]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3956. [func] Notify messages are now rate limited by notify-rate and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi startup-notify-rate instead of serial-query-rate.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3955. [bug] Notify messages due to changes are no longer queued
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi behind startup notify messages. [RT #24454]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi two name pointers were the same. [RT #37176]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3951. [func] Add the ability to set yet-to-be-defined EDNS flags
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to dig (+ednsflags=#). [RT #37142]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3950. [port] Changed the bin/python Makefile to work around a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3949. [experimental] Experimental support for draft-andrews-edns1 by sending
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi building). Add support for limiting the EDNS version
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi advertised to servers: server { edns-version 0; };
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Log the EDNS version received in the query log.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --with-tuning=large. [RT #37059]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3947. [cleanup] Set the executable bit on libraries when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi libtool. [RT #36786]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3946. [cleanup] Improved "configure" search for a python interpreter.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3945. [bug] Invalid wildcard expansions could be incorrectly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi accepted by the validator. [RT #37093]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3944. [test] Added a regression test for "server-id". [RT #37057]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3943. [func] SERVFAIL responses can now be cached for a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi limited time (configured by "servfail-ttl",
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi default 10 seconds, limit 30). This can reduce
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the frequency of retries when an authoritative
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server is known to be failing, e.g., due to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ongoing DNSSEC validation problems. [RT #21347]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3942. [bug] Wildcard responses from a optout range should be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi marked as insecure. [RT #37072]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3941. [doc] Include the BIND version number in the ARM. [RT #37067]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3940. [func] "rndc nta" now allows negative trust anchors to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi set for up to one week. [RT #37069]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3939. [func] Improve UPDATE forwarding performance by allowing TCP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi connections to be shared. [RT #37039]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3938. [func] Added quotas to be used in recursive resolvers
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that are under high query load for names in zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi whose authoritative servers are nonresponsive or
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi are experiencing a denial of service attack.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - "fetches-per-server" limits the number of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi simultaneous queries that can be sent to any
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi single authoritative server. The configured
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi value is a starting point; it is automatically
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi adjusted downward if the server is partially or
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi completely non-responsive. The algorithm used to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi adjust the quota can be configured via the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "fetch-quota-params" option.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - "fetches-per-zone" limits the number of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi simultaneous queries that can be sent for names
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi within a single domain. (Note: Unlike
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "fetches-per-server", this value is not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi self-tuning.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - New stats counters have been added to count
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi queries spilled due to these quotas.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi See the ARM for details of these options. [RT #37125]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3937. [func] Added some debug logging to better indicate the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi conditions causing SERVFAILs when resolving.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3936. [func] Added authoritative support for the EDNS Client
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Subnet (ECS) option.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ACLs can now include "ecs" elements which specify
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an address or network prefix; if an ECS option is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi included in a DNS query, then the address encoded
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in the option will be matched against "ecs" ACL
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Also, if an ECS address is included in a query,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi then it will be used instead of the client source
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi address when matching "geoip" ACL elements. This
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi behavior can be overridden with "geoip-use-ecs no;".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Note: to enable "geoip" ACLs, use "configure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --with-geoip". This requires libGeoIP version
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 1.5.0 or higher.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi When "ecs" or "geoip" ACL elements are used to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi select a view for a query, the response will include
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an ECS option to indicate which client network the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi answer is valid for.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Thanks to Vincent Bernat.) [RT #36781]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3935. [bug] "geoip asnum" ACL elements would not match unless
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the full organization name was specified. They
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can now match against the AS number alone (e.g.,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi AS1234). [RT #36945]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi sit-secret documentation. [RT #36980]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3933. [bug] Corrected the implementation of dns_rdata_casecompare()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for the HIP rdata type. [RT #36911]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3932. [test] Improved named-checkconf tests. [RT #36911]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3930. [bug] "rndc nta -r" could cause a server hang if the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi NTA was not found. [RT #36909]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3928. [test] Improve rndc system test. [RT #36898]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3927. [bug] dig: report PKCS#11 error codes correctly when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi compiled with --enable-native-pkcs11. [RT #36956]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3926. [doc] Added doc for geoip-directory. [RT #36877]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3923. [bug] Sanity check the xml2-config output. [RT #22246]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3922. [bug] When resigning, dnssec-signzone was removing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi all signatures from delegation nodes. It now
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi retains DS and (if applicable) NSEC signatures.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3920. [doc] Added doc for masterfile-style. [RT #36823]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3919. [bug] dig: continue to next line if a address lookup fails
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in batch mode. [RT #36755]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3918. [doc] Update check-spf documentation. [RT #36910]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3917. [bug] dig, nslookup and host now continue on names that are
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi too long after applying a search list elements.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3916. [contrib] zone2sqlite checked wrong result code. Address
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi compiler warnings. [RT #36931]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3915. [bug] Address a assertion if a route event arrived while
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi shutting down. [RT #36887]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3914. [bug] Allow the URI target and CAA value fields to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi be zero length. [RT #36737]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3913. [bug] Address race issue in dispatch. [RT #36731]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3911. [func] Implement EDNS EXPIRE option client side, allowing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a slave server to set the expiration timer correctly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when transferring zone data from another slave
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server. [RT #35925]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3910. [bug] Fix races to free event during shutdown. [RT #36720]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3909. [bug] When computing the number of elements required for a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi acl count_acl_elements could have a short count leading
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to a assertion failure. Also zero out new acl elements
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in dns_acl_merge. [RT #36675]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3908. [bug] rndc now differentiates between a zone in multiple
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi views and a zone that doesn't exist at all. [RT #36691]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3907. [cleanup] Alphabetize rndc help. [RT #36683]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3906. [protocol] Update URI record format to comply with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi draft-faltstrom-uri-08. [RT #36642]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3904. [func] Add the RPZ SOA to the additional section. [RT36507]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3903. [bug] Improve the accuracy of DiG's reported round trip
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi time. [RT 36611]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3902. [bug] liblwres wasn't handling link-local addresses in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nameserver clauses in resolv.conf. [RT #36039]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3901. [protocol] Added support for CAA record type (RFC 6844).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3899. [bug] "request-ixfr" is only applicable to slave and redirect
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones. [RT #36608]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3898. [bug] Too small a buffer in tohexstr() calls in test code.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3897. [bug] RPZ summary information was not properly being updated
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi after a AXFR resulting in changes sometimes being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ignored. [RT #35885]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3896. [bug] Address performance issues with DSCP code on some
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi platforms. [RT #36534]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3895. [func] Add the ability to set the DSCP code point to dig.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3894. [bug] Buffers in isc_print_vsnprintf were not properly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi initialized leading to potential overflows when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi printing out quad values. [RT #36505]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3893. [bug] Peer DSCP values could be returned without being set.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3892. [bug] Setting '-t aaaa' in .digrc had unintended side
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi effects. [RT #36452]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to install python programs.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3890. [bug] RRSIG sets that were not loaded in a single transaction
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi at start up where not being correctly added to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi re-signing heaps. [RT #36302]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3889. [port] hurd: configure fixes as per:
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3888. [func] 'rndc status' now reports the number of automatic
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones. [RT #36015]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi they are easier to use in a debugger. [RT #36373]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3886. [bug] rbtdb_write_header should use a once to initialize
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi FILE_VERSION. [RT #36374]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3885. [port] Use 'open()' rather than 'file()' to open files in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3883. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3882. [func] By default, negative trust anchors will be tested
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi periodically to see whether data below them can be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi validated, and if so, they will be allowed to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi expire early. The "rndc nta -force" option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi overrides this behavior. The default NTA lifetime
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and the recheck frequency can be configured by the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "nta-lifetime" and "nta-recheck" options. [RT #36146]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3881. [bug] Address memory leak with UPDATE error handling.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3880. [test] Update ans.pl to work with new TSIG support in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Net::DNS; add additional Net::DNS version prerequisite
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi checks. [RT #36327]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3879. [func] Add version printing option to various BIND utilities.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3878. [bug] Using the incorrect filename for a DLZ module
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi caused a segmentation fault on startup. [RT #36286]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3877. [bug] Inserting and deleting parent and child nodes
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in response policy zones could trigger an assertion
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failure. [RT #36272]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3876. [bug] Improve efficiency of DLZ redirect zones by
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi suppressing unnecessary database lookups. [RT #35835]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3875. [cleanup] Clarify log message when unable to read private
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi key files. [RT #24702]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3874. [test] Check that only "check-names master" is needed for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi updates to be accepted.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3872. [bug] Address issues found by static analysis. [RT #36209]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3871. [bug] Don't publish an activated key automatically before
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi its publish time. [RT #35063]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3870. [func] Updated the random number generator used in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the resolver to use the updated ChaCha based one
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (similar to OpenBSD's changes). Also moved the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RNG to libisc and added unit tests for it.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3869. [doc] Document that in-view zones cannot be used for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response policy zones. [RT #35941]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3868. [bug] isc_mem_setwater incorrectly cleared hi_called
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi potentially leaving over memory cleaner running.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3867. [func] "rndc nta" can now be used to set a temporary
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi negative trust anchor, which disables DNSSEC
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi validation below a specified name for a specified
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi period of time (not exceeding 24 hours). This
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can be used when validation for a domain is known
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to be failing due to a configuration error on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the part of the domain owner rather than a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi spoofing attack. [RT #29358]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3866. [bug] Named could die on disk full in generate_session_key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3865. [test] Improved testability of the red-black tree
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi implementation and added unit tests. [RT #35904]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3864. [bug] RPZ didn't work well when being used as forwarder.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3863. [bug] The "E" flag was missing from the query log as a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi unintended side effect of code rearrangement to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi support EDNS EXPIRE. [RT #36117]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3862. [cleanup] Return immediately if we are not going to log the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi message in ns_client_dumpmessage.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3861. [security] Missing isc_buffer_availablelength check results
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in a REQUIRE assertion when printing out a packet
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2014-3859). [RT #36078]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3860. [bug] ioctl(DP_POLL) array size needs to be determined
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi at run time as it is limited to {OPEN_MAX}.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3859. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3858. [bug] Disable GCC 4.9 "delete null pointer check".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3857. [bug] Make it harder for a incorrect NOEDNS classification
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to be made. [RT #36020]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3856. [bug] Configuring libjson without also configuring libxml
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resulted in a REQUIRE assertion when retrieving
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statistics using json. [RT #36009]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3855. [bug] Limit smoothed round trip time aging to no more than
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi once a second. [RT #32909]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3854. [cleanup] Report unrecognized options, if any, in the final
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configure summary. [RT #36014]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the handling of a rdataset with no records. [RT #35968]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3852. [func] Increase the default number of clients available
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for servicing lightweight resolver queries, and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi make them configurable via the "lwres-tasks" and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "lwres-clients" options. (Thanks to Tomas Hozza.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3851. [func] Allow libseccomp based system-call filtering
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on Linux; use "configure --enable-seccomp" to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi turn it on. Thanks to Loganaden Velvindron
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of AFRINIC for the contribution. [RT #35347]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3849. [doc] Alphabetized dig's +options. [RT #35992]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3848. [bug] Adjust 'statistics-channels specified but not effective'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi error message to account for JSON support. [RT #36008]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3847. [bug] 'configure --with-dlz-postgres' failed to fail when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi there is not support available.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ixfr query. [RT #35980]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3845. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3844. [bug] Use the x64 version of the Microsoft Visual C++
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Redistributable when built for 64 bit Windows.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3842. [bug] Adjust RRL log-only logging category. [RT #35945]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3840. [port] Check for arc4random_addrandom() before using it;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi it's been removed from OpenBSD 5.5. [RT #35907]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3839. [test] Use only posix-compatible shell in system tests.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3837. [security] A NULL pointer is passed to query_prefetch resulting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a REQUIRE assertion failure when a fetch is actually
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi initiated (CVE-2014-3214). [RT #35899]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3836. [bug] Address C++ keyword usage in header file.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3835. [bug] Geoip ACL elements didn't work correctly when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi referenced via named or nested ACLs. [RT #35879]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3834. [bug] The re-signing heaps were not being updated soon enough
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi leading to multiple re-generations of the same RRSIG
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when a zone transfer was in progress. [RT #35273]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3833. [bug] Cross compiling was broken due to calling genrandom at
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi build time. [RT #35869]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3832. [func] "named -L <filename>" causes named to send log
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi messages to the specified file by default instead
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of to the system log. (Thanks to Tony Finch.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3831. [cleanup] Reduce logging noise when EDNS state changes occur.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3830. [func] When query logging is enabled, log query errors at
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the same level ('info') as the queries themselves.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3829. [func] "dig +ttlunits" causes dig to print TTL values
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with time-unit suffixes: w, d, h, m, s for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi weeks, days, hours, minutes, and seconds. (Thanks
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to Tony Finch.) [RT #35823]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3828. [func] "dnssec-signzone -N date" updates serial number
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to the current date in YYYYMMDDNN format.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3827. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3825. [bug] Address sign extension bug in isc_regex_validate.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3824. [bug] A collision between two flag values could cause
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi problems with cache cleaning when SIT was enabled.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3823. [func] Log the rpz cname target when rewriting. [RT #35667]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3822. [bug] Log the correct type of static-stub zones when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi removing them. [RT #35842]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi update and transaction support. Thanks to Marty
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Lee for the contribution. [RT #35656]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3820. [func] The DLZ API doesn't pass the database version to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the lookup() function; this can cause DLZ modules
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that allow dynamic updates to mishandle prerequisite
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi checks. This has been corrected by adding a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 'dbversion' field to the dns_clientinfo_t
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi structure. [RT #35656]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3819. [bug] NSEC3 hashes need to be able to be entered and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi displayed without padding. This is not a issue for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi currently defined algorithms but may be for future
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hash algorithms. [RT #27925]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3818. [bug] Stop lying to the optimizer that 'void *arg' is a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi constant in isc_event_allocate.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3817. [func] The "delve" command is now spelled "delv" to avoid
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a namespace collision with the Xapian project.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3816. [func] "dig +qr" now reports query size. (Thanks to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Tony Finch.) [RT #35822]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3814. [func] The "masterfile-style" zone option controls the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi formatting of dumped zone files. Options are
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "relative" (multiline format) and "full" (one
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi record per line). The default is "relative".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3813. [func] "host" now recognizes the "timeout", "attempts" and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "debug" options when set in /etc/resolv.conf.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Thanks to Adam Tkac at RedHat.) [RT #21885]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3812. [func] Dig now supports sending arbitrary EDNS options from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the command line (+ednsopt=code[:value]). [RT #35584]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3811. [func] "serial-update-method date;" sets serial number
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on dynamic update to today's date in YYYYMMDDNN
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi format. (Thanks to Bradley Forschinger.) [RT #24903]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3810. [bug] Work around broken nameservers that fail to ignore
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi unknown EDNS options. [RT #35766]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3809. [doc] Fix SIT and NSID documentation.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3808. [doc] Clean up "prefetch" documentation. [RT #35751]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3807. [bug] Fix sign extension bug in dns_name_fromtext when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi lowercase is set. [RT #35743]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3806. [test] Improved system test portability. [RT #35625]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3805. [contrib] Added contrib/perftcpdns, a performance testing tool
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for DNS over TCP. [RT #35710]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.10.0rc1 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3804. [bug] Corrected a race condition in dispatch.c in which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi portentry could be reset leading to an assertion
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failure in socket_search(). (Change #3708
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi addressed the same issue but was incomplete.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3803. [bug] "named-checkconf -z" incorrectly rejected zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using alternate data sources for not having a "file"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi option. [RT #35685]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3802. [bug] Various header files were not being installed.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3800. [bug] A pending event on the route socket could cause an
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi assertion failure when shutting down named. [RT #35674]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3799. [bug] Improve named's command line error reporting.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi time. [RT #35659]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3797. [port] netbsd: geoip support probing was broken. [RT #35642]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3795. [bug] Make named-checkconf detect raw masterfiles for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hint zones and reject them. [RT #35268]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3793. [bug] zone.c:save_nsec3param() could assert when out of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memory. [RT #35621]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3792. [func] Provide links to the alternate statistics views when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi displaying in a browser. [RT #35605]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3791. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3790. [bug] Handle broken nameservers that send BADVERS in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response to unknown EDNS options. Maintain
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statistics on BADVERS responses.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3789. [bug] Null pointer dereference on rbt creation failure.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3788. [bug] dns_peer_getrequestsit was returning request_nsid by
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.10.0b2 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3787. [bug] The code that checks whether "auto-dnssec" is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi allowed was ignoring "allow-update" ACLs set at
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the options or view level. [RT #29536]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3786. [func] Provide more detailed error codes when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi native PKCS#11. "pkcs11-tokens" now fails robustly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rather than asserting when run against an HSM with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an incomplete PKCS#11 API implementation. [RT #35479]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3785. [bug] Debugging code dumphex didn't accept arbitrarily long
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi input (only compiled with -DDEBUG). [RT #35544]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3784. [bug] Using "rrset-order fixed" when it had not been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi enabled at compile time caused inconsistent
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi results. It now works as documented, defaulting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to cyclic mode. [RT #28104]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3783. [func] "tsig-keygen" is now available as an alternate
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi command name for "ddns-confgen". It generates
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a TSIG key in named.conf format without comments.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3782. [func] Specifying "auto" as the salt when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "rndc signing -nsec3param" causes named to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi generate a 64-bit salt at random. [RT #35322]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3781. [tuning] Use adaptive mutex locks when available; this
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi has been found to improve performance under load
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on many systems. "configure --with-locktype=standard"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi restores conventional mutex locks. [RT #32576]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3780. [bug] $GENERATE handled negative numbers incorrectly.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3779. [cleanup] Clarify the error message when using an option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that was not enabled at compile time. [RT #35504]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3778. [bug] Log a warning when the wrong address family is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi used in "listen-on" or "listen-on-v6". [RT #17848]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3777. [bug] EDNS EXPIRE code could dump core when processing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DLZ queries. [RT #35493]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3776. [func] "rndc -q" suppresses output from successful
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rndc commands. Errors are printed on stderr.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3775. [bug] dlz_dlopen driver could return the wrong error
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi code on API version mismatch, leading to a segfault.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3774. [func] When using "request-nsid", log the NSID value in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi printable form as well as hex. [RT #20864]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3773. [func] "host", "nslookup" and "nsupdate" now have
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi options to print the version number and exit.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Based in part on a contribution from Tim Tessier.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3771. [cleanup] Adjusted log level for "using built-in key"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi messages. [RT #24383]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3770. [bug] "dig +trace" could fail with an assertion when it
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi needed to fall back to TCP due to a truncated
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response. [RT #24660]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3769. [doc] Improved documentation of "rndc signing -list".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi algorithm. [RT #34000]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3767. [func] Log explicitly when using rndc.key to configure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi command channel. [RT #35316]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3766. [cleanup] Fixed problems with building outside the source
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi tree when using native PKCS#11. [RT #35459]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3765. [bug] Fixed a bug in "rndc secroots" that could crash
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named when dumping an empty keynode. [RT #35469]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3764. [bug] The dnssec-keygen/settime -S and -i options
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (to set up a successor key and set the prepublication
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi interval) were missing from dnssec-keyfromlabel.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3763. [bug] delve: Cache DNSSEC records to avoid the need to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi re-fetch them when restarting validation. [RT #35476]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3762. [bug] Address build problems with --pkcs11-native +
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --with-openssl with ECDSA support. [RT #35467]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3761. [bug] Address dangling reference bug in dns_keytable_add.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3760. [bug] Improve SIT with native PKCS#11 and on Windows.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3759. [port] Enable delve on Windows. [RT #35441]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3758. [port] Enable export library APIs on Windows. [RT #35382]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3757. [port] Enable Python tools (dnssec-coverage,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dnssec-checkds) to run on Windows. [RT #34355]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3756. [bug] GSSAPI Kerberos realm checking was broken in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi check_config leading to spurious messages being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi logged. [RT #35443]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.10.0b1 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3755. [func] Add stats counters for known EDNS options + others.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3754. [cleanup] win32: Installer now places files in the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Program Files area rather than system services.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3753. [bug] allow-notify was ignoring keys. [RT #35425]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3752. [bug] Address potential REQUIRE failure if
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DNS_STYLEFLAG_COMMENTDATA is set when printing out
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3751. [tuning] The default setting for the -U option (setting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the number of UDP listeners per interface) has
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi been adjusted to improve performance. [RT #35417]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3750. [experimental] Partially implement EDNS EXPIRE option as described
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in draft-andrews-dnsext-expire-00. Retrieval of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the remaining time until expiry for slave zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi is supported.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi EXPIRE uses an experimental option code (65002),
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi which is subject to change. [RT #35416]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3749. [func] "dig +subnet" sends an EDNS client subnet option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi containing the specified address/prefix when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi querying. (Thanks to Wilmer van der Gaast.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3748. [test] Use delve to test dns_client interfaces. [RT #35383]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3747. [bug] A race condition could lead to a core dump when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi destroying a resolver fetch object. [RT #35385]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3746. [func] New "max-zone-ttl" option enforces maximum
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi TTLs for zones. If loading a zone containing a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi higher TTL, the load fails. DDNS updates with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi higher TTLs are accepted but the TTL is truncated.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Note: Currently supported for master zones only;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi inline-signing slaves will be added.) [RT #38405]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3745. [func] "configure --with-tuning=large" adjusts various
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi compiled-in constants and default settings to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi values suited to large servers with abundant
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memory. [RT #29538]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3744. [experimental] SIT: send and process Source Identity Tokens
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (similar to DNS Cookies by Donald Eastlake 3rd),
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi which are designed to help clients detect off-path
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi spoofed responses and for servers to identify
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi legitimate clients.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi SIT uses an experimental EDNS option code (65001),
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi which will be changed to an IANA-assigned value
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if the experiment is deemed a success.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi SIT can be enabled via "configure --enable-sit" (or
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --enable-developer). It is enabled by default in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Servers can be configured to send smaller responses
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to clients that have not identified themselves via
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi SIT. RRL processing has also been updated;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi legitimate clients are not subject to rate
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi limiting. [RT #35389]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3743. [bug] delegation-only flag wasn't working in forward zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi declarations despite being documented. This is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi needed to support turning off forwarding and turning
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on delegation only at the same name. [RT #35392]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3742. [port] linux: libcap support: declare curval at start of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi block. [RT #35387]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3741. [func] "delve" (domain entity lookup and validation engine):
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi A new tool with dig-like semantics for performing DNS
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi lookups, with internal DNSSEC validation, using the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi same resolver and validator logic as named. This
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi allows easy validation of DNSSEC data in environments
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with untrustworthy resolvers, and assists with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi troubleshooting of DNSSEC problems. [RT #32406]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3740. [contrib] Minor fixes to configure --with-dlz-bdb,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3739. [func] Added per-zone stats counters to track TCP and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi UDP queries. [RT #35375]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3737. [bug] 'rndc retransfer' could trigger a assertion failure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with inline zones. [RT #35353]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3736. [bug] nsupdate: When specifying a server by name,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi fall back to alternate addresses if the first
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi address for that name is not reachable. [RT #25784]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3735. [cleanup] Merged the libiscpk11 library into libisc
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to simplify dependencies. [RT #35205]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3734. [bug] Improve building with libtool. [RT #35314]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3733. [func] Improve interface scanning support. Interface
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi information will be automatically updated if the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi OS supports routing sockets (MacOS, *BSD, Linux).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Use "automatic-interface-scan no;" to disable.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Add "rndc scan" to trigger a scan. [RT #23027]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi driver to dump core on 64-bit systems. [RT #35324]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3731. [func] Added a "no-case-compress" ACL, which causes
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named to use case-insensitive compression
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (disabling change #3645) for specified
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi clients. (This is useful when dealing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with broken client implementations that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi use case-sensitive name comparisons,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rejecting responses that fail to match the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi capitalization of the query that was sent.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3730. [cleanup] Added "never" as a synonym for "none" when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configuring key event dates in the dnssec tools.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3729. [bug] dnssec-keygen could set the publication date
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi incorrectly when only the activation date was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi specified on the command line. [RT #35278]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3728. [doc] Expanded native-PKCS#11 documentation,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi specifically pkcs11: URI labels. [RT #35287]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3727. [func] The isc_bitstring API is no longer used and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi has been removed from libisc. [RT #35284]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3726. [cleanup] Clarified the error message when attempting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to configure more than 32 response-policy zones.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3725. [contrib] Updated zkt and nslint to newest versions,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cleaned up and rearranged the contrib
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi directory, and added a README.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.10.0a2 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3724. [bug] win32: Fixed a bug that prevented dig and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi host from exiting properly after completing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a UDP query. [RT #35288]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3723. [cleanup] Imported keys are now handled the same way
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi regardless of DNSSEC algorithm. [RT #35215]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3722. [bug] Using geoip ACLs in a blackhole statement
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could cause a segfault. [RT #35272]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3721. [doc] Improved documentation of the EDNS processing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi enhancements introduced in change #3593. [RT #35275]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3720. [bug] Address compiler warnings. [RT #35261]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3719. [bug] Address memory leak in in peer.c. [RT #35255]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi probing to see if it is possible to set dscp values
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on a per packet basis. [RT #35252]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3716. [bug] The dns_request code was setting dcsp values when not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi requested. [RT #35252]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3715. [bug] The region and city databases could fail to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi initialize when using some versions of libGeoIP,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi causing assertion failures when named was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi configured to use them. [RT #35427]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3714. [test] System tests that need to test for cryptography
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi support before running can now use a common
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "testcrypto.sh" script to do so. [RT #35213]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3713. [bug] Save memory by not storing "also-notify" addresses
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in zone objects that are configured not to send
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi notify requests. [RT #35195]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3712. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3711. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3710. [bug] Address double dns_zone_detach when switching to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using automatic empty zones from regular zones.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3709. [port] Use built-in versions of strptime() and timegm()
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on all platforms to avoid portability issues.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3708. [bug] Address a portentry locking issue in dispatch.c.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on a missing resolv.conf file and initializes the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi structure as if it had been configured with:
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nameserver ::1
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nameserver 127.0.0.1
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Note: Callers will need to be updated to treat
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ISC_R_FILENOTFOUND as a qualified success or else
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi they will leak memory. The following code fragment
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi will work with both old and new versions without
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi changing the behaviour of the existing code.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resconf = NULL;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi result = irs_resconf_load(mctx, "/etc/resolv.conf",
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if (result != ISC_SUCCESS) {
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if (resconf != NULL)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi irs_resconf_destroy(&resconf);
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3706. [contrib] queryperf: Fixed a possible integer overflow when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi printing results. [RT #35182]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3705. [func] "configure --enable-native-pkcs11" enables BIND
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to use the PKCS#11 API for all cryptographic
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi functions, so that it can drive a hardware service
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi module directly without the need to use a modified
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi OpenSSL as intermediary (so long as the HSM's vendor
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi provides a complete-enough implementation of the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi PKCS#11 interface). This has been tested successfully
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with the Thales nShield HSM and with SoftHSMv2 from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the OpenDNSSEC project. [RT #29031]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3703. [func] To improve recursive resolver performance, cache
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi records which are still being requested by clients
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can now be automatically refreshed from the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi authoritative server before they expire, reducing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or eliminating the time window in which no answer
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi is available in the cache. See the "prefetch" option
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for more details. [RT #35041]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3702. [func] 'dnssec-coverage -l' option specifies a length
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of time to check for coverage; events further into
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the future are ignored. 'dnssec-coverage -z'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi checks only ZSK events, and 'dnssec-coverage -k'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi checks only KSK events. (Thanks to Peter Palfrader.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3701. [func] named-checkconf can now obscure shared secrets
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when printing by specifying '-x'. [RT #34465]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3700. [func] Allow access to subgroups of XML statistics via
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi special URLs http://<server>:<port>/xml/v3/server,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi /zones, /net, /tasks, /mem, and /status. [RT #35115]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3699. [bug] Improvements to statistics channel XSL stylesheet:
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the stylesheet can now be cached by the browser;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi section headers are omitted from the stats display
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when there is no data in those sections to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi displayed; counters are now right-justified for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi easier readability. [RT #35117]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3698. [cleanup] Replaced all uses of memcpy() with memmove().
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3697. [bug] Handle "." as a search list element when IDN support
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi is enabled. [RT #35133]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3696. [bug] dig failed to handle AXFR style IXFR responses which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi span multiple messages. [RT #35137]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3695. [bug] Address a possible race in dispatch.c. [RT #35107]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3694. [bug] Warn when a key-directory is configured for a zone,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi but does not exist or is not a directory. [RT #35108]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3693. [security] memcpy was incorrectly called with overlapping
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ranges resulting in malformed names being generated
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on some platforms. This could cause INSIST failures
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when serving NSEC3 signed zones (CVE-2014-0591).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was no data at the node. [RT #35080]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3691. [contrib] Address null pointer dereference in LDAP and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi MySQL DLZ modules.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3690. [bug] Iterative responses could be missed when the source
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi port for an upstream query was the same as the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi listener port (53). [RT #34925]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3689. [bug] Fixed a bug causing an insecure delegation from one
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi static-stub zone to another to fail with a broken
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi trust chain. [RT #35081]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3688. [bug] loadnode could return a freed node on out of memory.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3687. [bug] Address null pointer dereference in zone_xfrdone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3686. [func] "dnssec-signzone -Q" drops signatures from keys
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that are still published but no longer active.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3685. [bug] "rndc refresh" didn't work correctly with slave
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones using inline-signing. [RT #35105]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3684. [bug] The list of included files would grow on reload.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3683. [cleanup] Add a more detailed "not found" message to rndc
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi commands which specify a zone name. [RT #35059]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3682. [bug] Correct the behavior of rndc retransfer to allow
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi inline-signing slave zones to retain NSEC3 parameters
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi instead of reverting to NSEC. [RT #34745]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3681. [port] Update the Windows build system to support feature
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi selection and WIN64 builds. This is a work in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi progress. [RT #34160]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3680. [bug] Ensure buffer space is available in "rndc zonestatus".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3679. [bug] dig could fail to clean up TCP sockets still
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi waiting on connect(). [RT #35074]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3678. [port] Update config.guess and config.sub. [RT #35060]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi times. [RT #35073]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3676. [bug] "named-checkconf -z" now checks zones of type
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hint and redirect as well as master. [RT #35046]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3675. [misc] Provide a place for third parties to add version
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi information for their extensions in the version
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi file by setting the EXTENSIONS variable.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --- 9.10.0a1 released ---
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3673. [func] New "in-view" zone option allows direct sharing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of zones between views. [RT #32968]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3672. [func] Local address can now be specified when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_client API. [RT #34811]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3671. [bug] Don't allow dnssec-importkey overwrite a existing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi non-imported private key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3670. [bug] Address read after free in server side of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi lwres_getrrsetbyname. [RT #29075]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3667. [test] dig: add support to keep the TCP socket open between
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi successive queries (+[no]keepopen). [RT #34918]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3666. [func] Add a tool, named-rrchecker, for checking the syntax
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of individual resource records. This tool is intended
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to be called by provisioning systems so that the front
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi end does not need to be upgraded to support new DNS
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi record types. [RT #34778]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3665. [bug] Failure to release lock on error in receive_secure_db.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi locking and other bugs. [RT #34855]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3663. [bug] Address bugs in dns_rdata_fromstruct and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3661. [bug] Address lock order reversal deadlock with inline zones.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3659. [port] solaris: don't add explicit dependencies/rules for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi python programs as make won't use the implicit rules.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3658. [port] linux: Address platform specific compilation issue
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when libcap-devel is installed. [RT #34838]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3657. [port] Some readline clones don't accept NULL pointers when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi calling add_history. [RT #34842]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3656. [security] Treat an all zero netmask as invalid when generating
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the localnets acl. (The prior behavior could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi allow unexpected matches when using some versions
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of Winsock: CVE-2013-6320.) [RT #34687]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3655. [cleanup] Simplify TCP message processing when requesting a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone transfer. [RT #34825]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3654. [bug] Address race condition with manual notify requests.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3653. [func] Create delegations for all "children" of empty zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi except "forward first". [RT #34826]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3652. [bug] Address bug with rpz-drop policy. [RT #34816]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3651. [tuning] Adjust when a master server is deemed unreachable.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3650. [tuning] Use separate rate limiting queues for refresh and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi notify requests. [RT #30589]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3649. [cleanup] Include a comment in .nzf files, giving the name of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the associated view. [RT #34765]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3648. [test] Updated the ATF test framework to version 0.17.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3647. [bug] Address a race condition when shutting down a zone.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3646. [bug] Journal filename string could be set incorrectly,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi causing garbage in log messages. [RT #34738]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3645. [protocol] Use case sensitive compression when responding to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi queries. [RT #34737]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3644. [protocol] Check that EDNS subnet client options are well formed.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3643. [doc] Clarify RRL "slip" documentation.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3642. [func] Allow externally generated DNSKEY to be imported
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi into the DNSKEY management framework. A new tool
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dnssec-importkey is used to do this. [RT #34698]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3641. [bug] Handle changes to sig-validity-interval settings
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi better. [RT #34625]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3640. [bug] ndots was not being checked when searching. Only
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi continue searching on NXDOMAIN responses. Add the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ability to specify ndots to nslookup. [RT #34711]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in a key zone. [RT #34238]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi encountered. [RT #34668]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3637. [bug] 'allow-query-on' was checking the source address
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rather than the destination address. [RT #34590]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3636. [bug] Automatic empty zones now behave better with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi forward only "zones" beneath them. [RT #34583]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3635. [bug] Signatures were not being removed from a zone with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi only KSK keys for a algorithm. [RT #34439]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3634. [func] Report build-id in rndc status. Report build-id
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when building from a git repository. [RT #20422]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3633. [cleanup] Refactor OPT processing in named to make it easier
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to support new EDNS options. [RT #34414]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3632. [bug] Signature from newly inactive keys were not being
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi removed. [RT #32178]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3631. [bug] Remove spurious warning about missing signatures when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi qtype is SIG. [RT #34600]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3629. [func] Allow the printing of cryptographic fields in DNSSEC
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi records by dig to be suppressed (dig +nocrypto).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3628. [func] Report DNSKEY key id's when dumping the cache.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3626. [func] dig: NSID output now easier to read. [RT #21160]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3625. [bug] Don't send notify messages to machines outside of the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3624. [bug] Look for 'json_object_new_int64' when looking for a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the json library. [RT #34449]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3623. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3622. [tuning] Eliminate an unnecessary lock when incrementing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cache statistics. [RT #34339]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3621. [security] Incorrect bounds checking on private type 'keydata'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can lead to a remotely triggerable REQUIRE failure
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2013-4854). [RT #34238]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3620. [func] Added "rpz-client-ip" policy triggers, enabling
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RPZ responses to be configured on the basis of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the client IP address; this can be used, for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi example, to blacklist misbehaving recursive
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or stub resolvers. [RT #33605]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3618. [func] "rndc reload" now checks modification times of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi include files as well as master files to determine
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi whether to skip reloading a zone. [RT #33936]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3617. [bug] Named was failing to answer queries during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "rndc reload" [RT #34098]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3616. [bug] Change #3613 was incomplete. [RT #34177]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3615. [cleanup] "configure" now finishes by printing a summary
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of optional BIND features and whether they are
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi active or inactive. ("configure --enable-full-report"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi increases the verbosity of the summary.) [RT #31777]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3614. [port] Check for <linux/types.h>. [RT #34162]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3613. [bug] named could crash when deleting inline-signing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zones with "rndc delzone". [RT #34066]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3611. [bug] Improved resistance to a theoretical authentication
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi attack based on differential timing. [RT #33939]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3610. [cleanup] win32: Some executables had been omitted from the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi installer. [RT #34116]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3609. [bug] Corrected a possible deadlock in applications using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the export version of the isc_app API. [RT #33967]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3608. [port] win32: added todos.pl script to ensure all text files
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the win32 build depends on are converted to DOS
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi newline format. [RT #22067]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi message. [RT #34045]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3606. [func] "rndc flushtree" now flushes matching
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi records in the address database and bad cache
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi as well as the DNS cache. (Previously only the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DNS cache was flushed.) [RT #33970]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3605. [port] win32: Addressed several compatibility issues
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with newer versions of Visual Studio. [RT #33916]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3604. [bug] Fixed a compile-time error when building with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi JSON but not XML. [RT #33959]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3603. [bug] Install <isc/stat.h>. [RT #33956]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi integrate with named and serve DNS data.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Contributed by John Eaglesham of Yahoo.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3601. [bug] Added to PKCS#11 openssl patches a value len
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi attribute in DH derive key. [RT #33928]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3600. [cleanup] dig: Fixed a typo in the warning output when receiving
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an oversized response. [RT #33910]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3599. [tuning] Check for pointer equivalence in name comparisons.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3598. [cleanup] Improved portability of map file code. [RT #33820]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3597. [bug] Ensure automatic-resigning heaps are reconstructed
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when loading zones in map format. [RT #33381]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3596. [port] Updated win32 build documentation, added
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dnssec-verify. [RT #22067]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3595. [port] win32: Fix build problems introduced by change #3550.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3594. [maint] Update config.guess and config.sub. [RT #33816]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3593. [func] Update EDNS processing to better track remote server
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi capabilities. [RT #30655]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3592. [doc] Moved documentation of rndc command options to the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rndc man page. [RT #33506]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3591. [func] Use CRC-64 to detect map file corruption at load
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi time. [RT #33746]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3590. [bug] When using RRL on recursive servers, defer
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rate-limiting until after recursion is complete;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi also, use correct rcode for slipped NXDOMAIN
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi responses. [RT #33604]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3589. [func] Report serial numbers in when starting zone transfers.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Report accepted NOTIFY requests including serial.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3588. [bug] dig: addressed a memory leak in the sigchase code
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that could cause a shutdown crash. [RT #33733]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3587. [func] 'named -g' now checks the logging configuration but
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi does not use it. [RT #33473]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3585. [func] "rndc delzone -clean" option removes zone files
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when deleting a zone. [RT #33570]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3584. [security] Caching data from an incompletely signed zone could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi trigger an assertion failure in resolver.c
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2013-3919). [RT #33690]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3583. [bug] Address memory leak in GSS-API processing [RT #33574]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3582. [bug] Silence false positive warning regarding missing file
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi directive for inline slave zones. [RT #33662]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3580. [bug] Addressed a possible race in acache.c [RT #33602]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3579. [maint] Updates to PKCS#11 openssl patches, supporting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3577. [bug] Handle zero TTL values better. [RT #33411]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3576. [bug] Address a shutdown race when validating. [RT #33573]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3575. [func] Changed the logging category for RRL events from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 'queries' to 'query-errors'. [RT #33540]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3574. [doc] The 'hostname' keyword was missing from server-id
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi description in the named.conf man page. [RT #33476]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone names containing punctuation marks and other
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nonstandard characters. [RT #33419]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3572. [func] Threads are now enabled by default on most
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi operating systems. [RT #25483]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3571. [bug] Address race condition in dns_client_startresolve().
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3570. [bug] Check internal pointers are valid when loading map
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi files. [RT #33403]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi module, and added multithread support. [RT #33394]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3568. [cleanup] Add a product description line to the version file,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to be reported by named -v/-V. [RT #33366]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3567. [bug] Silence clang static analyzer warnings. [RT #33365]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3566. [func] Log when forwarding updates to master. [RT #33240]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3565. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3564. [bug] Improved handling of corrupted map files. [RT #33380]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3562. [func] Update map file header format to include a SHA-1 hash
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of the database content, so that corrupted map files
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can be rejected at load time. [RT #32459]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or NOTIMP. Adjust usage message. [RT #33363]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3560. [bug] isc-config.sh did not honor includedir and libdir
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when set via configure. [RT #33345]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3559. [func] Check that both forms of Sender Policy Framework
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi records exist or do not exist. [RT #33355]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3557. [bug] Reloading redirect zones was broken. [RT #33292]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3555. [bug] Address theoretical race conditions in acache.c
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (change #3553 was incomplete). [RT #33252]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3554. [bug] RRL failed to correctly rate-limit upward
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi referrals and failed to count dropped error
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi responses in the statistics. [RT #33225]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3553. [bug] Address suspected double free in acache. [RT #33252]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3552. [bug] Wrong getopt option string for 'nsupdate -r'.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3550. [func] Unified the internal and export versions of the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi BIND libraries, allowing external clients to use
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the same libraries as BIND. [RT #33131]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3549. [doc] Documentation for "request-nsid" was missing.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3548. [bug] The NSID request code in resolver.c was broken
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resulting in invalid EDNS options being sent.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3547. [bug] Some malformed unknown rdata records were not properly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi detected and rejected. [RT #33129]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3546. [func] Add EUI48 and EUI64 types. [RT #33082]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3545. [bug] RRL slip behavior was incorrect when set to 1.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3544. [contrib] check5011.pl: Script to report the status of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi managed keys as recorded in managed-keys.bind.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Contributed by Tony Finch <dot@dotat.at>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3543. [bug] Update socket structure before attaching to socket
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi manager after accept. [RT #33084]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3542. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3541. [bug] Parts of libdns were not properly initialized when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi built in libexport mode. [RT #33028]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3540. [test] libt_api: t_info and t_assert were not thread safe.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3539. [port] win32: timestamp format didn't match other platforms.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3538. [test] Running "make test" now requires loopback interfaces
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to be set up. [RT #32452]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3537. [tuning] Slave zones, when updated, now send NOTIFY messages
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to peers before being dumped to disk rather than
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi after. [RT #27242]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3536. [func] Add support for setting Differentiated Services Code
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Point (DSCP) values in named. Most configuration
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi options which take a "port" option (e.g.,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi listen-on, forwarders, also-notify, masters,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi notify-source, etc) can now also take a "dscp"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi option specifying a code point for use with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi outgoing traffic, if supported by the underlying
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi OS. [RT #27596]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3535. [bug] Minor win32 cleanups. [RT #32962]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3534. [bug] Extra text after an embedded NULL was ignored when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi parsing zone files. [RT #32699]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3531. [bug] win32: A uninitialized value could be returned on out
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of memory. [RT #32960]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3529. [func] Named now listens on both IPv4 and IPv6 interfaces
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi by default. Named previously only listened on IPv4
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi interfaces by default unless named was running in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi IPv6 only mode. [RT #32945]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3528. [func] New "dnssec-coverage" command scans the timing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi metadata for a set of DNSSEC keys and reports if a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi lapse in signing coverage has been scheduled
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi inadvertently. (Note: This tool depends on python;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi it will not be built or installed on systems that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi do not have a python interpreter.) [RT #28098]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3527. [compat] Add a URI to allow applications to explicitly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi request a particular XML schema from the statistics
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi channel, returning 404 if not supported. [RT #32481]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3526. [cleanup] Set up dependencies for unit tests correctly during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi build. [RT #32803]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3525. [func] Support for additional signing algorithms in rndc:
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi The -A option to rndc-confgen can be used to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi select the algorithm for the generated key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (The default is still hmac-md5; this may
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi change in a future release.) [RT #20363]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3524. [func] Added an alternate statistics channel in JSON format,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when the server is built with the json-c library:
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi http://[address]:[port]/json. [RT #32630]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3523. [contrib] Ported filesystem and ldap DLZ drivers to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dynamically-loadable modules, and added the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "wildcard" module based on a contribution from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3522. [bug] DLZ lookups could fail to return SERVFAIL when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi they ought to. [RT #32685]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3520. [bug] 'mctx' was not being referenced counted in some places
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi where it should have been. [RT #32794]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3519. [func] Full replay protection via four-way handshake is
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi now mandatory for rndc clients. Very old versions
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of rndc will no longer work. [RT #32798]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi so that all dns_rrl_rtype_t enum values fit regardless
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of whether it is teated as signed or unsigned by
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the compiler. [RT #32792]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3516. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3515. [port] '%T' is not portable in strftime(). [RT #32763]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3514. [bug] The ranges for valid key sizes in ddns-confgen and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rndc-confgen were too constrained. Keys up to 512
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi bits are now allowed for most algorithms, and up
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to 1024 bits for hmac-sha384 and hmac-sha512.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3513. [func] "dig -u" prints times in microseconds rather than
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi milliseconds. [RT #32704]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3512. [func] "rndc validation check" reports the current status
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of DNSSEC validation. [RT #21397]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3511. [doc] Improve documentation of redirect zones. [RT #32756]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3510. [func] "rndc status" and XML statistics channel now report
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server start and reconfiguration times. [RT #21048]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3509. [cleanup] Added a product line to version file to allow for
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi easy naming of different products (BIND
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi vs BIND ESV, for example). [RT #32755]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3508. [contrib] queryperf was incorrectly rejecting the -T option.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3507. [bug] Statistics channel XSL had a glitch when attempting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to chart query data before any queries had been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi received. [RT #32620]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3506. [func] When setting "max-cache-size" and "max-acache-size",
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the keyword "unlimited" is no longer defined as equal
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to 4 gigabytes (except on 32-bit platforms); it
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi means literally unlimited. [RT #32358]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3505. [bug] When setting "max-cache-size" and "max-acache-size",
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi larger values than 4 gigabytes could not be set
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi explicitly, though larger sizes were available
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when setting cache size to 0. This has been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi corrected; the full range is now available.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3504. [func] Add support for ACLs based on geographic location,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi using MaxMind GeoIP databases. Based on code
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi contributed by Ken Brownfield <kb@slide.com>.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3503. [doc] Clarify size_spec syntax. [RT #32449]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3502. [func] zone-statistics: "no" is now a synonym for "none",
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi instead of "terse". [RT #29165]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3501. [func] zone-statistics now takes three options: full,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi terse, and none. "yes" and "no" are retained as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi synonyms for full and terse, respectively. [RT #29165]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3500. [security] Support NAPTR regular expression validation on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi all platforms without using libregex, which
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi can be vulnerable to memory exhaustion attack
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (CVE-2013-2266). [RT #32688]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3499. [doc] Corrected ARM documentation of built-in zones.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3498. [bug] zone statistics for zones which matched a potential
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi empty zone could have their zone-statistics setting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3497. [func] When deleting a slave/stub zone using 'rndc delzone'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi report the files that were being used so they can
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi be cleaned up if desired. [RT #27899]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3496. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3495. [func] Support multiple response-policy zones (up to 32),
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi while improving RPZ performance. "response-policy"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi syntax now includes a "min-ns-dots" clause, with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi default 1, to exclude top-level domains from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi NSIP and NSDNAME checking. --enable-rpz-nsip and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi --enable-rpz-nsdname are now the default. [RT #32251]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3494. [func] DNS RRL: Blunt the impact of DNS reflection and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi amplification attacks by rate-limiting substantially-
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi identical responses. [RT #28130]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi contributed by Mark Goldfinch. [RT #32549]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3492. [bug] Fixed a regression in zone loading performance
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi due to lock contention. [RT #30399]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3491. [bug] Slave zones using inline-signing must specify a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi file name. [RT #31946]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3490. [bug] When logging RDATA during update, truncate if it's
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi too long. [RT #32365]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dns_dlzcreate() failed to properly initialize
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dlzdb.link. When cloning a rdataset do not copy
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the link contents. [RT #32651]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3488. [bug] Use after free error with DH generated keys. [RT #32649]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3487. [bug] Change 3444 was not complete. There was a additional
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi place where the NOQNAME proof needed to be saved.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3486. [bug] named could crash when using TKEY-negotiated keys
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that had been deleted and then recreated. [RT #32506]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3484. [bug] Some statistics were incorrectly rendered in XML.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3483. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3482. [func] dig +nssearch now prints name servers that don't
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi have address records (missing AAAA or A, or the name
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi doesn't exist). [RT #29348]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3481. [cleanup] Removed use of const const in atf.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3480. [bug] Silence logging noise when setting up zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statistics. [RT #32525]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3479. [bug] Address potential memory leaks in gssapi support
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi code. [RT #32405]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3478. [port] Fix a build failure in strict C99 environments
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3477. [func] Expand logging when adding records via DDNS update
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3476. [bug] "rndc zonestatus" could report a spurious "not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi found" error on inline-signing zones. [RT #29226]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3475. [cleanup] Changed name of 'map' zone file format (previously
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 'fast'). [RT #32458]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3474. [bug] nsupdate could assert when the local and remote
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi address families didn't match. [RT #22897]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3473. [bug] dnssec-signzone/verify could incorrectly report
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi an error condition due to an empty node above an
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi opt-out delegation lacking an NSEC3. [RT #32072]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3472. [bug] The active-connections counter in the socket
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statistics could underflow. [RT #31747]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3471. [bug] The number of UDP dispatches now defaults to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the number of CPUs even if -n has been set to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a higher value. [RT #30964]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3470. [bug] Slave zones could fail to dump when successfully
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi refreshing after an initial failure. [RT #31276]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3469. [bug] Handle DLZ lookup failures more gracefully. Improve
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi backward compatibility between versions of DLZ dlopen
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi API. [RT #32275]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3468. [security] RPZ rules to generate A records (but not AAAA records)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could trigger an assertion failure when used in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi conjunction with DNS64 (CVE-2012-5689). [RT #32141]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3467. [bug] Added checks in dnssec-keygen and dnssec-settime
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to check for delete date < inactive date. [RT #31719]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in DLZ example driver. [RT #32275]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3465. [bug] Handle isolated reserved ports. [RT #31778]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3464. [maint] Updates to PKCS#11 openssl patches, supporting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3462. [doc] Clarify server selection behavior of dig when using
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi -4 or -6 options. [RT #32181]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3461. [bug] Negative responses could incorrectly have AD=1
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi set. [RT #32237]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3460. [bug] Only link against readline where needed. [RT #29810]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3459. [func] Added -J option to named-checkzone/named-compilezone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to specify the path to the journal file. [RT #30958]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3458. [bug] Return FORMERR when presented with a overly long
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi domain named in a request. [RT #29682]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3456. [port] g++47: ATF failed to compile. [RT #32012]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3455. [contrib] queryperf: fix getopt option list. [RT #32338]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3454. [port] sparc64: improve atomic support. [RT #25182]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failed. [RT #31960]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3452. [bug] Accept duplicate singleton records. [RT #32329]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3451. [port] Increase per thread stack size from 64K to 1M.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3450. [bug] Stop logfileconfig system test spam system logs.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3449. [bug] gen.c: use the pre-processor to construct format
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi strings so that compiler can perform sanity checks;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi check the snprintf results. [RT #17576]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3448. [bug] The allow-query-on ACL was not processed correctly.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3447. [port] Add support for libxml2-2.9.x [RT #32231]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3446. [port] win32: Add source ID (see change #3400) to build.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3445. [bug] Warn about zone files with blank owner names
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi immediately after $ORIGIN directives. [RT #31848]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3444. [bug] The NOQNAME proof was not being returned from cached
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi insecure responses. [RT #21409]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rejected when generating keys. [RT #31927]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3442. [port] Net::DNS 0.69 introduced a non backwards compatible
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi change. [RT #32216]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3440. [bug] Reorder get_key_struct to not trigger a assertion when
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cleaning up due to out of memory error. [RT #32131]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3439. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi buffers with constant data. [RT #32064]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3436. [bug] Check malloc/calloc return values. [RT #32088]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3435. [bug] Cross compilation support in configure was broken.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3434. [bug] Pass client info to the DLZ findzone() entry
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi point in addition to lookup(). This makes it
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi possible for a database to answer differently
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi whether it's authoritative for a name depending
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on the address of the client. [RT #31775]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3433. [bug] dlz_findzone() did not correctly handle
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ISC_R_NOMORE. [RT #31172]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3432. [func] Multiple DLZ databases can now be configured.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi DLZ databases are searched in the order configured,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi unless set to "search no", in which case a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone can be configured to be retrieved from a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi particular DLZ database by using a "dlz <name>"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi option in the zone statement. DLZ databases can
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi support type "master" and "redirect" zones.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3431. [bug] ddns-confgen: Some valid key algorithms were
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi not accepted. [RT #31927]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3430. [bug] win32: isc_time_formatISO8601 was missing the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 'T' between the date and time. [RT #32044]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3429. [bug] dns_zone_getserial2 could a return success without
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi returning a valid serial. [RT #32007]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3428. [cleanup] dig: Add timezone to date output. [RT #2269]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3427. [bug] dig +trace incorrectly displayed name server
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi addresses instead of names. [RT #31641]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3426. [bug] dnssec-checkds: Clearer output when records are not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi found. [RT #31968]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3425. [bug] "acacheentry" reference counting was broken resulting
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in use after free. [RT #31908]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3424. [func] dnssec-dsfromkey now emits the hash without spaces.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3423. [bug] "rndc signing -nsec3param" didn't accept the full
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi range of possible values. Address portability issues.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3422. [bug] Added a clear error message for when the SOA does not
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi match the referral. [RT #31281]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3421. [bug] Named loops when re-signing if all keys are offline.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3420. [bug] Address VPATH compilation issues. [RT #31879]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3419. [bug] Memory leak on validation cancel. [RT #31869]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3418. [func] New XML schema (version 3.0) for the statistics channel
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi adds query type statistics at the zone level, and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi flattens the XML tree and uses compressed format to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi optimize parsing. Includes new XSL that permits
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi charting via the Google Charts API on browsers that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi support javascript in XSL. The old XML schema has been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi deprecated. [RT #30023]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3417. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3416. [bug] Named could die on shutdown if running with 128 UDP
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dispatches per interface. [RT #31743]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3415. [bug] named could die with a REQUIRE failure if a validation
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was canceled. [RT #31804]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3414. [bug] Address locking issues found by Coverity. [RT #31626]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3413. [func] Record the number of DNS64 AAAA RRsets that have been
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi synthesized. [RT #27636]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3412. [bug] Copy timeval structure from control message data.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to UDP. [RT #31690]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3410. [bug] Addressed Coverity warnings. [RT #31626]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi from X.509 certificates, for use with DANE
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (DNS-based Authentication of Named Entities).
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3408. [bug] Some DNSSEC-related options (update-check-ksk,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi are now legal in slave zones as long as
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi inline-signing is in use. [RT #31078]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3407. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3406. [bug] mem.c: Fix compilation errors when building with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3405. [bug] Handle time going backwards in acache. [RT #31253]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3404. [bug] dnssec-signzone: When re-signing a zone, remove
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RRSIG and NSEC records from nodes that used to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in-zone but are now below a zone cut. [RT #31556]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3402. [test] The IPv6 interface numbers used for system
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi tests were incorrect on some platforms. [RT #25085]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3401. [bug] Addressed Coverity warnings. [RT #31484]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3400. [cleanup] "named -V" can now report a source ID string, defined
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in the "srcid" file in the build tree and normally set
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to the most recent git hash. [RT #31494]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3399. [port] netbsd: rename 'bool' parameter to avoid namespace
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi clash. [RT #31515]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3398. [bug] SOA parameters were not being updated with inline
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi signed zones if the zone was modified while the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server was offline. [RT #29272]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3396. [bug] OPT records were incorrectly removed from signed,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi truncated responses. [RT #31439]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3394. [bug] Adjust 'successfully validated after lower casing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi signer' log level and category. [RT #31414]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3393. [bug] 'host -C' could core dump if REFUSED was received.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3392. [func] Keep statistics on REFUSED responses. [RT #31412]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3390. [bug] Silence clang compiler warnings. [RT #30417]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3388. [bug] Fixed several Coverity warnings.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Note: This change includes a fix for a bug that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi was subsequently determined to be an exploitable
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi security vulnerability, CVE-2012-5688: named could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi die on specific queries with dns64 enabled.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3387. [func] DS digest can be disabled at runtime with
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi disable-ds-digests. [RT #21581]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3386. [bug] Address locking violation when generating new NSEC /
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi NSEC3 chains. [RT #31224]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3385. [bug] named-checkconf didn't detect missing master lists
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in also-notify clauses. [RT #30810]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3384. [bug] Improved logging of crypto errors. [RT #30963]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3383. [security] A certain combination of records in the RBT could
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi cause named to hang while populating the additional
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi section of a response. [RT #31090]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3382. [bug] SOA query from slave used use-v6-udp-ports range,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if set, regardless of the address family in use.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3381. [contrib] Update queryperf to support more RR types.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3380. [bug] named could die if a nonexistent master list was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi referenced in a also-notify. [RT #31004]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3379. [bug] isc_interval_zero and isc_time_epoch should be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "const (type)* const". [RT #31069]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3378. [bug] Handle missing 'managed-keys-directory' better.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3377. [bug] Removed spurious newline from NSEC3 multiline
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi output. [RT #31044]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3376. [bug] Lack of EDNS support was being recorded without a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi successful response. [RT #30811]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3374. [bug] isc_parse_uint32 failed to return a range error on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi systems with 64 bit longs. [RT #30232]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3373. [bug] win32: open raw files in binary mode. [RT #30944]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3372. [bug] Silence spurious "deleted from unreachable cache"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi messages. [RT #30501]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3371. [bug] AD=1 should behave like DO=1 when deciding whether to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi add NS RRsets to the additional section or not.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3370. [bug] Address use after free while shutting down. [RT #30241]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3369. [bug] nsupdate terminated unexpectedly in interactive mode
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if built with readline support. [RT #29550]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi were not C++ safe.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3367. [bug] dns_dnsseckey_create() result was not being checked.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3366. [bug] Fixed Read-After-Write dependency violation for IA64
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi atomic operations. [RT #25181]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3365. [bug] Removed spurious newlines from log messages in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3364. [security] Named could die on specially crafted record.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3363. [bug] Need to allow "forward" and "fowarders" options
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in static-stub zones; this had been overlooked.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3362. [bug] Setting some option values to 0 in named.conf
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi could trigger an assertion failure on startup.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3361. [bug] "rndc signing -nsec3param" didn't work correctly
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when salt was set to '-' (no salt). [RT #30099]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3360. [bug] 'host -w' could die. [RT #18723]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3359. [bug] An improperly-formed TSIG secret could cause a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memory leak. [RT #30607]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3358. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3357. [port] Add support for libxml2-2.8.x [RT #30440]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi approaching their expiry, so they don't remain
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in caches after expiry. [RT #26429]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3355. [port] Use more portable awk in verify system test.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3354. [func] Improve OpenSSL error logging. [RT #29932]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3353. [bug] Use a single task for task exclusive operations.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3352. [bug] Ensure that learned server attributes timeout of the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi adb cache. [RT #29856]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memory debugging flags are set. [RT #30243]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3350. [bug] Memory read overrun in isc___mem_reallocate if
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ISC_MEM_DEBUGCTX memory debugging flag is set.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3349. [bug] Change #3345 was incomplete. [RT #30233]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3348. [bug] Prevent RRSIG data from being cached if a negative
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi record matching the covering type exists at a higher
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi trust level. Such data already can't be retrieved from
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the cache since change 3218 -- this prevents it
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi being inserted into the cache as well. [RT #26809]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3347. [bug] dnssec-settime: Issue a warning when writing a new
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi private key file would cause a change in the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi permissions of the existing file. [RT #27724]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3346. [security] Bad-cache data could be used before it was
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi initialized, causing an assert. [RT #30025]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3345. [bug] Addressed race condition when removing the last item
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or inserting the first item in an ISC_QUEUE.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3344. [func] New "dnssec-checkds" command checks a zone to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi determine which DS records should be published
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in the parent zone, or which DLV records should be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi published in a DLV zone, and queries the DNS to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi ensure that it exists. (Note: This tool depends
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi on python; it will not be built or installed on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi systems that do not have a python interpreter.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3343. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3342. [bug] Change #3314 broke saving of stub zones to disk
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resulting in excessive cpu usage in some cases.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3341. [func] New "dnssec-verify" command checks a signed zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to ensure correctness of signatures and of NSEC/NSEC3
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi chains. [RT #23673]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3340. [func] Added new 'map' zone file format, which is an image
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of a zone database that can be loaded directly into
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi memory via mmap(), allowing much faster zone loading.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (Note: Because of pointer sizes and other
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi considerations, this file format is platform-dependent;
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi 'map' zone files cannot always be transferred from one
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi server to another.) [RT #25419]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3339. [func] Allow the maximum supported rsa exponent size to be
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi specified: "max-rsa-exponent-size <value>;" [RT #29228]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3338. [bug] Address race condition in units tests: asyncload_zone
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi and asyncload_zt. [RT #26100]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3337. [bug] Change #3294 broke support for the multiple keys
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in controls. [RT #29694]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3336. [func] Maintain statistics for RRsets tagged as "stale".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3335. [func] nslookup: return a nonzero exit code when unable
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to get an answer. [RT #29492]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3334. [bug] Hold a zone table reference while performing a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi asynchronous load of a zone. [RT #28326]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3333. [bug] Setting resolver-query-timeout too low can cause
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi named to not recover if it loses connectivity.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3331. [security] dns_rdataslab_fromrdataset could produce bad
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi rdataslabs. [RT #29644]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3330. [func] Fix missing signatures on NOERROR results despite
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi RPZ rewriting. Also
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - add optional "recursive-only yes|no" to the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi response-policy statement
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - add optional "max-policy-ttl" to the response-policy
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi statement to limit the false data that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "recursive-only no" can introduce into
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi resolvers' caches
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - add a RPZ performance test to bin/tests/system/rpz
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when queryperf is available.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - the encoding of PASSTHRU action to "rpz-passthru".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (The old encoding is still accepted.)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3329. [bug] Handle RRSIG signer-name case consistently: We
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi generate RRSIG records with the signer-name in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi lower case. We accept them with any case, but if
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi they fail to validate, we try again in lower case.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3328. [bug] Fixed inconsistent data checking in dst_parse.c.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to 'filter-aaaa-on-v4' but applies to IPv6
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi connections. (Use "configure --enable-filter-aaaa"
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to enable this option.) [RT #27308]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3326. [func] Added task list statistics: task model, worker
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi threads, quantum, tasks running, tasks ready.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3325. [func] Report cache statistics: memory use, number of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi nodes, number of hash buckets, hit and miss counts.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3324. [test] Add better tests for ADB stats [RT #27057]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3323. [func] Report the number of buckets the resolver is using.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3322. [func] Monitor the number of active TCP and UDP dispatches.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3321. [func] Monitor the number of recursive fetches and the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi number of open sockets, and report these values in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the statistics channel. [RT #27054]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3320. [func] Added support for monitoring of recursing client
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi count. [RT #27009]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3319. [func] Added support for monitoring of ADB entry count and
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi hash size. [RT #27057]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3318. [tuning] Reduce the amount of work performed while holding a
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi bucket lock when finished with a fetch context.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3316. [tuning] Improved locking performance when recursing.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3315. [tuning] Use multiple dispatch objects for sending upstream
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi queries; this can improve performance on busy
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi multiprocessor systems by reducing lock contention.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3314. [bug] The masters list could be updated while stub_callback
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi or refresh_callback were using it. [RT #26732]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3313. [protocol] Add TLSA record type. [RT #28989]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3311. [bug] Abort the zone dump if zone->db is NULL in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zone.c:zone_gotwritehandle. [RT #29028]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3310. [test] Increase table size for mutex profiling. [RT #28809]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3309. [bug] resolver.c:fctx_finddone() was not thread safe.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3308. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3305. [func] Add wire format lookup method to sdb. [RT #28563]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3303. [bug] named could die when reloading. [RT #28606]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3302. [bug] dns_dnssec_findmatchingkeys could fail to find
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi keys if the zone name contained character that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi required special mappings. [RT #28600]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3301. [contrib] Update queryperf to build on darwin. Add -R flag
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi for non-recursive queries. [RT #28565]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3300. [bug] Named could die if gssapi was enabled in named.conf
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi but was not compiled in. [RT #28338]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3299. [bug] Make SDB handle errors from database drivers better.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3298. [bug] Named could dereference a NULL pointer in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi zmgr_start_xfrin_ifquota if the zone was being removed.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3297. [bug] Named could die on a malformed master file. [RT #28467]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3296. [bug] Named could die with a INSIST failure in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi client.c:exit_check. [RT #28346]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3295. [bug] Adjust isc_time_secondsastimet range check to be more
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi portable. [RT # 26542]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi error. [RT #28265]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3293. [func] nsupdate: list supported type. [RT #28261]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3292. [func] Log messages in the axfr stream at debug 10.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3291. [port] Fixed a build error on systems without ENOTSUP.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3288. [bug] dlz_destroy() function wasn't correctly registered
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi by the DLZ dlopen driver. [RT #28056]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3286. [bug] Managed key maintenance timer could fail to start
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi after 'rndc reconfig'. [RT #26786]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3285. [bug] val-frdataset was incorrectly disassociated in
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi proveunsecure after calling startfinddlvsep.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3284. [bug] Address race conditions with the handling of
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3283. [bug] Raw zones with with more than 512 records in a RRset
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi failed to load. [RT #27863]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3282. [bug] Restrict the TTL of NS RRset to no more than that
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi of the old NS RRset when replacing it.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [RT #27792] [RT #27884]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3281. [bug] SOA refresh queries could be treated as cancelled
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi despite succeeding over the loopback interface.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3280. [bug] Potential double free of a rdataset on out of memory
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi with DNS64. [RT #27762]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3279. [bug] Hold a internal reference to the zone while performing
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi a asynchronous load. Address potential memory leak
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi if the asynchronous is cancelled. [RT #27750]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3278. [bug] Make sure automatic key maintenance is started
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi when "auto-dnssec maintain" is turned on during
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi "rndc reconfig". [RT #26805]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3276. [bug] win32: ns_os_openfile failed to return NULL on
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi safe_open failure. [RT #27696]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi option had been misspelled as '-clear'. (To avoid
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi future confusion, both options now work.) [RT #27173]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3274. [placeholder]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3273. [bug] AAAA responses could be returned in the additional
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi section even when filter-aaaa-on-v4 was in use.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi3272. [func] New "rndc zonestatus" command prints information
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi about the specified zone. [RT #21671]
lib/dns/rbtdb.c:iszonesecure. [RT #26913]
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3201. [func] 'rndc querylog' can now be given an on/off parameter
dnssec.h. [RT #26415]
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
3186. [bug] Version/db mis-match in rpz code. [RT #26180]
sample external DLZ module in contrib/dlz/example.
- replace "NO-OP" named.conf policy override with
3169. [func] Catch db/version mis-matches when calling dns_db_*().
3163. [bug] Use finer-grained locking in client.c to address
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
drivers (e.g., mysql, postgresql, etc). [RT #25710]
3145. [test] Capture output of ATF unit tests in "./atf.out" if
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which